yuriw-2021-03-17_23:47:24-rados-wip-yuri6-testing-3.17.21-distro-basic-smithi/5975102

Description: rados/cephadm/smoke-roleless/{1-start 2-services/{basic rgw} 3-final distro/centos_8.2_kubic_stable}

Log: http://qa-proxy.ceph.com/teuthology/yuriw-2021-03-17_23:47:24-rados-wip-yuri6-testing-3.17.21-distro-basic-smithi/5975102/teuthology.log

Failure Reason:

SELinux denials found on ubuntu@smithi038.front.sepia.ceph.com: ['type=AVC msg=audit(1616051799.438:8176): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/host-details.json" dev="overlay" ino=1574967 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051802.833:8200): avc: denied { read } for pid=25150 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051707.815:7649): avc: denied { search } for pid=25150 comm="safe_timer" name="var" dev="sda1" ino=1183149 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051870.466:8503): avc: denied { append } for pid=42730 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.060:7042): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051797.996:8145): avc: denied { write } for pid=25150 comm="rstore_compact" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.062:6633): avc: denied { search } for pid=34150 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.059:6723): avc: denied { search } for pid=34150 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051712.438:7721): avc: denied { search } for pid=40781 comm="grafana-server" name="etc" dev="sda1" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051568.438:6965): avc: denied { search } for pid=40781 comm="grafana-server" name="etc" dev="sda1" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051584.778:7096): avc: denied { write } for pid=25126 comm="conmon" name="socket" dev="tmpfs" ino=14667 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051650.464:7392): avc: denied { connect } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051784.132:8108): avc: denied { open } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051490.437:6552): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc" dev="sda1" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051943.063:8886): avc: denied { search } for pid=34150 comm="node_exporter" name="user" dev="tmpfs" ino=13870 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.059:8217): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy0/cpuinfo_max_freq" dev="sysfs" ino=29967 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.059:8688): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=161750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.060:6731): avc: denied { open } for pid=34150 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/net/eno1/addr_assign_type" dev="sysfs" ino=36729 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051514.727:6772): avc: denied { search } for pid=25523 comm="safe_timer" name="libpod-c85e7388139cde13396994da6ee9d29bf47c41b4da629ccf04835de0ad787d55.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051873.059:8538): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=161740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051723.062:7779): avc: denied { read } for pid=34150 comm="node_exporter" name="mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051593.059:7148): avc: denied { read } for pid=34150 comm="node_exporter" name="mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051723.059:7768): avc: denied { read } for pid=34150 comm="node_exporter" name="stat" dev="proc" ino=4026532033 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051873.062:8557): avc: denied { search } for pid=34150 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051800.229:8188): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051517.748:6777): avc: denied { read } for pid=25150 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051779.706:7987): avc: denied { search } for pid=56187 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051779.706:7985): avc: denied { search } for pid=56187 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051655.129:7407): avc: denied { read } for pid=74744 comm="msgr-worker-1" path="pipe:[269468]" dev="pipefs" ino=269468 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051657.801:7444): avc: denied { read } for pid=25150 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.060:8695): avc: denied { search } for pid=34150 comm="node_exporter" name="1" dev="proc" ino=157331 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051733.060:7868): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=161750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.071:8893): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=394712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.438:7803): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051784.132:8108): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=394712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051500.465:6682): avc: denied { setopt } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051779.882:7993): avc: denied { getattr } for pid=25523 comm="mgr-fin" path="/usr/share/zoneinfo/UTC" dev="overlay" ino=1312345 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051496.439:6676): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.059:6718): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.063:6740): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.439:7297): avc: denied { fork } for pid=40781 comm="grafana-server" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051933.059:8801): avc: denied { search } for pid=34150 comm="node_exporter" name="1" dev="proc" ino=157331 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051726.309:7783): avc: denied { append } for pid=56187 comm="log" path="/var/log/ceph/ceph-osd.3.log" dev="sda1" ino=396225 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051922.955:8677): avc: denied { search } for pid=44966 comm="safe_timer" name="/" dev="overlay" ino=1970645 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c812 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051866.615:8478): avc: denied { search } for pid=25523 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051491.754:6576): avc: denied { write } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051655.129:7408): avc: denied { write } for pid=74744 comm="msgr-worker-1" laddr=172.21.15.38 lport=48358 faddr=172.21.15.38 fport=3300 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.058:8206): avc: denied { open } for pid=34150 comm="node_exporter" path="/sys/class/hwmon" dev="sysfs" ino=20770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051636.445:7274): avc: denied { search } for pid=56187 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970683 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c367,c973 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.178:8412): avc: denied { read } for pid=41370 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.059:8398): avc: denied { read } for pid=34150 comm="node_exporter" name="mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051860.464:8466): avc: denied { write } for pid=42730 comm="prometheus" path="socket:[355417]" dev="sockfs" ino=355417 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.058:8207): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/net/arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051873.059:8536): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/7" dev="proc" ino=153420 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.484:7811): avc: denied { search } for pid=25126 comm="conmon" name="systemd" dev="tmpfs" ino=14385 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051639.406:7342): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.484:7811): avc: denied { search } for pid=25126 comm="conmon" name="journal" dev="tmpfs" ino=14663 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051490.438:6558): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/osd-device-details.json" dev="overlay" ino=1574969 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.438:8418): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051492.742:6604): avc: denied { dac_read_search } for pid=25150 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051660.465:7453): avc: denied { getattr } for pid=42730 comm="prometheus" laddr=172.21.15.38 lport=53874 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.819:7817): avc: denied { search } for pid=25150 comm="safe_timer" name="/" dev="overlay" ino=790638 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.059:8396): avc: denied { search } for pid=34150 comm="node_exporter" name="fs" dev="proc" ino=161749 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051933.059:8805): avc: denied { read } for pid=34150 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051924.511:8740): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051872.022:8524): avc: denied { use } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051584.504:7082): avc: denied { read } for pid=50713 comm="msgr-worker-0" path="pipe:[200467]" dev="pipefs" ino=200467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051799.437:8171): avc: denied { lock } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051655.439:7417): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.058:8868): avc: denied { read } for pid=34150 comm="node_exporter" name="file-nr" dev="proc" ino=161750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.059:8685): avc: denied { search } for pid=34150 comm="node_exporter" name="7" dev="proc" ino=153420 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051933.060:8816): avc: denied { search } for pid=34150 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616051500.465:6684): avc: denied { connect } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.060:7471): avc: denied { read } for pid=34150 comm="node_exporter" name="file-nr" dev="proc" ino=161750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.059:8078): avc: denied { read } for pid=34150 comm="node_exporter" name="entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051870.466:8499): avc: denied { connect } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051926.988:8774): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.437:8898): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051927.706:8777): avc: denied { search } for pid=44966 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970645 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c812 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051571.075:7019): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=394712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051710.465:7699): avc: denied { search } for pid=42730 comm="prometheus" name="etc" dev="sda1" ino=1970586 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051568.438:6965): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051707.741:7647): avc: denied { open } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.058:8865): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051707.481:7636): avc: denied { search } for pid=25126 comm="conmon" name="journal" dev="tmpfs" ino=14663 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051781.997:8044): avc: denied { write } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051927.881:8779): avc: denied { search } for pid=25150 comm="safe_timer" name="mon.smithi038" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051960.669:8914): avc: denied { shutdown } for pid=25523 comm="msgr-worker-0" laddr=172.21.15.38 lport=57228 faddr=172.21.15.38 fport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051780.109:8007): avc: denied { open } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051798.217:8150): avc: denied { search } for pid=25523 comm="safe_timer" name="usr" dev="sda1" ino=789155 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051922.951:8675): avc: denied { open } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.059:6619): avc: denied { open } for pid=34150 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=20785 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051789.087:8119): avc: denied { getattr } for pid=95286 comm="pgrep" path="/proc/25126" dev="proc" ino=124122 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051798.835:8160): avc: denied { open } for pid=56187 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051852.542:8359): avc: denied { getattr } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051592.777:7134): avc: denied { unlink } for pid=25150 comm="rocksdb:high0" name="000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051781.438:8039): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051782.830:8065): avc: denied { getattr } for pid=25150 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.059:8219): avc: denied { getattr } for pid=34150 comm="node_exporter" name="/" dev="tmpfs" ino=14377 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051799.438:8174): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051733.058:7848): avc: denied { read } for pid=34150 comm="node_exporter" name="fd" dev="proc" ino=161740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051960.669:8916): avc: denied { setopt } for pid=25523 comm="msgr-worker-2" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051941.716:8840): avc: denied { write } for pid=44966 comm="msgr-worker-0" laddr=172.21.15.38 lport=6814 faddr=172.21.15.175 fport=54768 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051567.759:6944): avc: denied { search } for pid=25150 comm="safe_timer" name="/" dev="overlay" ino=790638 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051940.438:8829): avc: denied { lock } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051711.470:7714): avc: denied { use } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051780.466:8017): avc: denied { append } for pid=42730 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051794.652:8140): avc: denied { write } for pid=56187 comm="msgr-worker-1" laddr=172.21.15.38 lport=6826 faddr=172.21.15.175 fport=54834 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051707.492:7643): avc: denied { read } for pid=44966 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.827:7823): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051583.060:7073): avc: denied { search } for pid=34150 comm="node_exporter" name="fs" dev="proc" ino=161749 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051672.807:7502): avc: denied { search } for pid=25150 comm="safe_timer" name="mon.smithi038" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051640.438:7350): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/hosts-overview.json" dev="overlay" ino=1574968 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051660.465:7450): avc: denied { setopt } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051643.059:7380): avc: denied { read } for pid=34150 comm="node_exporter" name="entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051660.466:7456): avc: denied { append } for pid=42730 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.758:6757): avc: denied { write } for pid=25126 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051923.889:8715): avc: denied { search } for pid=25126 comm="conmon" name="journal" dev="tmpfs" ino=14663 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051568.438:6968): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051655.438:7416): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051707.492:7643): avc: denied { open } for pid=44966 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051712.439:7723): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051870.282:8489): avc: denied { append } for pid=56187 comm="log" path="/var/log/ceph/ceph-osd.3.log" dev="sda1" ino=396225 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051531.226:6818): avc: denied { open } for pid=50713 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051729.074:7831): avc: denied { search } for pid=92220 comm="pgrep" name="25126" dev="proc" ino=124122 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051943.062:8882): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051520.465:6787): avc: denied { getattr } for pid=42730 comm="prometheus" laddr=172.21.15.38 lport=46876 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051925.439:8759): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.059:7459): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/7" dev="proc" ino=153420 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051782.931:8068): avc: denied { append } for pid=25523 comm="log" path="/var/log/ceph/ceph-mgr.smithi038.bbeteq.log" dev="sda1" ino=396149 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051873.059:8535): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051567.051:6940): avc: denied { getattr } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051643.058:7364): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051942.215:8857): avc: denied { signal } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051657.041:7438): avc: denied { sendto } for pid=25126 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051493.068:6636): avc: denied { append } for pid=42730 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051707.729:7645): avc: denied { read } for pid=25523 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051584.510:7086): avc: denied { search } for pid=40781 comm="grafana-server" name="var" dev="sda1" ino=1968491 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051931.012:8791): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051531.771:6819): avc: denied { write } for pid=25126 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051584.327:7078): avc: denied { search } for pid=50713 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051509.863:6701): avc: denied { read } for pid=25523 comm="mgr-fin" name="localtime" dev="sda1" ino=394694 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051873.061:8552): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.188:7799): avc: denied { read } for pid=44966 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051514.439:6770): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/cephfs-overview.json" dev="sda1" ino=1574966 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051493.062:6633): avc: denied { search } for pid=34150 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051852.019:8347): avc: denied { write } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051641.023:7362): avc: denied { write } for pid=25126 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051640.464:7351): avc: denied { search } for pid=42730 comm="prometheus" name="/" dev="overlay" ino=1970479 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.059:8393): avc: denied { read } for pid=34150 comm="node_exporter" name="arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051590.465:7123): avc: denied { write } for pid=42730 comm="prometheus" path="socket:[306533]" dev="sockfs" ino=306533 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051583.058:7064): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051926.975:8772): avc: denied { search } for pid=25523 comm="safe_timer" name="libpod-c85e7388139cde13396994da6ee9d29bf47c41b4da629ccf04835de0ad787d55.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051514.727:6772): avc: denied { open } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051584.584:7089): avc: denied { search } for pid=56187 comm="safe_timer" name="/" dev="overlay" ino=1970683 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c367,c973 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051711.765:7720): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=394712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051643.059:7382): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051727.439:7807): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/cephfs-overview.json" dev="overlay" ino=1574966 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051567.039:6938): avc: denied { open } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.060:7738): avc: denied { open } for pid=34150 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/net/eno1/addr_assign_type" dev="sysfs" ino=36729 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051640.437:7349): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051493.060:6629): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="overlay" ino=1968497 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c65,c509 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051523.060:6805): avc: denied { search } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=156443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.437:7291): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051530.834:6814): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051637.438:7296): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051733.058:7849): avc: denied { read } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.061:8226): avc: denied { search } for pid=34150 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051779.716:7992): avc: denied { read } for pid=25150 comm="msgr-worker-2" path="pipe:[122661]" dev="pipefs" ino=122661 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.061:8094): avc: denied { search } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=156443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051567.759:6944): avc: denied { dac_read_search } for pid=25150 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051663.059:7461): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=161740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051568.438:6968): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051663.061:7476): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051643.059:7388): avc: denied { search } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=156443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051798.718:8156): avc: denied { write } for pid=25150 comm="msgr-worker-2" laddr=172.21.15.38 lport=3300 faddr=172.21.15.175 fport=56714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.059:7735): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051586.437:7107): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.437:7295): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051520.465:6783): avc: denied { search } for pid=42730 comm="prometheus" name="/" dev="overlay" ino=1970479 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051593.059:7146): avc: denied { search } for pid=34150 comm="node_exporter" name="fs" dev="proc" ino=161749 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051593.058:7135): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051657.801:7443): avc: denied { search } for pid=25150 comm="safe_timer" name="/" dev="overlay" ino=790638 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051779.993:7995): avc: denied { write } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051793.607:8128): avc: denied { write } for pid=40781 comm="grafana-server" name="grafana" dev="sda1" ino=1970622 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051713.060:7738): avc: denied { read } for pid=34150 comm="node_exporter" name="eno1" dev="sysfs" ino=36721 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.060:7740): avc: denied { search } for pid=34150 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051870.465:8495): avc: denied { signal } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051922.963:8679): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=394712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051568.766:6974): avc: denied { search } for pid=25126 comm="conmon" name="systemd" dev="tmpfs" ino=14385 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051779.706:7985): avc: denied { read } for pid=56187 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.394:7289): avc: denied { open } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051707.815:7649): avc: denied { search } for pid=25150 comm="safe_timer" name="/" dev="overlay" ino=790638 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.058:8207): avc: denied { read } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051707.481:7636): avc: denied { write } for pid=25126 comm="conmon" name="socket" dev="tmpfs" ino=14667 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051800.000:8178): avc: denied { use } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051780.465:8012): avc: denied { setopt } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051586.438:7109): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051933.060:8817): avc: denied { search } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=156443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051799.437:8169): avc: denied { search } for pid=40781 comm="grafana-server" name="dashboards" dev="sda1" ino=1574963 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051655.439:7419): avc: denied { read } for pid=40781 comm="grafana-server" name="radosgw-sync-overview.json" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051943.438:8900): avc: denied { read open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051640.511:7361): avc: denied { open } for pid=44966 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051866.615:8479): avc: denied { open } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.059:7467): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=48082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051655.438:7415): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051590.465:7122): avc: denied { getattr } for pid=42730 comm="prometheus" laddr=172.21.15.38 lport=35927 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.060:8400): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.059:8071): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="overlay" ino=1968497 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c65,c509 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051520.775:6792): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.060:8692): avc: denied { open } for pid=34150 comm="node_exporter" path="/sys/class/net" dev="sysfs" ino=20806 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051673.059:7507): avc: denied { read } for pid=34150 comm="node_exporter" name="fd" dev="proc" ino=161740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.060:7038): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/net/sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051933.060:8817): avc: denied { search } for pid=34150 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051568.439:6971): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/host-details.json" dev="overlay" ino=1574967 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051585.030:7102): avc: denied { search } for pid=41370 comm="safe_timer" name="/" dev="overlay" ino=1970626 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c358,c658 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051800.465:8193): avc: denied { getattr } for pid=42730 comm="prometheus" laddr=172.21.15.38 lport=47475 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051571.367:7020): avc: denied { signal } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051643.058:7368): avc: denied { read } for pid=34150 comm="node_exporter" name="file-nr" dev="proc" ino=161750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.058:8872): avc: denied { read } for pid=34150 comm="node_exporter" name="ce_count" dev="sysfs" ino=48270 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051508.439:6698): avc: denied { read open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051655.482:7424): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.059:7030): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051922.880:8672): avc: denied { getattr } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.061:8224): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=161750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.062:8229): avc: denied { search } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=156443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051733.060:7868): avc: denied { read } for pid=34150 comm="node_exporter" name="file-nr" dev="proc" ino=161750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051643.058:7369): avc: denied { read } for pid=34150 comm="node_exporter" name="arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051733.059:7855): avc: denied { read } for pid=34150 comm="node_exporter" name="addr_assign_type" dev="sysfs" ino=36729 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051870.651:8508): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=394712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051707.479:7628): avc: denied { append } for pid=25150 comm="log" path="/var/log/ceph/ceph-mon.smithi038.log" dev="sda1" ino=396143 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.059:8684): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/7" dev="proc" ino=153420 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051930.466:8789): avc: denied { read } for pid=42730 comm="prometheus" path="socket:[365663]" dev="sockfs" ino=365663 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.059:7733): avc: denied { read } for pid=34150 comm="node_exporter" name="sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051873.060:8548): avc: denied { search } for pid=34150 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.059:8393): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/net/arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.059:8396): avc: denied { read } for pid=34150 comm="node_exporter" name="file-nr" dev="proc" ino=161750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051655.438:7412): avc: denied { getattr } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051873.059:8537): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051960.669:8923): avc: denied { getattr } for pid=25523 comm="msgr-worker-1" laddr=172.21.15.38 lport=58508 faddr=172.21.15.38 fport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051592.767:7127): avc: denied { create } for pid=25150 comm="rstore_compact" name="000015.log" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051870.651:8508): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=394712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051853.060:8402): avc: denied { getattr } for pid=34150 comm="node_exporter" name="/" dev="tmpfs" ino=14377 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051643.058:7375): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/fs/xfs/stats/stats" dev="sysfs" ino=50015 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051851.366:8339): avc: denied { signal } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051638.804:7336): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="tmpfs" ino=14376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051566.959:6936): avc: denied { search } for pid=44966 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970645 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c812 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051799.438:8175): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="sda1" ino=1574965 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051671.176:7498): avc: denied { search } for pid=50713 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970664 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c77,c661 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.060:6626): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051955.566:8910): avc: denied { open } for pid=42730 comm="prometheus" path="/prometheus" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051870.651:8509): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051793.607:8128): avc: denied { add_name } for pid=40781 comm="grafana-server" name="grafana.db-journal" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051709.438:7678): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051672.588:7500): avc: denied { search } for pid=41370 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051723.060:7775): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=161750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.060:7047): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=161750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051640.437:7349): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.063:6744): avc: denied { search } for pid=34150 comm="node_exporter" name="host" dev="sda1" ino=1970467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c65,c509 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051803.061:8227): avc: denied { search } for pid=34150 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616051663.060:7473): avc: denied { read } for pid=34150 comm="node_exporter" name="entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051512.747:6708): avc: denied { search } for pid=25150 comm="safe_timer" name="mon.smithi038" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051709.438:7677): avc: denied { lock } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.060:7051): avc: denied { search } for pid=34150 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051798.998:8167): avc: denied { read } for pid=25150 comm="fn_monstore" path="/var/lib/ceph/mon/ceph-smithi038/store.db/000023.sst" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051636.207:7269): avc: denied { write } for pid=50713 comm="msgr-worker-0" laddr=172.21.15.38 lport=6822 faddr=172.21.15.175 fport=34958 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051643.058:7374): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.060:8089): avc: denied { getattr } for pid=34150 comm="node_exporter" name="/" dev="tmpfs" ino=14377 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.059:8690): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051782.830:8066): avc: denied { search } for pid=25150 comm="safe_timer" name="mon.smithi038" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051796.437:8143): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc" dev="sda1" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051636.204:7265): avc: denied { read } for pid=50713 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051926.027:8764): avc: denied { read } for pid=25126 comm="conmon" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051943.437:8899): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051595.565:7157): avc: denied { read } for pid=42730 comm="prometheus" name="data" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.188:7798): avc: denied { search } for pid=44966 comm="safe_timer" name="/" dev="overlay" ino=1970645 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c812 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.060:6733): avc: denied { search } for pid=34150 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051926.321:8769): avc: denied { search } for pid=41370 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970626 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c358,c658 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051592.777:7134): avc: denied { remove_name } for pid=25150 comm="rocksdb:high0" name="000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051568.439:6970): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051523.059:6802): avc: denied { read } for pid=34150 comm="node_exporter" name="entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051490.749:6573): avc: denied { write } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db/000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051490.581:6570): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051779.993:7997): avc: denied { write } for pid=25126 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051852.542:8359): avc: denied { search } for pid=25523 comm="safe_timer" name="etc" dev="sda1" ino=1443992 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051593.060:7150): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051781.439:8041): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051584.776:7093): avc: denied { write } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db/000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.071:8893): avc: denied { getattr } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051494.380:6671): avc: denied { write } for pid=44966 comm="msgr-worker-1" laddr=172.21.15.38 lport=6816 faddr=172.21.15.175 fport=59328 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.061:6630): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051860.464:8464): avc: denied { connect } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051733.058:7850): avc: denied { read } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051655.660:7430): avc: denied { read } for pid=44966 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.439:7805): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051566.522:6931): avc: denied { search } for pid=56187 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051789.087:8121): avc: denied { getattr } for pid=95286 comm="pgrep" path="/proc/25150" dev="proc" ino=127332 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051490.594:6571): avc: denied { search } for pid=25523 comm="safe_timer" name="etc" dev="sda1" ino=1443992 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051514.739:6774): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=394712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051643.058:7367): avc: denied { read } for pid=34150 comm="node_exporter" name="fd" dev="proc" ino=161740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051639.394:7340): avc: denied { search } for pid=25523 comm="safe_timer" name="/" dev="overlay" ino=1443983 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051593.060:7152): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.437:8413): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051650.464:7390): avc: denied { create } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051710.465:7701): avc: denied { setopt } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.058:8384): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/7" dev="proc" ino=153420 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051873.062:8557): avc: denied { search } for pid=34150 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.071:8892): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051858.578:8458): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=394712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051783.059:8070): avc: denied { signal } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051871.439:8521): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051930.465:8784): avc: denied { create } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051723.060:7775): avc: denied { search } for pid=34150 comm="node_exporter" name="fs" dev="proc" ino=161749 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051924.511:8738): avc: denied { search } for pid=40781 comm="grafana-server" name="/" dev="overlay" ino=1968482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051922.963:8679): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051782.590:8063): avc: denied { read } for pid=50713 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.063:6743): avc: denied { search } for pid=34150 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616051707.815:7649): avc: denied { dac_read_search } for pid=25150 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051869.889:8485): avc: denied { getattr } for pid=25523 comm="mgr-fin" path="/usr/share/zoneinfo/UTC" dev="overlay" ino=1312345 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051851.332:8335): avc: denied { write } for pid=74283 comm="msgr-worker-1" laddr=172.21.15.38 lport=54444 faddr=172.21.15.38 fport=6802 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051709.439:7680): avc: denied { read open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051784.132:8108): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051856.006:8448): avc: denied { search } for pid=25126 comm="conmon" name="systemd" dev="tmpfs" ino=14385 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051655.438:7415): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051638.272:7320): avc: denied { search } for pid=41370 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051733.058:7847): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051779.882:7993): avc: denied { getattr } for pid=25523 comm="mgr-fin" name="UTC" dev="sda1" ino=1312345 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051870.282:8488): avc: denied { search } for pid=56187 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051799.438:8176): avc: denied { read } for pid=40781 comm="grafana-server" name="host-details.json" dev="sda1" ino=1574967 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051512.964:6715): avc: denied { read } for pid=25150 comm="msgr-worker-2" path="socket:[166319]" dev="sockfs" ino=166319 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051712.438:7721): avc: denied { getattr } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051852.866:8364): avc: denied { getattr } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.059:6621): avc: denied { open } for pid=34150 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=48270 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.059:8215): avc: denied { open } for pid=34150 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy0/cpuinfo_max_freq" dev="sysfs" ino=29967 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051779.993:7997): avc: denied { write } for pid=25126 comm="conmon" name="socket" dev="tmpfs" ino=14667 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051933.059:8799): avc: denied { search } for pid=34150 comm="node_exporter" name="7" dev="proc" ino=153420 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.062:8881): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.061:7752): avc: denied { search } for pid=34150 comm="node_exporter" name="host" dev="sda1" ino=1970467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c65,c509 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051573.060:7039): avc: denied { read } for pid=34150 comm="node_exporter" name="cpuinfo_max_freq" dev="sysfs" ino=30065 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.059:8390): avc: denied { open } for pid=34150 comm="node_exporter" path="/sys/class/net" dev="sysfs" ino=20806 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051800.465:8194): avc: denied { write } for pid=42730 comm="prometheus" path="socket:[345247]" dev="sockfs" ino=345247 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051640.465:7359): avc: denied { read } for pid=42730 comm="prometheus" path="socket:[317506]" dev="sockfs" ino=317506 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.394:7289): avc: denied { search } for pid=25523 comm="safe_timer" name="etc" dev="sda1" ino=1443992 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051643.059:7381): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051520.763:6790): avc: denied { open } for pid=25523 comm="safe_timer" path="/proc/meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051926.321:8769): avc: denied { read } for pid=41370 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051673.059:7510): avc: denied { read } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051650.464:7394): avc: denied { write } for pid=42730 comm="prometheus" path="socket:[313231]" dev="sockfs" ino=313231 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051926.988:8774): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=394712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051933.059:8804): avc: denied { read } for pid=34150 comm="node_exporter" name="cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.060:7470): avc: denied { open } for pid=34150 comm="node_exporter" path="/sys/fs/xfs/dm-4/stats/stats" dev="sysfs" ino=50085 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.438:7800): avc: denied { search } for pid=40781 comm="grafana-server" name="etc" dev="sda1" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051852.530:8356): avc: denied { search } for pid=25523 comm="safe_timer" name="/" dev="overlay" ino=1443983 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051873.060:8547): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=48270 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.059:7734): avc: denied { read } for pid=34150 comm="node_exporter" name="net" dev="sysfs" ino=20806 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.059:8399): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.059:7730): avc: denied { search } for pid=34150 comm="node_exporter" name="diff" dev="sda1" ino=1968497 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051873.061:8554): avc: denied { getattr } for pid=34150 comm="node_exporter" name="/" dev="tmpfs" ino=14377 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.758:6755): avc: denied { use } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051922.880:8671): avc: denied { getattr } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.819:7818): avc: denied { open } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051657.801:7444): avc: denied { open } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051726.766:7790): avc: denied { write } for pid=74744 comm="msgr-worker-2" laddr=172.21.15.38 lport=48866 faddr=172.21.15.175 fport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051933.059:8800): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=161740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051570.776:7015): avc: denied { write } for pid=25126 comm="conmon" name="socket" dev="tmpfs" ino=14667 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051571.438:7021): avc: denied { search } for pid=40781 comm="grafana-server" name="/" dev="overlay" ino=1968482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051930.465:8785): avc: denied { setopt } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.071:8893): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051803.060:8222): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051650.464:7393): avc: denied { getattr } for pid=42730 comm="prometheus" laddr=172.21.15.38 lport=42436 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051799.437:8169): avc: denied { getattr } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051923.060:8696): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/net/dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.060:8087): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051793.607:8127): avc: denied { read } for pid=40781 comm="grafana-server" name="png" dev="sda1" ino=1970477 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051657.041:7438): avc: denied { search } for pid=25126 comm="conmon" name="journal" dev="tmpfs" ino=14663 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051872.022:8526): avc: denied { write } for pid=25126 comm="conmon" name="socket" dev="tmpfs" ino=14667 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051573.075:7056): avc: denied { search } for pid=25523 comm="safe_timer" name="/" dev="overlay" ino=1443983 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051710.465:7703): avc: denied { getattr } for pid=42730 comm="prometheus" laddr=172.21.15.38 lport=57268 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051851.332:8336): avc: denied { write } for pid=74283 comm="msgr-worker-0" laddr=172.21.15.38 lport=55220 faddr=172.21.15.175 fport=6808 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051723.059:7766): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051926.610:8770): avc: denied { search } for pid=50713 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970664 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c77,c661 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.059:7468): avc: denied { read } for pid=34150 comm="node_exporter" name="hwmon0" dev="sysfs" ino=36920 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051657.801:7443): avc: denied { search } for pid=25150 comm="safe_timer" name="var" dev="sda1" ino=1183149 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051798.835:8161): avc: denied { search } for pid=56187 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051784.132:8108): avc: denied { getattr } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051870.282:8488): avc: denied { open } for pid=56187 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.060:6628): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051798.996:8166): avc: denied { write } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051503.060:6688): avc: denied { read } for pid=34150 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051707.492:7642): avc: denied { open } for pid=44966 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051780.465:8015): avc: denied { write } for pid=42730 comm="prometheus" path="socket:[336848]" dev="sockfs" ino=336848 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.439:7807): avc: denied { read } for pid=40781 comm="grafana-server" name="cephfs-overview.json" dev="sda1" ino=1574966 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051583.059:7072): avc: denied { search } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=156443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051927.881:8778): avc: denied { search } for pid=25150 comm="safe_timer" name="/" dev="overlay" ino=790638 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051587.762:7111): avc: denied { search } for pid=25150 comm="safe_timer" name="var" dev="sda1" ino=1183149 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051787.830:8117): avc: denied { getattr } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.827:7821): avc: denied { search } for pid=25523 comm="safe_timer" name="/" dev="overlay" ino=1443983 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051584.778:7096): avc: denied { sendto } for pid=25126 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051786.396:8116): avc: denied { read } for pid=44966 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.062:7481): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051721.814:7764): avc: denied { search } for pid=25523 comm="safe_timer" name="etc" dev="sda1" ino=1443992 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051783.060:8089): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.437:8416): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.069:8708): avc: denied { append } for pid=42730 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.059:7728): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/7" dev="proc" ino=153420 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.058:8870): avc: denied { open } for pid=34150 comm="node_exporter" path="/sys/class/hwmon" dev="sysfs" ino=20770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051930.537:8790): avc: denied { append } for pid=56187 comm="log" path="/var/log/ceph/ceph-osd.3.log" dev="sda1" ino=396225 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.060:6732): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/net/dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051798.718:8157): avc: denied { append } for pid=25150 comm="log" path="/var/log/ceph/ceph-mon.smithi038.log" dev="sda1" ino=396143 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051798.019:8146): avc: denied { read } for pid=25150 comm="rocksdb:high0" name="000022.sst" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051643.058:7372): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051655.129:7409): avc: denied { read } for pid=25150 comm="msgr-worker-2" path="socket:[263139]" dev="sockfs" ino=263139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051570.776:7015): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051852.542:8359): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051490.437:6554): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051798.891:8162): avc: denied { search } for pid=50713 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970664 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c77,c661 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.060:8085): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=30065 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051798.467:8153): avc: denied { search } for pid=44966 comm="safe_timer" name="/" dev="overlay" ino=1970645 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c812 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051942.054:8849): avc: denied { use } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051926.988:8775): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051711.471:7716): avc: denied { search } for pid=25126 comm="conmon" name="systemd" dev="tmpfs" ino=14385 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051923.061:8704): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="tmpfs" ino=14376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051593.060:7153): avc: denied { search } for pid=34150 comm="node_exporter" name="user" dev="tmpfs" ino=13870 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051638.766:7335): avc: denied { open } for pid=44966 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051870.639:8506): avc: denied { search } for pid=25523 comm="safe_timer" name="libpod-c85e7388139cde13396994da6ee9d29bf47c41b4da629ccf04835de0ad787d55.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051640.511:7361): avc: denied { read } for pid=44966 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051729.074:7832): avc: denied { getattr } for pid=92220 comm="pgrep" path="/proc/25150" dev="proc" ino=127332 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.059:6624): avc: denied { read } for pid=34150 comm="node_exporter" name="eno1" dev="sysfs" ino=36721 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051660.465:7449): avc: denied { create } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051800.203:8185): avc: denied { search } for pid=41370 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970626 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c358,c658 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051514.739:6774): avc: denied { open } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051933.060:8813): avc: denied { getattr } for pid=34150 comm="node_exporter" name="/" dev="tmpfs" ino=14377 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051863.061:8476): avc: denied { search } for pid=34150 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616051711.367:7713): avc: denied { signal } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.058:8868): avc: denied { search } for pid=34150 comm="node_exporter" name="fs" dev="proc" ino=161749 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051851.332:8337): avc: denied { write } for pid=74283 comm="msgr-worker-2" laddr=172.21.15.38 lport=48826 faddr=172.21.15.175 fport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051584.867:7101): avc: denied { search } for pid=25523 comm="mgr-fin" name="/" dev="overlay" ino=1443983 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051566.522:6931): avc: denied { open } for pid=56187 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.438:7804): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051636.292:7273): avc: denied { read } for pid=74283 comm="msgr-worker-1" path="pipe:[267013]" dev="pipefs" ino=267013 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.059:6726): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.797:7317): avc: denied { read } for pid=25150 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.059:8685): avc: denied { read } for pid=34150 comm="node_exporter" name="stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051942.054:8851): avc: denied { search } for pid=25126 comm="conmon" name="journal" dev="tmpfs" ino=14663 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051922.880:8670): avc: denied { open } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051567.051:6940): avc: denied { search } for pid=25523 comm="safe_timer" name="usr" dev="sda1" ino=789155 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051592.767:7132): avc: denied { getattr } for pid=25150 comm="rstore_compact" path="/sys/devices/virtual/block/dm-4/queue/logical_block_size" dev="sysfs" ino=49669 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051942.883:8860): avc: denied { read } for pid=25150 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.063:8886): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="tmpfs" ino=14376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051708.981:7674): avc: denied { search } for pid=50713 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970664 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c77,c661 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051523.059:6802): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051937.440:8822): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/host-details.json" dev="overlay" ino=1574967 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.059:7462): avc: denied { read } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051854.887:8446): avc: denied { search } for pid=25523 comm="mgr-fin" name="usr" dev="sda1" ino=789155 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051923.059:8682): avc: denied { signal } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051643.059:7380): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051800.000:8180): avc: denied { search } for pid=25126 comm="conmon" name="systemd" dev="tmpfs" ino=14385 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051853.059:8389): avc: denied { read } for pid=34150 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.437:8417): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051572.760:7024): avc: denied { read } for pid=25150 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051922.963:8679): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051503.060:6689): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/net/arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051744.510:7876): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051725.479:7782): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="tmpfs" ino=14376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051922.963:8679): avc: denied { search } for pid=25523 comm="safe_timer" name="etc" dev="sda1" ino=1443992 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051491.754:6578): avc: denied { search } for pid=25126 comm="conmon" name="journal" dev="tmpfs" ino=14663 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051965.670:8931): avc: denied { write } for pid=25523 comm="msgr-worker-1" laddr=172.21.15.38 lport=58510 faddr=172.21.15.38 fport=6800 scontext=system_u:system_r:spc_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1', 'type=AVC msg=audit(1616051590.465:7120): avc: denied { connect } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.060:6731): avc: denied { read } for pid=34150 comm="node_exporter" name="addr_assign_type" dev="sysfs" ino=36729 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051568.766:6972): avc: denied { use } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051643.060:7383): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051744.237:7874): avc: denied { open } for pid=44966 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051593.059:7142): avc: denied { read } for pid=34150 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051523.058:6794): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051733.058:7851): avc: denied { open } for pid=34150 comm="node_exporter" path="/sys/class/net" dev="sysfs" ino=20806 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051933.059:8804): avc: denied { open } for pid=34150 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051592.767:7130): avc: denied { read } for pid=25150 comm="rstore_compact" name="253:4" dev="sysfs" ino=49632 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051707.815:7651): avc: denied { getattr } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051924.511:8740): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051640.464:7355): avc: denied { setopt } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051710.466:7704): avc: denied { write } for pid=42730 comm="prometheus" path="socket:[326926]" dev="sockfs" ino=326926 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.061:7750): avc: denied { search } for pid=34150 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051733.059:7854): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/class/net/ens1f1" dev="sysfs" ino=37774 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051729.074:7833): avc: denied { open } for pid=92220 comm="pgrep" path="/proc/25150/status" dev="proc" ino=127371 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.797:7317): avc: denied { search } for pid=25150 comm="safe_timer" name="mon.smithi038" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051517.748:6776): avc: denied { search } for pid=25150 comm="safe_timer" name="var" dev="sda1" ino=1183149 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051782.830:8065): avc: denied { search } for pid=25150 comm="safe_timer" name="/" dev="overlay" ino=790638 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051584.504:7084): avc: denied { read } for pid=25523 comm="msgr-worker-1" path="socket:[209341]" dev="sockfs" ino=209341 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051723.814:7781): avc: denied { search } for pid=25523 comm="safe_timer" name="libpod-c85e7388139cde13396994da6ee9d29bf47c41b4da629ccf04835de0ad787d55.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051655.482:7423): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=394712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051707.481:7636): avc: denied { search } for pid=25126 comm="conmon" name="systemd" dev="tmpfs" ino=14385 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051853.059:8389): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051927.881:8778): avc: denied { search } for pid=25150 comm="safe_timer" name="var" dev="sda1" ino=1183149 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051873.062:8555): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051730.465:7834): avc: denied { search } for pid=42730 comm="prometheus" name="etc" dev="sda1" ino=1970586 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051870.639:8505): avc: denied { search } for pid=25523 comm="safe_timer" name="/" dev="overlay" ino=1443983 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051566.522:6931): avc: denied { search } for pid=56187 comm="safe_timer" name="/" dev="overlay" ino=1970683 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c367,c973 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.059:6728): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=161750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051779.993:7997): avc: denied { search } for pid=25126 comm="conmon" name="systemd" dev="tmpfs" ino=14385 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051933.059:8802): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051802.833:8200): avc: denied { search } for pid=25150 comm="safe_timer" name="mon.smithi038" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051672.588:7500): avc: denied { search } for pid=41370 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1970626 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051513.758:6757): avc: denied { sendto } for pid=25126 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051803.058:8204): avc: denied { search } for pid=34150 comm="node_exporter" name="7" dev="proc" ino=153420 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051514.439:6769): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="sda1" ino=1574965 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051733.060:7867): avc: denied { search } for pid=34150 comm="node_exporter" name="host" dev="sda1" ino=1970467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c65,c509 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051783.059:8080): avc: denied { read } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051569.009:6990): avc: denied { search } for pid=41370 comm="safe_timer" name="/" dev="overlay" ino=1970626 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c358,c658 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.060:8879): avc: denied { read } for pid=34150 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.059:6728): avc: denied { search } for pid=34150 comm="node_exporter" name="fs" dev="proc" ino=161749 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051655.438:7416): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051496.438:6675): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc" dev="sda1" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051490.437:6554): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051581.112:7062): avc: denied { search } for pid=25523 comm="safe_timer" name="libpod-c85e7388139cde13396994da6ee9d29bf47c41b4da629ccf04835de0ad787d55.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051922.955:8678): avc: denied { read } for pid=44966 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051938.041:8827): avc: denied { write } for pid=25126 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051711.471:7715): avc: denied { read } for pid=25126 comm="conmon" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051870.639:8506): avc: denied { open } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051871.438:8519): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051793.510:8126): avc: denied { search } for pid=41370 comm="safe_timer" name="/" dev="overlay" ino=1970626 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c358,c658 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051784.120:8106): avc: denied { open } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051711.765:7720): avc: denied { search } for pid=25523 comm="safe_timer" name="usr" dev="sda1" ino=789155 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051707.741:7647): avc: denied { open } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051491.754:6577): avc: denied { read } for pid=25126 comm="conmon" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051873.059:8542): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.889:8714): avc: denied { read } for pid=25126 comm="conmon" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051513.059:6721): avc: denied { read } for pid=34150 comm="node_exporter" name="fd" dev="proc" ino=161740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051508.281:6694): avc: denied { search } for pid=44966 comm="safe_timer" name="/" dev="overlay" ino=1970645 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c812 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051873.060:8546): avc: denied { search } for pid=34150 comm="node_exporter" name="fs" dev="proc" ino=161749 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.059:8388): avc: denied { search } for pid=34150 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051522.748:6793): avc: denied { dac_read_search } for pid=25150 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051933.059:8808): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051870.465:8497): avc: denied { create } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.059:8689): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051568.439:6970): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051493.058:6614): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=161750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.889:8715): avc: denied { write } for pid=25126 comm="conmon" name="socket" dev="tmpfs" ino=14667 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051663.062:7482): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051669.818:7495): avc: denied { read } for pid=25126 comm="conmon" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051926.027:8765): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051853.059:8394): avc: denied { read } for pid=34150 comm="node_exporter" name="eno1" dev="sysfs" ino=36721 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051568.766:6974): avc: denied { write } for pid=25126 comm="conmon" name="socket" dev="tmpfs" ino=14667 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051870.053:8486): avc: denied { search } for pid=44966 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051797.996:8145): avc: denied { create } for pid=25150 comm="rstore_compact" name="000021.log" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051955.566:8911): avc: denied { getattr } for pid=42730 comm="prometheus" path="/prometheus/queries.active" dev="dm-4" ino=158 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.156:6747): avc: denied { read } for pid=50713 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051657.040:7436): avc: denied { write } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051713.059:7729): avc: denied { read } for pid=34150 comm="node_exporter" name="stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.059:7732): avc: denied { read } for pid=34150 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051587.762:7111): avc: denied { search } for pid=25150 comm="safe_timer" name="/" dev="overlay" ino=790638 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.819:7817): avc: denied { getattr } for pid=25150 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051854.095:8437): avc: denied { read } for pid=25150 comm="msgr-worker-1" path="socket:[209969]" dev="sockfs" ino=209969 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051925.438:8758): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc" dev="sda1" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051943.062:8884): avc: denied { getattr } for pid=34150 comm="node_exporter" name="/" dev="tmpfs" ino=14377 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.060:7469): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/hwmon/hwmon0/uevent" dev="sysfs" ino=36917 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051509.784:6700): avc: denied { read } for pid=25126 comm="conmon" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051673.453:7517): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051800.000:8180): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="tmpfs" ino=14376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051942.883:8861): avc: denied { getattr } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051794.345:8133): avc: denied { setopt } for pid=40781 comm="grafana-server" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051726.865:7795): avc: denied { search } for pid=56187 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051593.059:7140): avc: denied { open } for pid=34150 comm="node_exporter" path="/sys/class/net" dev="sysfs" ino=20806 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051927.881:8778): avc: denied { dac_read_search } for pid=25150 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051655.439:7417): avc: denied { read open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051583.058:7067): avc: denied { read } for pid=34150 comm="node_exporter" name="hwmon" dev="sysfs" ino=20770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051726.865:7795): avc: denied { search } for pid=56187 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1970683 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051856.437:8453): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc" dev="sda1" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051585.137:7105): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051655.034:7404): avc: denied { write } for pid=25126 comm="conmon" name="socket" dev="tmpfs" ino=14667 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051713.060:7745): avc: denied { search } for pid=34150 comm="node_exporter" name="1" dev="proc" ino=157331 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051783.059:8084): avc: denied { open } for pid=34150 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=30065 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051512.964:6714): avc: denied { write } for pid=25150 comm="msgr-worker-2" laddr=172.21.15.38 lport=3300 faddr=172.21.15.175 fport=56714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051639.394:7341): avc: denied { search } for pid=25523 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.058:6612): avc: denied { read } for pid=34150 comm="node_exporter" name="fd" dev="proc" ino=161740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051933.063:8820): avc: denied { search } for pid=34150 comm="node_exporter" name="fs" dev="proc" ino=161749 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051873.062:8556): avc: denied { search } for pid=34150 comm="node_exporter" name="user" dev="tmpfs" ino=13870 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051570.465:7003): avc: denied { search } for pid=42730 comm="prometheus" name="etc" dev="sda1" ino=1970586 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051712.816:7725): avc: denied { read } for pid=25150 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.438:8900): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051872.022:8526): avc: denied { search } for pid=25126 comm="conmon" name="systemd" dev="tmpfs" ino=14385 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051592.776:7133): avc: denied { read } for pid=25150 comm="rocksdb:high0" name="000016.sst" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.059:6616): avc: denied { read } for pid=34150 comm="node_exporter" name="arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.061:7475): avc: denied { getattr } for pid=34150 comm="node_exporter" name="/" dev="tmpfs" ino=14377 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051640.437:7348): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052030.675:8968): avc: denied { write } for pid=25523 comm="msgr-worker-1" laddr=172.21.15.38 lport=58510 faddr=172.21.15.38 fport=6800 scontext=system_u:system_r:spc_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1', 'type=AVC msg=audit(1616051490.525:6567): avc: denied { search } for pid=56187 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970683 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c367,c973 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.059:7731): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=161740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051593.059:7139): avc: denied { read } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.059:7466): avc: denied { read } for pid=34150 comm="node_exporter" name="hwmon" dev="sysfs" ino=20770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051657.040:7436): avc: denied { use } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051854.789:8444): avc: denied { write } for pid=56187 comm="tp_osd_tp" path="pipe:[219359]" dev="pipefs" ino=219359 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051922.963:8679): avc: denied { open } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051871.438:8519): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051493.058:6609): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051950.464:8907): avc: denied { getattr } for pid=42730 comm="prometheus" laddr=172.21.15.38 lport=48029 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051856.439:8454): avc: denied { read open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051871.438:8520): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051495.034:6672): avc: denied { read } for pid=50713 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051873.060:8546): avc: denied { read } for pid=34150 comm="node_exporter" name="file-nr" dev="proc" ino=161750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051852.542:8359): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.839:7824): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.059:8214): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.836:8105): avc: denied { sendto } for pid=25126 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051943.438:8900): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051584.778:7094): avc: denied { write } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051493.058:6613): avc: denied { search } for pid=34150 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051857.867:8456): avc: denied { getattr } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051707.815:7649): avc: denied { getattr } for pid=25150 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.437:8413): avc: denied { search } for pid=40781 comm="grafana-server" name="/" dev="overlay" ino=1968482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051781.438:8038): avc: denied { lock } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051655.482:7423): avc: denied { search } for pid=25523 comm="safe_timer" name="etc" dev="sda1" ino=1443992 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051781.439:8041): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051733.059:7859): avc: denied { getattr } for pid=34150 comm="node_exporter" name="/" dev="tmpfs" ino=14377 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051707.480:7633): avc: denied { read } for pid=25150 comm="msgr-worker-2" path="socket:[166319]" dev="sockfs" ino=166319 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051942.054:8849): avc: denied { write } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051781.438:8036): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.060:8091): avc: denied { search } for pid=34150 comm="node_exporter" name="fs" dev="proc" ino=161749 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051669.146:7491): avc: denied { read } for pid=50713 comm="msgr-worker-2" path="pipe:[200469]" dev="pipefs" ino=200469 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051490.438:6557): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="sda1" ino=1574965 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051491.754:6578): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="tmpfs" ino=14376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051713.060:7742): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/fs/xfs/stats/stats" dev="sysfs" ino=50015 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051571.063:7017): avc: denied { open } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.059:8215): avc: denied { read } for pid=34150 comm="node_exporter" name="cpuinfo_max_freq" dev="sysfs" ino=29967 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051514.438:6763): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051798.718:8155): avc: denied { read } for pid=25150 comm="msgr-worker-2" path="socket:[166319]" dev="sockfs" ino=166319 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051871.438:8517): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc" dev="sda1" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051514.727:6772): avc: denied { read } for pid=25523 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051942.049:8848): avc: denied { write } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051514.739:6774): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=394712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051492.742:6606): avc: denied { getattr } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.059:7727): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="overlay" ino=1968497 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c65,c509 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051655.566:7427): avc: denied { getattr } for pid=42730 comm="prometheus" path="/prometheus/queries.active" dev="dm-4" ino=158 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051873.061:8551): avc: denied { read } for pid=34150 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051715.566:7759): avc: denied { read } for pid=42730 comm="prometheus" name="data" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051494.239:6664): avc: denied { search } for pid=40781 comm="grafana-server" name="var" dev="sda1" ino=1968491 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051926.027:8765): avc: denied { search } for pid=25126 comm="conmon" name="systemd" dev="tmpfs" ino=14385 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051801.477:8198): avc: denied { search } for pid=44966 comm="safe_timer" name="/" dev="overlay" ino=1970645 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c812 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.438:7296): avc: denied { read open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051669.059:7486): avc: denied { getattr } for pid=89174 comm="pgrep" path="/proc/25126" dev="proc" ino=124122 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051870.651:8508): avc: denied { search } for pid=25523 comm="safe_timer" name="usr" dev="sda1" ino=789155 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051782.102:8046): avc: denied { search } for pid=41370 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970626 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c358,c658 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051593.059:7148): avc: denied { search } for pid=34150 comm="node_exporter" name="1" dev="proc" ino=157331 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051531.771:6819): avc: denied { sendto } for pid=25126 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051803.058:8202): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051941.712:8834): avc: denied { search } for pid=44966 comm="safe_timer" name="/" dev="overlay" ino=1970645 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c812 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051707.481:7636): avc: denied { write } for pid=25126 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051923.889:8715): avc: denied { sendto } for pid=25126 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051950.464:8908): avc: denied { write } for pid=42730 comm="prometheus" path="socket:[370087]" dev="sockfs" ino=370087 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.060:6732): avc: denied { read } for pid=34150 comm="node_exporter" name="dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051491.748:6575): avc: denied { open } for pid=56187 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051570.776:7015): avc: denied { search } for pid=25126 comm="conmon" name="systemd" dev="tmpfs" ino=14385 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051707.815:7650): avc: denied { search } for pid=25150 comm="safe_timer" name="mon.smithi038" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.156:6746): avc: denied { search } for pid=50713 comm="safe_timer" name="/" dev="overlay" ino=1970664 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c77,c661 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051960.669:8917): avc: denied { connect } for pid=25523 comm="msgr-worker-2" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051590.464:7115): avc: denied { search } for pid=42730 comm="prometheus" name="/" dev="overlay" ino=1970479 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051922.740:8664): avc: denied { write } for pid=25150 comm="msgr-worker-2" laddr=172.21.15.38 lport=3300 faddr=172.21.15.175 fport=56714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051851.720:8346): avc: denied { read } for pid=50713 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.061:7747): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051794.345:8134): avc: denied { name_connect } for pid=40781 comm="grafana-server" dest=443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:http_port_t:s0 tclass=tcp_socket permissive=1', 'type=AVC msg=audit(1616051943.071:8893): avc: denied { open } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051796.437:8142): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.059:6619): avc: denied { read } for pid=34150 comm="node_exporter" name="mc" dev="sysfs" ino=20785 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051643.060:7386): avc: denied { search } for pid=34150 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051512.715:6704): avc: denied { open } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051512.747:6707): avc: denied { search } for pid=25150 comm="safe_timer" name="/" dev="overlay" ino=790638 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051744.510:7876): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051793.059:8125): avc: denied { search } for pid=34150 comm="node_exporter" name="host" dev="sda1" ino=1970467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c65,c509 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051707.741:7647): avc: denied { search } for pid=25523 comm="safe_timer" name="etc" dev="sda1" ino=1443992 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051713.059:7731): avc: denied { read } for pid=34150 comm="node_exporter" name="fd" dev="proc" ino=161740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.986:8902): avc: denied { search } for pid=56187 comm="safe_timer" name="/" dev="overlay" ino=1970683 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c367,c973 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.061:7479): avc: denied { search } for pid=34150 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051873.059:8539): avc: denied { search } for pid=34150 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.058:8211): avc: denied { read } for pid=34150 comm="node_exporter" name="mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051657.041:7438): avc: denied { write } for pid=25126 comm="conmon" name="socket" dev="tmpfs" ino=14667 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051490.464:6564): avc: denied { write } for pid=42730 comm="prometheus" path="socket:[287806]" dev="sockfs" ino=287806 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051779.993:7997): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051783.059:8078): avc: denied { search } for pid=34150 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051873.060:8544): avc: denied { read } for pid=34150 comm="node_exporter" name="hwmon0" dev="sysfs" ino=36920 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051873.061:8549): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051514.439:6768): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051584.867:7101): avc: denied { search } for pid=25523 comm="mgr-fin" name="usr" dev="sda1" ino=789155 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051508.429:6695): avc: denied { write } for pid=77272 comm="ceph_timer" path="pipe:[269127]" dev="pipefs" ino=269127 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051730.465:7839): avc: denied { connect } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051707.729:7645): avc: denied { open } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051590.464:7117): avc: denied { create } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051568.766:6974): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051493.764:6659): avc: denied { sendto } for pid=25126 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051723.062:7780): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051782.676:8064): avc: denied { search } for pid=50713 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051798.835:8160): avc: denied { search } for pid=56187 comm="safe_timer" name="/" dev="overlay" ino=1970683 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c367,c973 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.059:8398): avc: denied { search } for pid=34150 comm="node_exporter" name="1" dev="proc" ino=157331 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051593.059:7148): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051923.889:8715): avc: denied { search } for pid=25126 comm="conmon" name="systemd" dev="tmpfs" ino=14385 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051793.607:8128): avc: denied { create } for pid=40781 comm="grafana-server" name="grafana.db-journal" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.059:8397): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=48270 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051512.727:6706): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=394712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051924.511:8739): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051873.059:8541): avc: denied { open } for pid=34150 comm="node_exporter" path="/sys/class/hwmon" dev="sysfs" ino=20770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051503.060:6690): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051593.059:7145): avc: denied { search } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=156443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.059:8687): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051852.866:8363): avc: denied { search } for pid=25150 comm="safe_timer" name="mon.smithi038" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051566.522:6931): avc: denied { read } for pid=56187 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051512.964:6712): avc: denied { write } for pid=25150 comm="safe_timer" path="pipe:[122661]" dev="pipefs" ino=122661 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051870.651:8508): avc: denied { open } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051940.438:8831): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051733.059:7853): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.439:7805): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051673.059:7509): avc: denied { read } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051636.207:7268): avc: denied { read } for pid=41370 comm="msgr-worker-1" path="socket:[224121]" dev="sockfs" ino=224121 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.438:8419): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/pool-overview.json" dev="overlay" ino=1574972 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051733.059:7855): avc: denied { open } for pid=34150 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/net/eno1/addr_assign_type" dev="sysfs" ino=36729 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051856.006:8448): avc: denied { write } for pid=25126 comm="conmon" name="socket" dev="tmpfs" ino=14667 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051673.060:7515): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051870.283:8491): avc: denied { read } for pid=56187 comm="msgr-worker-2" path="pipe:[219361]" dev="pipefs" ino=219361 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.437:8895): avc: denied { getattr } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051655.374:7411): avc: denied { search } for pid=50713 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970664 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c77,c661 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051789.087:8120): avc: denied { read } for pid=95286 comm="pgrep" name="status" dev="proc" ino=124126 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051943.438:8900): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051496.438:6674): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.059:7029): avc: denied { read } for pid=34150 comm="node_exporter" name="fd" dev="proc" ino=161740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051866.615:8478): avc: denied { search } for pid=25523 comm="safe_timer" name="/" dev="overlay" ino=1443983 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051708.419:7656): avc: denied { search } for pid=41370 comm="safe_timer" name="/" dev="overlay" ino=1970626 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c358,c658 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051941.712:8834): avc: denied { read } for pid=44966 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.059:6719): avc: denied { read } for pid=34150 comm="node_exporter" name="stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051794.354:8136): avc: denied { getattr } for pid=40781 comm="grafana-server" laddr=172.21.15.38 lport=38976 faddr=35.241.23.245 fport=443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051780.109:8007): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051925.537:8762): avc: denied { read } for pid=41370 comm="msgr-worker-2" path="pipe:[177754]" dev="pipefs" ino=177754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051800.466:8196): avc: denied { append } for pid=42730 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051780.565:8018): avc: denied { signal } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.797:7316): avc: denied { search } for pid=25150 comm="safe_timer" name="var" dev="sda1" ino=1183149 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052525.702:8989): avc: denied { write } for pid=25523 comm="msgr-worker-1" laddr=172.21.15.38 lport=58510 faddr=172.21.15.38 fport=6800 scontext=system_u:system_r:spc_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1', 'type=AVC msg=audit(1616051786.396:8116): avc: denied { open } for pid=44966 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051593.059:7143): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051577.760:7059): avc: denied { dac_read_search } for pid=25150 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051727.819:7820): avc: denied { getattr } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051655.566:7428): avc: denied { getattr } for pid=42730 comm="prometheus" path="/prometheus/wal" dev="dm-4" ino=16777360 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.058:8868): avc: denied { search } for pid=34150 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051655.439:7419): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-sync-overview.json" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.060:8697): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051852.021:8350): avc: denied { write } for pid=25126 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051943.059:8875): avc: denied { read } for pid=34150 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.062:7484): avc: denied { search } for pid=34150 comm="node_exporter" name="host" dev="sda1" ino=1970467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c65,c509 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051970.672:8953): avc: denied { write } for pid=25523 comm="msgr-worker-1" laddr=172.21.15.38 lport=58510 faddr=172.21.15.38 fport=6800 scontext=system_u:system_r:spc_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1', 'type=AVC msg=audit(1616051584.327:7078): avc: denied { read } for pid=50713 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.059:8688): avc: denied { read } for pid=34150 comm="node_exporter" name="file-nr" dev="proc" ino=161750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.058:8866): avc: denied { read } for pid=34150 comm="node_exporter" name="fd" dev="proc" ino=161740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.059:6622): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=48270 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.058:8210): avc: denied { search } for pid=34150 comm="node_exporter" name="kernel" dev="proc" ino=166165 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051733.058:7846): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/7" dev="proc" ino=153420 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.060:8701): avc: denied { getattr } for pid=34150 comm="node_exporter" name="/" dev="tmpfs" ino=14377 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.071:8893): avc: denied { search } for pid=25523 comm="safe_timer" name="usr" dev="sda1" ino=789155 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051655.469:7422): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.058:8871): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=48082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051800.217:8186): avc: denied { read } for pid=25523 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051584.510:7085): avc: denied { lock } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051650.464:7395): avc: denied { read } for pid=42730 comm="prometheus" path="socket:[313858]" dev="sockfs" ino=313858 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.063:6738): avc: denied { getattr } for pid=34150 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051585.125:7104): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051922.951:8675): avc: denied { read } for pid=25523 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051870.651:8508): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051571.439:7023): avc: denied { read open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051933.059:8803): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.062:7483): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051852.866:8362): avc: denied { search } for pid=25150 comm="safe_timer" name="/" dev="overlay" ino=790638 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051490.594:6571): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=394712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051733.058:7847): avc: denied { read } for pid=34150 comm="node_exporter" name="stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051655.660:7429): avc: denied { search } for pid=44966 comm="safe_timer" name="/" dev="overlay" ino=1970645 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c812 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051795.989:8141): avc: denied { search } for pid=25126 comm="conmon" name="systemd" dev="tmpfs" ino=14385 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051643.060:7387): avc: denied { search } for pid=34150 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616051942.211:8856): avc: denied { search } for pid=50713 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970664 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c77,c661 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.060:8701): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.061:7748): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051938.077:8828): avc: denied { read } for pid=41370 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051655.439:7417): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051579.100:7060): avc: denied { open } for pid=25523 comm="safe_timer" path="/proc/meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051503.060:6691): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.437:8897): avc: denied { lock } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051870.466:8502): avc: denied { read } for pid=42730 comm="prometheus" path="socket:[351108]" dev="sockfs" ino=351108 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051715.114:7758): avc: denied { search } for pid=56187 comm="safe_timer" name="/" dev="overlay" ino=1970683 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c367,c973 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.438:7296): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051933.059:8797): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.439:7805): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051733.058:7847): avc: denied { search } for pid=34150 comm="node_exporter" name="7" dev="proc" ino=153420 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051852.866:8362): avc: denied { getattr } for pid=25150 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.059:8077): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051490.581:6569): avc: denied { read } for pid=25523 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051941.712:8834): avc: denied { open } for pid=44966 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051779.882:7993): avc: denied { search } for pid=25523 comm="mgr-fin" name="/" dev="overlay" ino=1443983 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051586.438:7109): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051871.439:8521): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051655.469:7421): avc: denied { search } for pid=25523 comm="safe_timer" name="libpod-c85e7388139cde13396994da6ee9d29bf47c41b4da629ccf04835de0ad787d55.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.059:7737): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.058:8206): avc: denied { read } for pid=34150 comm="node_exporter" name="hwmon" dev="sysfs" ino=20770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051860.464:8463): avc: denied { connect } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051780.289:8008): avc: denied { search } for pid=50713 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970664 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c77,c661 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.071:8890): avc: denied { search } for pid=25523 comm="safe_timer" name="/" dev="overlay" ino=1443983 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.437:8896): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc" dev="sda1" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051643.058:7368): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=161750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051779.716:7990): avc: denied { write } for pid=25150 comm="msgr-worker-2" laddr=172.21.15.38 lport=3300 faddr=172.21.15.175 fport=56714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051643.059:7378): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=48082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051782.590:8063): avc: denied { open } for pid=50713 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051779.706:7985): avc: denied { search } for pid=56187 comm="safe_timer" name="/" dev="overlay" ino=1970683 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c367,c973 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051587.762:7112): avc: denied { read } for pid=25150 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.060:7043): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.059:7465): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051933.061:8818): avc: denied { search } for pid=34150 comm="node_exporter" name="kernel" dev="proc" ino=166165 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.060:7054): avc: denied { search } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=156443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051723.059:7767): avc: denied { read } for pid=34150 comm="node_exporter" name="stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051925.439:8759): avc: denied { read open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051799.437:8169): avc: denied { search } for pid=40781 comm="grafana-server" name="/" dev="overlay" ino=1968482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051673.060:7513): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/hwmon/hwmon0/uevent" dev="sysfs" ino=36917 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.753:6754): avc: denied { write } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db/000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051941.743:8841): avc: denied { write } for pid=25150 comm="ms_dispatch" path="pipe:[122661]" dev="pipefs" ino=122661 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051669.059:7488): avc: denied { getattr } for pid=89174 comm="pgrep" path="/proc/25150" dev="proc" ino=127332 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051942.883:8859): avc: denied { dac_read_search } for pid=25150 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051655.469:7420): avc: denied { search } for pid=25523 comm="safe_timer" name="/" dev="overlay" ino=1443983 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051729.074:7831): avc: denied { open } for pid=92220 comm="pgrep" path="/proc/25126/status" dev="proc" ino=124126 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051503.061:6693): avc: denied { search } for pid=34150 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616051639.406:7342): avc: denied { open } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051723.060:7776): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051655.438:7413): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc" dev="sda1" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051926.321:8769): avc: denied { search } for pid=41370 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051583.061:7074): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051593.060:7154): avc: denied { search } for pid=34150 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051585.137:7105): avc: denied { open } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051854.789:8443): avc: denied { write } for pid=56187 comm="tp_osd_tp" path="pipe:[219361]" dev="pipefs" ino=219361 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051583.058:7070): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=48082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051514.438:6763): avc: denied { getattr } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051573.060:7042): avc: denied { search } for pid=34150 comm="node_exporter" name="kernel" dev="proc" ino=166165 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.058:8211): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051943.062:8882): avc: denied { search } for pid=34150 comm="node_exporter" name="1" dev="proc" ino=157331 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051727.827:7822): avc: denied { read } for pid=25523 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051567.051:6940): avc: denied { open } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051655.438:7412): avc: denied { search } for pid=40781 comm="grafana-server" name="etc" dev="sda1" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051510.755:6702): avc: denied { search } for pid=50713 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970664 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c77,c661 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.059:8216): avc: denied { read } for pid=34150 comm="node_exporter" name="addr_assign_type" dev="sysfs" ino=36729 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051863.059:8470): avc: denied { search } for pid=34150 comm="node_exporter" name="7" dev="proc" ino=153420 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051570.465:7010): avc: denied { read } for pid=42730 comm="prometheus" path="socket:[303278]" dev="sockfs" ino=303278 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051583.058:7065): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051490.437:6555): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051585.125:7103): avc: denied { open } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051636.204:7266): avc: denied { read } for pid=50713 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051780.097:8005): avc: denied { read } for pid=25523 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051870.283:8490): avc: denied { write } for pid=56187 comm="osd_srv_heartbt" path="pipe:[219361]" dev="pipefs" ino=219361 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.059:7036): avc: denied { read } for pid=34150 comm="node_exporter" name="cpufreq" dev="sysfs" ino=29977 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.759:6658): avc: denied { write } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db/000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051593.058:7138): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=161740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051798.718:8159): avc: denied { read } for pid=25150 comm="msgr-worker-2" path="pipe:[122661]" dev="pipefs" ino=122661 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051870.282:8488): avc: denied { read } for pid=56187 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.063:8887): avc: denied { search } for pid=34150 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051669.059:7489): avc: denied { open } for pid=89174 comm="pgrep" path="/proc/25150/status" dev="proc" ino=127371 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.394:7290): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051933.061:8818): avc: denied { read } for pid=34150 comm="node_exporter" name="entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051799.882:8177): avc: denied { search } for pid=25523 comm="mgr-fin" name="/" dev="overlay" ino=1443983 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.059:7729): avc: denied { search } for pid=34150 comm="node_exporter" name="7" dev="proc" ino=153420 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051643.062:7389): avc: denied { search } for pid=34150 comm="node_exporter" name="host" dev="sda1" ino=1970467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c65,c509 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051960.669:8915): avc: denied { create } for pid=25523 comm="msgr-worker-2" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051592.767:7131): avc: denied { read } for pid=25150 comm="rstore_compact" name="logical_block_size" dev="sysfs" ino=49669 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051930.465:8782): avc: denied { search } for pid=42730 comm="prometheus" name="etc" dev="sda1" ino=1970586 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051513.059:6721): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=161740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051851.332:8338): avc: denied { read } for pid=41370 comm="msgr-worker-0" path="socket:[267017]" dev="sockfs" ino=267017 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051870.282:8488): avc: denied { search } for pid=56187 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970683 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c367,c973 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051655.439:7418): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="sda1" ino=1574965 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051655.374:7411): avc: denied { open } for pid=50713 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051672.807:7501): avc: denied { search } for pid=25150 comm="safe_timer" name="var" dev="sda1" ino=1183149 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051590.464:7119): avc: denied { setopt } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051856.439:8454): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051933.060:8811): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=48082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051570.465:7004): avc: denied { create } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.060:8691): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.059:7460): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051500.465:6683): avc: denied { setopt } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051870.283:8493): avc: denied { write } for pid=56187 comm="msgr-worker-0" laddr=172.21.15.38 lport=58098 faddr=172.21.15.38 fport=6806 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.060:7471): avc: denied { search } for pid=34150 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051870.466:8498): avc: denied { setopt } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051710.007:7696): avc: denied { write } for pid=25150 comm="msgr-worker-2" laddr=172.21.15.38 lport=3300 faddr=172.21.15.175 fport=56714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051873.062:8556): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="tmpfs" ino=14376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.062:8095): avc: denied { search } for pid=34150 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051871.438:8516): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051514.727:6773): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.271:6748): avc: denied { search } for pid=44966 comm="safe_timer" name="/" dev="overlay" ino=1970645 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c812 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.437:7291): avc: denied { search } for pid=40781 comm="grafana-server" name="etc" dev="sda1" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051636.292:7272): avc: denied { write } for pid=74283 comm="ceph_timer" path="pipe:[267013]" dev="pipefs" ino=267013 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.071:8893): avc: denied { search } for pid=25523 comm="safe_timer" name="etc" dev="sda1" ino=1443992 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051803.058:8203): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/7" dev="proc" ino=153420 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051942.234:8858): avc: denied { append } for pid=42730 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051653.030:7400): avc: denied { search } for pid=25126 comm="conmon" name="journal" dev="tmpfs" ino=14663 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051872.022:8526): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="tmpfs" ino=14376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051523.058:6796): avc: denied { read } for pid=34150 comm="node_exporter" name="mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051870.465:8496): avc: denied { search } for pid=42730 comm="prometheus" name="etc" dev="sda1" ino=1970586 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051707.481:7635): avc: denied { read } for pid=25126 comm="conmon" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051922.741:8666): avc: denied { write } for pid=25150 comm="ms_dispatch" path="pipe:[122661]" dev="pipefs" ino=122661 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.071:8891): avc: denied { open } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.758:6756): avc: denied { read } for pid=25126 comm="conmon" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051660.465:7454): avc: denied { write } for pid=42730 comm="prometheus" path="socket:[318987]" dev="sockfs" ino=318987 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.438:8418): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051873.060:8543): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=48082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051794.354:8135): avc: denied { getopt } for pid=40781 comm="grafana-server" laddr=172.21.15.38 lport=38976 faddr=35.241.23.245 fport=443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051642.798:7363): avc: denied { getattr } for pid=25150 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051797.996:8145): avc: denied { add_name } for pid=25150 comm="rstore_compact" name="000021.log" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051568.766:6972): avc: denied { write } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051643.058:7369): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/net/arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051931.367:8794): avc: denied { signal } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051490.594:6571): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=394712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051640.464:7353): avc: denied { create } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.058:8205): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=161740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.437:6639): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051707.492:7642): avc: denied { search } for pid=44966 comm="safe_timer" name="diff" dev="sda1" ino=1970645 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051520.465:6789): avc: denied { read } for pid=42730 comm="prometheus" path="socket:[287589]" dev="sockfs" ino=287589 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051723.059:7773): avc: denied { read } for pid=34150 comm="node_exporter" name="eno1" dev="sysfs" ino=36721 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051779.882:7993): avc: denied { search } for pid=25523 comm="mgr-fin" name="usr" dev="sda1" ino=789155 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051873.059:8538): avc: denied { read } for pid=34150 comm="node_exporter" name="fd" dev="proc" ino=161740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051950.464:8904): avc: denied { create } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.059:6623): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/class/net/ens1f1" dev="sysfs" ino=37774 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051508.438:6697): avc: denied { getattr } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051712.438:7721): avc: denied { search } for pid=40781 comm="grafana-server" name="/" dev="overlay" ino=1968482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051638.804:7336): avc: denied { sendto } for pid=25126 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051490.525:6567): avc: denied { open } for pid=56187 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051852.021:8348): avc: denied { write } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051571.008:7016): avc: denied { search } for pid=41370 comm="safe_timer" name="diff" dev="sda1" ino=1970626 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051500.465:6680): avc: denied { create } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051673.567:7520): avc: denied { search } for pid=25523 comm="safe_timer" name="etc" dev="sda1" ino=1443992 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051655.374:7411): avc: denied { search } for pid=50713 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1970664 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051872.022:8526): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051924.526:8741): avc: denied { write } for pid=50713 comm="msgr-worker-0" laddr=172.21.15.38 lport=57534 faddr=172.21.15.38 fport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.819:7817): avc: denied { search } for pid=25150 comm="safe_timer" name="var" dev="sda1" ino=1183149 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051490.464:6563): avc: denied { getattr } for pid=42730 comm="prometheus" laddr=172.21.15.38 lport=37392 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051784.437:8112): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051960.669:8921): avc: denied { read } for pid=25523 comm="msgr-worker-1" path="socket:[364981]" dev="sockfs" ino=364981 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.058:8204): avc: denied { read } for pid=34150 comm="node_exporter" name="stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051490.052:6546): avc: denied { read } for pid=44966 comm="msgr-worker-1" path="pipe:[184257]" dev="pipefs" ino=184257 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051567.051:6940): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051643.060:7385): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="tmpfs" ino=14376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051584.327:7079): avc: denied { search } for pid=50713 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051800.000:8180): avc: denied { search } for pid=25126 comm="conmon" name="journal" dev="tmpfs" ino=14663 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051707.729:7644): avc: denied { search } for pid=25523 comm="safe_timer" name="/" dev="overlay" ino=1443983 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051852.021:8348): avc: denied { use } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051513.059:6716): avc: denied { signal } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.437:7295): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051799.438:8174): avc: denied { read open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051517.748:6778): avc: denied { getattr } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051569.063:6995): avc: denied { read } for pid=25150 comm="msgr-worker-2" path="socket:[146477]" dev="sockfs" ino=146477 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051856.437:8452): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051856.439:8454): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051584.510:7087): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051926.988:8774): avc: denied { open } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051781.438:8039): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.060:8402): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051490.594:6571): avc: denied { open } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.058:6613): avc: denied { search } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=156443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051584.327:7078): avc: denied { search } for pid=50713 comm="safe_timer" name="/" dev="overlay" ino=1970664 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c77,c661 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051789.087:8120): avc: denied { open } for pid=95286 comm="pgrep" path="/proc/25126/status" dev="proc" ino=124126 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051567.039:6938): avc: denied { search } for pid=25523 comm="safe_timer" name="libpod-c85e7388139cde13396994da6ee9d29bf47c41b4da629ccf04835de0ad787d55.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051781.438:8040): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051715.566:7761): avc: denied { getattr } for pid=42730 comm="prometheus" path="/prometheus/wal" dev="dm-4" ino=16777360 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051960.669:8922): avc: denied { getattr } for pid=25523 comm="msgr-worker-2" laddr=172.21.15.38 lport=6800 faddr=172.21.15.38 fport=58508 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051863.060:8473): avc: denied { read } for pid=34150 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051523.058:6795): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=50013 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051584.510:7088): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051873.060:8545): avc: denied { read } for pid=34150 comm="node_exporter" name="ce_count" dev="sysfs" ino=48270 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051799.437:8173): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051643.058:7366): avc: denied { search } for pid=34150 comm="node_exporter" name="7" dev="proc" ino=153420 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051636.204:7265): avc: denied { search } for pid=50713 comm="safe_timer" name="/" dev="overlay" ino=1970664 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c77,c661 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051960.669:8919): avc: denied { write } for pid=25523 comm="msgr-worker-2" laddr=172.21.15.38 lport=58506 faddr=172.21.15.38 fport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051492.742:6605): avc: denied { search } for pid=25150 comm="safe_timer" name="mon.smithi038" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051656.003:7431): avc: denied { search } for pid=41370 comm="safe_timer" name="/" dev="overlay" ino=1970626 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c358,c658 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051490.581:6569): avc: denied { search } for pid=25523 comm="safe_timer" name="libpod-c85e7388139cde13396994da6ee9d29bf47c41b4da629ccf04835de0ad787d55.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051925.438:8757): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.058:8386): avc: denied { read } for pid=34150 comm="node_exporter" name="fd" dev="proc" ino=161740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051490.437:6551): avc: denied { search } for pid=40781 comm="grafana-server" name="dashboards" dev="sda1" ino=1574963 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051513.060:6735): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051933.059:8807): avc: denied { read } for pid=34150 comm="node_exporter" name="sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051873.060:8545): avc: denied { open } for pid=34150 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=48270 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051873.059:8539): avc: denied { search } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=156443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051933.059:8806): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051654.540:7402): avc: denied { write } for pid=56187 comm="msgr-worker-1" laddr=172.21.15.38 lport=47846 faddr=172.21.15.38 fport=3300 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051922.880:8669): avc: denied { getattr } for pid=25150 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051707.492:7643): avc: denied { search } for pid=44966 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051858.011:8457): avc: denied { read } for pid=25126 comm="conmon" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051933.059:8809): avc: denied { read } for pid=34150 comm="node_exporter" name="cpufreq" dev="sysfs" ino=29977 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051779.993:7997): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="tmpfs" ino=14376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051852.350:8355): avc: denied { search } for pid=44966 comm="safe_timer" name="/" dev="overlay" ino=1970645 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c812 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051492.742:6604): avc: denied { getattr } for pid=25150 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.394:7289): avc: denied { search } for pid=25523 comm="safe_timer" name="usr" dev="sda1" ino=789155 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051529.764:6808): avc: denied { write } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db/000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.059:7458): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051567.051:6940): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=394712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051584.510:7086): avc: denied { search } for pid=40781 comm="grafana-server" name="/" dev="overlay" ino=1968482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051579.482:7061): avc: denied { search } for pid=44966 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051514.439:6768): avc: denied { read open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.059:8082): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.059:7727): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051590.464:7115): avc: denied { search } for pid=42730 comm="prometheus" name="etc" dev="sda1" ino=1970586 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051872.022:8526): avc: denied { write } for pid=25126 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051852.866:8363): avc: denied { read } for pid=25150 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051566.522:6932): avc: denied { open } for pid=56187 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051860.465:8467): avc: denied { read } for pid=42730 comm="prometheus" path="socket:[352606]" dev="sockfs" ino=352606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.058:8865): avc: denied { search } for pid=34150 comm="node_exporter" name="7" dev="proc" ino=153420 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.059:8071): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051800.464:8190): avc: denied { create } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.061:8705): avc: denied { search } for pid=34150 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.062:8097): avc: denied { search } for pid=34150 comm="node_exporter" name="host" dev="sda1" ino=1970467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c65,c509 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051643.060:7385): avc: denied { search } for pid=34150 comm="node_exporter" name="user" dev="tmpfs" ino=13870 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051871.438:8520): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051779.882:7993): avc: denied { read } for pid=25523 comm="mgr-fin" name="localtime" dev="sda1" ino=394694 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051512.715:6703): avc: denied { search } for pid=25523 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051584.867:7101): avc: denied { search } for pid=25523 comm="mgr-fin" name="etc" dev="sda1" ino=1443992 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051655.374:7411): avc: denied { search } for pid=50713 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051851.510:8342): avc: denied { search } for pid=41370 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970626 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c358,c658 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051794.354:8138): avc: denied { read } for pid=40781 comm="grafana-server" path="socket:[337809]" dev="sockfs" ino=337809 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051781.438:8037): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc" dev="sda1" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051707.481:7636): avc: denied { sendto } for pid=25126 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051799.437:8170): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc" dev="sda1" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051640.464:7352): avc: denied { signal } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.061:8702): avc: denied { search } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=156443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051779.706:7985): avc: denied { search } for pid=56187 comm="safe_timer" name="diff" dev="sda1" ino=1970683 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051673.060:7515): avc: denied { getattr } for pid=34150 comm="node_exporter" name="/" dev="tmpfs" ino=14377 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.060:7050): avc: denied { search } for pid=34150 comm="node_exporter" name="user" dev="tmpfs" ino=13870 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.188:7799): avc: denied { search } for pid=44966 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051673.061:7516): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=161750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.437:8416): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051637.394:7289): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=394712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051655.136:7410): avc: denied { append } for pid=25523 comm="log" path="/var/log/ceph/ceph-mgr.smithi038.bbeteq.log" dev="sda1" ino=396149 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.942:7757): avc: denied { search } for pid=50713 comm="safe_timer" name="/" dev="overlay" ino=1970664 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c77,c661 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051523.058:6794): avc: denied { read } for pid=34150 comm="node_exporter" name="stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051593.058:7137): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051851.499:8341): avc: denied { search } for pid=50713 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970664 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c77,c661 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.062:6634): avc: denied { search } for pid=34150 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616051573.060:7045): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051941.923:8847): avc: denied { search } for pid=41370 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970626 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c358,c658 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.060:6626): avc: denied { read } for pid=34150 comm="node_exporter" name="entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051636.204:7265): avc: denied { search } for pid=50713 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051500.465:6685): avc: denied { getattr } for pid=42730 comm="prometheus" laddr=172.21.15.38 lport=48263 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.059:8392): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/class/net/ens1f1" dev="sysfs" ino=37774 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.764:6659): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="tmpfs" ino=14376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051593.059:7146): avc: denied { read } for pid=34150 comm="node_exporter" name="file-nr" dev="proc" ino=161750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.058:8210): avc: denied { read } for pid=34150 comm="node_exporter" name="entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.059:8080): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/net/dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051583.058:7068): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051709.439:7680): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051586.437:7108): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc" dev="sda1" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051490.437:6555): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051673.059:7504): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051592.767:7127): avc: denied { write } for pid=25150 comm="rstore_compact" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051712.816:7725): avc: denied { search } for pid=25150 comm="safe_timer" name="mon.smithi038" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051726.766:7787): avc: denied { read } for pid=74744 comm="msgr-worker-1" path="pipe:[269468]" dev="pipefs" ino=269468 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051729.074:7833): avc: denied { read } for pid=92220 comm="pgrep" name="status" dev="proc" ino=127371 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.060:7474): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051922.963:8679): avc: denied { getattr } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051851.720:8346): avc: denied { search } for pid=50713 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051593.059:7146): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=161750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051793.607:8128): avc: denied { write open } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db-journal" dev="sda1" ino=1970591 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051637.035:7281): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="tmpfs" ino=14376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051590.465:7121): avc: denied { connect } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.004:8681): avc: denied { search } for pid=56187 comm="safe_timer" name="/" dev="overlay" ino=1970683 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c367,c973 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051643.058:7371): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=50013 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051933.060:8810): avc: denied { open } for pid=34150 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=30065 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051585.125:7103): avc: denied { read } for pid=25523 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051871.103:8515): avc: denied { open } for pid=41370 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.060:8696): avc: denied { read } for pid=34150 comm="node_exporter" name="dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051781.721:8043): avc: denied { search } for pid=50713 comm="safe_timer" name="/" dev="overlay" ino=1970664 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c77,c661 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051593.058:7138): avc: denied { read } for pid=34150 comm="node_exporter" name="fd" dev="proc" ino=161740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051655.438:7412): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051870.639:8506): avc: denied { search } for pid=25523 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051871.714:8523): avc: denied { search } for pid=50713 comm="safe_timer" name="/" dev="overlay" ino=1970664 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c77,c661 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.063:6739): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051707.492:7642): avc: denied { search } for pid=44966 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051863.059:8469): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/7" dev="proc" ino=153420 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.059:6620): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.059:6727): avc: denied { read } for pid=34150 comm="node_exporter" name="hwmon" dev="sysfs" ino=20770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051584.510:7087): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051923.060:8695): avc: denied { read } for pid=34150 comm="node_exporter" name="mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051923.059:8690): avc: denied { read } for pid=34150 comm="node_exporter" name="entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.382:7287): avc: denied { read } for pid=25523 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052750.714:9019): avc: denied { write } for pid=25523 comm="msgr-worker-1" laddr=172.21.15.38 lport=58510 faddr=172.21.15.38 fport=6800 scontext=system_u:system_r:spc_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1', 'type=AVC msg=audit(1616051636.204:7265): avc: denied { search } for pid=50713 comm="safe_timer" name="diff" dev="sda1" ino=1970664 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051727.188:7799): avc: denied { open } for pid=44966 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051871.438:8518): avc: denied { lock } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.061:8705): avc: denied { search } for pid=34150 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051871.439:8521): avc: denied { read open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051873.059:8537): avc: denied { read } for pid=34150 comm="node_exporter" name="stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051798.066:8148): avc: denied { search } for pid=25150 comm="rocksdb:low0" name="mon.smithi038" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.058:8863): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="overlay" ino=1968497 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c65,c509 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051926.988:8774): avc: denied { search } for pid=25523 comm="safe_timer" name="etc" dev="sda1" ino=1443992 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051493.058:6611): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051798.835:8161): avc: denied { open } for pid=56187 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.060:7472): avc: denied { search } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=156443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051636.207:7270): avc: denied { write } for pid=41370 comm="msgr-worker-1" laddr=172.21.15.38 lport=6806 faddr=172.21.15.175 fport=47094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051523.058:6799): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=48082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051800.217:8187): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051779.993:7996): avc: denied { read } for pid=25126 comm="conmon" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051853.059:8396): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=161750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.060:6627): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051798.835:8161): avc: denied { read } for pid=56187 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.059:7028): avc: denied { search } for pid=34150 comm="node_exporter" name="7" dev="proc" ino=153420 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051784.437:8110): avc: denied { lock } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051784.437:8111): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051802.833:8200): avc: denied { open } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051583.058:7067): avc: denied { open } for pid=34150 comm="node_exporter" path="/sys/class/hwmon" dev="sysfs" ino=20770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051569.266:6996): avc: denied { write } for pid=74283 comm="safe_timer" path="pipe:[267014]" dev="pipefs" ino=267014 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051782.590:8063): avc: denied { search } for pid=50713 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051941.712:8835): avc: denied { append } for pid=44966 comm="log" path="/var/log/ceph/ceph-osd.1.log" dev="sda1" ino=396218 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051640.464:7357): avc: denied { getattr } for pid=42730 comm="prometheus" laddr=172.21.15.38 lport=48656 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051733.060:7868): avc: denied { search } for pid=34150 comm="node_exporter" name="fs" dev="proc" ino=161749 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051933.059:8800): avc: denied { read } for pid=34150 comm="node_exporter" name="fd" dev="proc" ino=161740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051514.727:6771): avc: denied { search } for pid=25523 comm="safe_timer" name="/" dev="overlay" ino=1443983 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052860.670:9044): avc: denied { shutdown } for pid=25523 comm="msgr-worker-1" laddr=172.21.15.38 lport=58508 faddr=172.21.15.38 fport=6800 scontext=system_u:system_r:spc_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1', 'type=AVC msg=audit(1616051709.438:7675): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051492.348:6585): avc: denied { search } for pid=44966 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970645 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c812 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051800.464:8189): avc: denied { getattr } for pid=42730 comm="prometheus" path="/etc/hosts" dev="tmpfs" ino=180144 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051733.063:7869): avc: denied { search } for pid=34150 comm="node_exporter" name="kernel" dev="proc" ino=166165 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.059:7034): avc: denied { read } for pid=34150 comm="node_exporter" name="mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051779.991:7994): avc: denied { write } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051514.438:6763): avc: denied { search } for pid=40781 comm="grafana-server" name="/" dev="overlay" ino=1968482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051926.027:8763): avc: denied { use } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051566.427:6925): avc: denied { write } for pid=77272 comm="safe_timer" path="pipe:[269128]" dev="pipefs" ino=269128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051933.059:8807): avc: denied { read } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051583.058:7071): avc: denied { read } for pid=34150 comm="node_exporter" name="hwmon0" dev="sysfs" ino=36920 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.059:7465): avc: denied { read } for pid=34150 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051660.466:7455): avc: denied { read } for pid=42730 comm="prometheus" path="socket:[313340]" dev="sockfs" ino=313340 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051852.530:8358): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051709.439:7680): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051584.327:7079): avc: denied { open } for pid=50713 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051492.742:6604): avc: denied { search } for pid=25150 comm="safe_timer" name="var" dev="sda1" ino=1183149 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051567.759:6946): avc: denied { getattr } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051655.482:7423): avc: denied { open } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.060:7746): avc: denied { search } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=156443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051639.406:7342): avc: denied { open } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051643.058:7373): avc: denied { read } for pid=34150 comm="node_exporter" name="xfs" dev="sysfs" ino=50013 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051490.437:6551): avc: denied { search } for pid=40781 comm="grafana-server" name="diff" dev="sda1" ino=1968482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051713.059:7736): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/class/net/ens1f1" dev="sysfs" ino=37774 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.382:7286): avc: denied { search } for pid=25523 comm="safe_timer" name="/" dev="overlay" ino=1443983 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051925.439:8759): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051571.063:7017): avc: denied { read } for pid=25523 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051870.639:8506): avc: denied { read } for pid=25523 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051514.439:6770): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/cephfs-overview.json" dev="overlay" ino=1574966 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.437:6638): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051800.465:8191): avc: denied { setopt } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.060:8694): avc: denied { read } for pid=34150 comm="node_exporter" name="eno1" dev="sysfs" ino=36721 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051726.766:7791): avc: denied { read } for pid=41370 comm="msgr-worker-2" path="socket:[267896]" dev="sockfs" ino=267896 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051933.059:8805): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.059:8219): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051780.109:8007): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051783.830:8104): avc: denied { write } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.059:8074): avc: denied { read } for pid=34150 comm="node_exporter" name="fd" dev="proc" ino=161740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051851.720:8346): avc: denied { open } for pid=50713 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051709.439:7679): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051798.066:8149): avc: denied { remove_name } for pid=25150 comm="rocksdb:low0" name="000022.sst" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051569.063:6994): avc: denied { write } for pid=25523 comm="msgr-worker-1" laddr=172.21.15.38 lport=47474 faddr=172.21.15.38 fport=3300 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051872.022:8526): avc: denied { search } for pid=25126 comm="conmon" name="journal" dev="tmpfs" ino=14663 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051783.060:8090): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051568.766:6973): avc: denied { read } for pid=25126 comm="conmon" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051870.651:8508): avc: denied { open } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051657.041:7438): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="tmpfs" ino=14376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051852.530:8357): avc: denied { search } for pid=25523 comm="safe_timer" name="libpod-c85e7388139cde13396994da6ee9d29bf47c41b4da629ccf04835de0ad787d55.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051942.883:8859): avc: denied { search } for pid=25150 comm="safe_timer" name="var" dev="sda1" ino=1183149 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051500.465:6686): avc: denied { write } for pid=42730 comm="prometheus" path="socket:[288207]" dev="sockfs" ino=288207 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051793.693:8129): avc: denied { remove_name } for pid=40781 comm="grafana-server" name="grafana.db-journal" dev="sda1" ino=1970591 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051931.037:8793): avc: denied { write } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051784.132:8109): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.839:7824): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=394712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051587.762:7112): avc: denied { search } for pid=25150 comm="safe_timer" name="mon.smithi038" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.032:7278): avc: denied { write } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.060:8880): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051490.437:6551): avc: denied { search } for pid=40781 comm="grafana-server" name="etc" dev="sda1" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051595.565:7159): avc: denied { getattr } for pid=42730 comm="prometheus" path="/prometheus/wal" dev="dm-4" ino=16777360 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.063:8889): avc: denied { search } for pid=34150 comm="node_exporter" name="host" dev="sda1" ino=1970467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c65,c509 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051851.264:8330): avc: denied { append } for pid=50713 comm="log" path="/var/log/ceph/ceph-osd.2.log" dev="sda1" ino=396222 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051568.766:6974): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="tmpfs" ino=14376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051710.466:7706): avc: denied { append } for pid=42730 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051638.766:7335): avc: denied { search } for pid=44966 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970645 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c812 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051802.833:8201): avc: denied { getattr } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051799.437:8172): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051712.816:7726): avc: denied { getattr } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.059:8073): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051852.542:8359): avc: denied { search } for pid=25523 comm="safe_timer" name="usr" dev="sda1" ino=789155 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051853.060:8404): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="tmpfs" ino=14376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.071:8891): avc: denied { search } for pid=25523 comm="safe_timer" name="libpod-c85e7388139cde13396994da6ee9d29bf47c41b4da629ccf04835de0ad787d55.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051567.759:6945): avc: denied { search } for pid=25150 comm="safe_timer" name="mon.smithi038" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051503.061:6692): avc: denied { search } for pid=34150 comm="node_exporter" name="user" dev="tmpfs" ino=13870 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051566.427:6926): avc: denied { read } for pid=77272 comm="msgr-worker-2" path="pipe:[269128]" dev="pipefs" ino=269128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051593.060:7149): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051673.059:7506): avc: denied { search } for pid=34150 comm="node_exporter" name="7" dev="proc" ino=153420 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051781.439:8041): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051492.148:6584): avc: denied { search } for pid=41370 comm="safe_timer" name="/" dev="overlay" ino=1970626 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c358,c658 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051568.766:6974): avc: denied { search } for pid=25126 comm="conmon" name="journal" dev="tmpfs" ino=14663 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051513.060:6732): avc: denied { read } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051863.060:8473): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051655.469:7421): avc: denied { read } for pid=25523 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.059:8084): avc: denied { read } for pid=34150 comm="node_exporter" name="cpuinfo_max_freq" dev="sysfs" ino=30065 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051924.526:8742): avc: denied { read } for pid=25523 comm="msgr-worker-1" path="socket:[209341]" dev="sockfs" ino=209341 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051950.465:8909): avc: denied { read } for pid=42730 comm="prometheus" path="socket:[370087]" dev="sockfs" ino=370087 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.123:8712): avc: denied { search } for pid=41370 comm="safe_timer" name="/" dev="overlay" ino=1970626 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c358,c658 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051490.052:6544): avc: denied { write } for pid=44966 comm="safe_timer" path="pipe:[184257]" dev="pipefs" ino=184257 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051922.881:8673): avc: denied { write } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051723.062:7779): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051493.058:6614): avc: denied { search } for pid=34150 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.062:8707): avc: denied { search } for pid=34150 comm="node_exporter" name="host" dev="sda1" ino=1970467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c65,c509 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051583.061:7075): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051852.866:8362): avc: denied { search } for pid=25150 comm="safe_timer" name="var" dev="sda1" ino=1183149 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051942.883:8859): avc: denied { search } for pid=25150 comm="safe_timer" name="/" dev="overlay" ino=790638 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051780.465:8014): avc: denied { getattr } for pid=42730 comm="prometheus" laddr=172.21.15.38 lport=53889 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.059:6616): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/net/arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.437:8417): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051655.566:7426): avc: denied { search } for pid=42730 comm="prometheus" name="/" dev="overlay" ino=1970479 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051514.439:6768): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051712.439:7723): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051796.438:8144): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051779.706:7987): avc: denied { open } for pid=56187 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.484:7811): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051493.437:6637): avc: denied { lock } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051868.639:8484): avc: denied { search } for pid=25523 comm="safe_timer" name="etc" dev="sda1" ino=1443992 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051873.060:8546): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=161750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.765:7754): avc: denied { read } for pid=25523 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051585.137:7105): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051782.590:8063): avc: denied { search } for pid=50713 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1970664 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051803.058:8212): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=48082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051793.693:8129): avc: denied { unlink } for pid=40781 comm="grafana-server" name="grafana.db-journal" dev="sda1" ino=1970591 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051637.797:7316): avc: denied { getattr } for pid=25150 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.061:8225): avc: denied { search } for pid=34150 comm="node_exporter" name="user" dev="tmpfs" ino=13870 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051490.464:6560): avc: denied { create } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.059:8083): avc: denied { read } for pid=34150 comm="node_exporter" name="cpufreq" dev="sysfs" ino=29977 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051941.716:8839): avc: denied { write } for pid=50713 comm="msgr-worker-2" laddr=172.21.15.38 lport=6824 faddr=172.21.15.175 fport=40858 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051922.880:8670): avc: denied { read } for pid=25150 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051733.058:7852): avc: denied { read } for pid=34150 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051784.120:8106): avc: denied { read } for pid=25523 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051636.204:7266): avc: denied { search } for pid=50713 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051942.054:8851): avc: denied { write } for pid=25126 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051803.059:8218): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/hwmon/hwmon0/uevent" dev="sysfs" ino=36917 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.059:6717): avc: denied { search } for pid=34150 comm="node_exporter" name="diff" dev="sda1" ino=1968497 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051513.156:6747): avc: denied { open } for pid=50713 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.060:7047): avc: denied { read } for pid=34150 comm="node_exporter" name="file-nr" dev="proc" ino=161750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.437:7291): avc: denied { search } for pid=40781 comm="grafana-server" name="/" dev="overlay" ino=1968482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051798.835:8160): avc: denied { read } for pid=56187 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051870.466:8500): avc: denied { getattr } for pid=42730 comm="prometheus" laddr=172.21.15.38 lport=33318 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051955.566:8910): avc: denied { read } for pid=42730 comm="prometheus" name="data" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.060:6735): avc: denied { read } for pid=34150 comm="node_exporter" name="entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051873.059:8542): avc: denied { read } for pid=34150 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051780.109:8007): avc: denied { open } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051852.021:8350): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="tmpfs" ino=14376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051733.058:7851): avc: denied { read } for pid=34150 comm="node_exporter" name="net" dev="sysfs" ino=20806 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051800.217:8186): avc: denied { search } for pid=25523 comm="safe_timer" name="libpod-c85e7388139cde13396994da6ee9d29bf47c41b4da629ccf04835de0ad787d55.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051660.465:7451): avc: denied { connect } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.058:8211): avc: denied { search } for pid=34150 comm="node_exporter" name="1" dev="proc" ino=157331 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051577.760:7059): avc: denied { search } for pid=25150 comm="safe_timer" name="/" dev="overlay" ino=790638 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051593.060:7156): avc: denied { search } for pid=34150 comm="node_exporter" name="host" dev="sda1" ino=1970467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c65,c509 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051923.059:8688): avc: denied { search } for pid=34150 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051707.741:7647): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=394712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051713.765:7756): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=394712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051490.464:6559): avc: denied { getattr } for pid=42730 comm="prometheus" path="/etc/hosts" dev="tmpfs" ino=180144 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051567.759:6947): avc: denied { getattr } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051925.438:8757): avc: denied { search } for pid=40781 comm="grafana-server" name="dashboards" dev="sda1" ino=1574963 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051523.058:6796): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051652.785:7399): avc: denied { search } for pid=41370 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970626 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c358,c658 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.060:8696): avc: denied { read } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051717.817:7762): avc: denied { search } for pid=25150 comm="safe_timer" name="/" dev="overlay" ino=790638 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051707.481:7634): avc: denied { write } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051784.132:8108): avc: denied { search } for pid=25523 comm="safe_timer" name="etc" dev="sda1" ino=1443992 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051923.889:8715): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051709.438:7678): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051798.835:8160): avc: denied { search } for pid=56187 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.758:6757): avc: denied { write } for pid=25126 comm="conmon" name="socket" dev="tmpfs" ino=14667 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051798.718:8158): avc: denied { write } for pid=25150 comm="ms_dispatch" path="pipe:[122661]" dev="pipefs" ino=122661 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051926.975:8773): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051673.059:7505): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/7" dev="proc" ino=153420 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051491.754:6578): avc: denied { write } for pid=25126 comm="conmon" name="socket" dev="tmpfs" ino=14667 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051492.606:6603): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051670.439:7497): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051490.438:6556): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051922.951:8676): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051854.239:8439): avc: denied { search } for pid=40781 comm="grafana-server" name="/" dev="overlay" ino=1968482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051490.438:6558): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/osd-device-details.json" dev="sda1" ino=1574969 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051873.061:8550): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051500.465:6681): avc: denied { create } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051733.060:7862): avc: denied { search } for pid=34150 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.058:8204): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051592.767:7127): avc: denied { open } for pid=25150 comm="rstore_compact" path="/var/lib/ceph/mon/ceph-smithi038/store.db/000015.log" dev="dm-4" ino=137 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051585.137:7105): avc: denied { open } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051960.669:8920): avc: denied { setopt } for pid=25523 comm="msgr-worker-0" laddr=172.21.15.38 lport=6800 faddr=172.21.15.38 fport=58506 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051523.058:6797): avc: denied { read } for pid=34150 comm="node_exporter" name="xfs" dev="sysfs" ino=50013 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051655.438:7412): avc: denied { search } for pid=40781 comm="grafana-server" name="/" dev="overlay" ino=1968482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051852.021:8350): avc: denied { search } for pid=25126 comm="conmon" name="systemd" dev="tmpfs" ino=14385 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051529.695:6807): avc: denied { append } for pid=56187 comm="log" path="/var/log/ceph/ceph-osd.3.log" dev="sda1" ino=396225 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051723.059:7770): avc: denied { open } for pid=34150 comm="node_exporter" path="/sys/class/net" dev="sysfs" ino=20806 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.364:7058): avc: denied { search } for pid=50713 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970664 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c77,c661 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051654.540:7403): avc: denied { read } for pid=25150 comm="msgr-worker-2" path="socket:[221448]" dev="sockfs" ino=221448 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051520.465:6784): avc: denied { create } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051495.187:6673): avc: denied { search } for pid=41370 comm="safe_timer" name="/" dev="overlay" ino=1970626 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c358,c658 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.059:7031): avc: denied { read } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.062:6635): avc: denied { search } for pid=34150 comm="node_exporter" name="host" dev="sda1" ino=1970467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c65,c509 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051587.762:7112): avc: denied { open } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051730.465:7835): avc: denied { create } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.059:7033): avc: denied { open } for pid=34150 comm="node_exporter" path="/sys/class/hwmon" dev="sysfs" ino=20770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051851.499:8341): avc: denied { search } for pid=50713 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1970664 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051852.542:8359): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=394712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051867.869:8483): avc: denied { search } for pid=25150 comm="safe_timer" name="/" dev="overlay" ino=790638 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051931.012:8792): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051941.743:8842): avc: denied { read } for pid=25150 comm="msgr-worker-2" path="pipe:[122661]" dev="pipefs" ino=122661 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.060:8693): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/class/net/ens1f1" dev="sysfs" ino=37774 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051512.747:6707): avc: denied { search } for pid=25150 comm="safe_timer" name="var" dev="sda1" ino=1183149 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051590.466:7125): avc: denied { append } for pid=42730 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051723.059:7767): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051520.465:6783): avc: denied { search } for pid=42730 comm="prometheus" name="etc" dev="sda1" ino=1970586 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051491.754:6578): avc: denied { sendto } for pid=25126 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051571.438:7022): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc" dev="sda1" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051583.058:7069): avc: denied { read } for pid=34150 comm="node_exporter" name="mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051713.060:7739): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=50013 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.062:8095): avc: denied { search } for pid=34150 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051643.058:7370): avc: denied { search } for pid=34150 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051862.018:8468): avc: denied { use } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051853.059:8395): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=20785 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051852.021:8350): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051567.051:6940): avc: denied { search } for pid=25523 comm="safe_timer" name="etc" dev="sda1" ino=1443992 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051852.021:8349): avc: denied { read } for pid=25126 comm="conmon" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051593.060:7151): avc: denied { getattr } for pid=34150 comm="node_exporter" name="/" dev="tmpfs" ino=14377 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051733.058:7848): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=161740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.059:8079): avc: denied { open } for pid=34150 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051655.129:7406): avc: denied { write } for pid=74744 comm="safe_timer" path="pipe:[269468]" dev="pipefs" ino=269468 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051930.466:8786): avc: denied { connect } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051799.437:8169): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051514.739:6774): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051922.951:8674): avc: denied { search } for pid=25523 comm="safe_timer" name="/" dev="overlay" ino=1443983 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.058:8383): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051802.833:8199): avc: denied { search } for pid=25150 comm="safe_timer" name="/" dev="overlay" ino=790638 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.059:7734): avc: denied { open } for pid=34150 comm="node_exporter" path="/sys/class/net" dev="sysfs" ino=20806 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.061:8224): avc: denied { read } for pid=34150 comm="node_exporter" name="file-nr" dev="proc" ino=161750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051657.041:7438): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051672.807:7502): avc: denied { open } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.071:8891): avc: denied { read } for pid=25523 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051733.060:7861): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="tmpfs" ino=14376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051490.594:6571): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051851.332:8334): avc: denied { read } for pid=74283 comm="msgr-worker-1" path="pipe:[267013]" dev="pipefs" ino=267013 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.061:7479): avc: denied { search } for pid=34150 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051932.883:8796): avc: denied { getattr } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051531.226:6818): avc: denied { read } for pid=50713 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051490.464:6559): avc: denied { search } for pid=42730 comm="prometheus" name="etc" dev="sda1" ino=1970586 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051566.427:6924): avc: denied { read } for pid=25150 comm="msgr-worker-1" path="socket:[166308]" dev="sockfs" ino=166308 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051643.059:7380): avc: denied { search } for pid=34150 comm="node_exporter" name="kernel" dev="proc" ino=166165 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051872.871:8534): avc: denied { getattr } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.059:7028): avc: denied { read } for pid=34150 comm="node_exporter" name="stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051655.374:7411): avc: denied { read } for pid=50713 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051922.880:8669): avc: denied { dac_read_search } for pid=25150 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051520.763:6791): avc: denied { search } for pid=25523 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.059:7468): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/hwmon/hwmon0" dev="sysfs" ino=36916 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051494.239:6664): avc: denied { search } for pid=40781 comm="grafana-server" name="/" dev="overlay" ino=1968482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051658.455:7447): avc: denied { search } for pid=56187 comm="safe_timer" name="/" dev="overlay" ino=1970683 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c367,c973 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051639.406:7342): avc: denied { search } for pid=25523 comm="safe_timer" name="etc" dev="sda1" ino=1443992 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051800.000:8180): avc: denied { write } for pid=25126 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051590.464:7118): avc: denied { setopt } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051514.438:6765): avc: denied { lock } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051509.784:6699): avc: denied { use } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051873.063:8560): avc: denied { search } for pid=34150 comm="node_exporter" name="host" dev="sda1" ino=1970467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c65,c509 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051926.027:8763): avc: denied { write } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051567.051:6940): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051726.766:7788): avc: denied { write } for pid=74744 comm="msgr-worker-0" laddr=172.21.15.38 lport=55260 faddr=172.21.15.175 fport=6808 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.062:8882): avc: denied { read } for pid=34150 comm="node_exporter" name="mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051943.437:8898): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051490.465:6565): avc: denied { read } for pid=42730 comm="prometheus" path="socket:[286867]" dev="sockfs" ino=286867 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.437:7292): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc" dev="sda1" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051923.059:8687): avc: denied { read } for pid=34150 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.819:7818): avc: denied { read } for pid=25150 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051672.807:7502): avc: denied { read } for pid=25150 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051872.022:8525): avc: denied { read } for pid=25126 comm="conmon" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051943.058:8868): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=161750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051583.058:7065): avc: denied { read } for pid=34150 comm="node_exporter" name="entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051593.060:7151): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051867.751:8482): avc: denied { search } for pid=56187 comm="safe_timer" name="/" dev="overlay" ino=1970683 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c367,c973 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051723.059:7772): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/class/net/ens1f1" dev="sysfs" ino=37774 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.062:6632): avc: denied { search } for pid=34150 comm="node_exporter" name="user" dev="tmpfs" ino=13870 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051655.439:7419): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-sync-overview.json" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051643.058:7364): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="overlay" ino=1968497 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c65,c509 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.059:8874): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=48270 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051780.465:8010): avc: denied { create } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051780.465:8009): avc: denied { search } for pid=42730 comm="prometheus" name="etc" dev="sda1" ino=1970586 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051941.712:8834): avc: denied { search } for pid=44966 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051733.060:7861): avc: denied { search } for pid=34150 comm="node_exporter" name="user" dev="tmpfs" ino=13870 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051593.058:7136): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/7" dev="proc" ino=153420 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051570.465:7006): avc: denied { connect } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051655.438:7414): avc: denied { lock } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051942.054:8850): avc: denied { read } for pid=25126 comm="conmon" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051783.836:8105): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051669.555:7492): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=394712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051860.464:8459): avc: denied { search } for pid=42730 comm="prometheus" name="etc" dev="sda1" ino=1970586 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051587.762:7111): avc: denied { dac_read_search } for pid=25150 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051573.075:7057): avc: denied { search } for pid=25523 comm="safe_timer" name="etc" dev="sda1" ino=1443992 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051733.059:7859): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051572.760:7024): avc: denied { open } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051584.510:7088): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051570.776:7015): avc: denied { search } for pid=25126 comm="conmon" name="journal" dev="tmpfs" ino=14663 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051584.778:7096): avc: denied { search } for pid=25126 comm="conmon" name="systemd" dev="tmpfs" ino=14385 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051781.439:8041): avc: denied { read open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051884.399:8561): avc: denied { write } for pid=40781 comm="grafana-server" path="socket:[337809]" dev="sockfs" ino=337809 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051926.975:8772): avc: denied { read } for pid=25523 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051780.465:8013): avc: denied { connect } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051590.465:7124): avc: denied { read } for pid=42730 comm="prometheus" path="socket:[302600]" dev="sockfs" ino=302600 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051514.438:6766): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051707.481:7634): avc: denied { use } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051573.060:7039): avc: denied { open } for pid=34150 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=30065 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051794.239:8131): avc: denied { search } for pid=40781 comm="grafana-server" name="var" dev="sda1" ino=1968491 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051727.438:7800): avc: denied { search } for pid=40781 comm="grafana-server" name="/" dev="overlay" ino=1968482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051852.866:8365): avc: denied { getattr } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051723.061:7778): avc: denied { search } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=156443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051729.074:7831): avc: denied { read } for pid=92220 comm="pgrep" name="status" dev="proc" ino=124126 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051851.332:8333): avc: denied { write } for pid=74283 comm="ceph_timer" path="pipe:[267013]" dev="pipefs" ino=267013 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051960.669:8913): avc: denied { shutdown } for pid=25523 comm="msgr-worker-2" laddr=172.21.15.38 lport=57224 faddr=172.21.15.38 fport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051707.481:7636): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051712.439:7723): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.060:7038): avc: denied { read } for pid=34150 comm="node_exporter" name="sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051595.565:7158): avc: denied { getattr } for pid=42730 comm="prometheus" path="/prometheus/queries.active" dev="dm-4" ino=158 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051669.818:7494): avc: denied { use } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051933.061:8819): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051642.798:7363): avc: denied { dac_read_search } for pid=25150 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051573.060:7048): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051509.784:6699): avc: denied { write } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051713.060:7741): avc: denied { search } for pid=34150 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.058:6610): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/7" dev="proc" ino=153420 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.060:8406): avc: denied { search } for pid=34150 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616051579.100:7060): avc: denied { read } for pid=25523 comm="safe_timer" name="meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.059:7729): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051726.309:7784): avc: denied { append } for pid=41370 comm="log" path="/var/log/ceph/ceph-osd.0.log" dev="sda1" ino=396216 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051643.060:7386): avc: denied { search } for pid=34150 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051789.087:8122): avc: denied { open } for pid=95286 comm="pgrep" path="/proc/25150/status" dev="proc" ino=127371 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.060:8404): avc: denied { search } for pid=34150 comm="node_exporter" name="user" dev="tmpfs" ino=13870 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.394:7289): avc: denied { open } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051950.464:8903): avc: denied { search } for pid=42730 comm="prometheus" name="/" dev="overlay" ino=1970479 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051782.830:8065): avc: denied { dac_read_search } for pid=25150 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051727.438:7804): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051873.059:8542): avc: denied { read } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051530.465:6812): avc: denied { append } for pid=42730 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051863.059:8471): avc: denied { read } for pid=34150 comm="node_exporter" name="fd" dev="proc" ino=161740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.035:7280): avc: denied { read } for pid=25126 comm="conmon" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051568.766:6974): avc: denied { sendto } for pid=25126 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051727.796:7816): avc: denied { search } for pid=41370 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970626 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c358,c658 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051793.607:8128): avc: denied { dac_override } for pid=40781 comm="grafana-server" capability=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051922.963:8679): avc: denied { open } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051712.438:7721): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.875:8420): avc: denied { write } for pid=25126 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051922.741:8665): avc: denied { append } for pid=25150 comm="log" path="/var/log/ceph/ceph-mon.smithi038.log" dev="sda1" ino=396143 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051490.525:6567): avc: denied { read } for pid=56187 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051712.438:7722): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc" dev="sda1" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051922.963:8679): avc: denied { search } for pid=25523 comm="safe_timer" name="usr" dev="sda1" ino=789155 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051637.437:7291): avc: denied { getattr } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051663.060:7471): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=161750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051744.510:7877): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051870.651:8508): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.061:8223): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051924.511:8737): avc: denied { lock } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051709.439:7680): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051514.438:6767): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051942.883:8862): avc: denied { getattr } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051593.059:7145): avc: denied { search } for pid=34150 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051593.059:7140): avc: denied { read } for pid=34150 comm="node_exporter" name="net" dev="sysfs" ino=20806 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.060:8694): avc: denied { read } for pid=34150 comm="node_exporter" name="addr_assign_type" dev="sysfs" ino=36729 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051941.712:8836): avc: denied { read } for pid=44966 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051567.039:6939): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051785.986:8114): avc: denied { write } for pid=25126 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051926.027:8765): avc: denied { write } for pid=25126 comm="conmon" name="socket" dev="tmpfs" ino=14667 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051933.060:8814): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051857.867:8455): avc: denied { open } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051520.465:6785): avc: denied { setopt } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051711.470:7714): avc: denied { write } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051727.839:7824): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=394712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051781.438:8036): avc: denied { getattr } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051871.439:8522): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-sync-overview.json" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051733.059:7857): avc: denied { read } for pid=34150 comm="node_exporter" name="mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051727.438:7802): avc: denied { lock } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051852.542:8360): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.059:6726): avc: denied { open } for pid=34150 comm="node_exporter" path="/sys/class/net" dev="sysfs" ino=20806 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051586.438:7109): avc: denied { read open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051567.039:6937): avc: denied { search } for pid=25523 comm="safe_timer" name="/" dev="overlay" ino=1443983 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051707.729:7646): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051491.748:6575): avc: denied { read } for pid=56187 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.060:7743): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051584.136:7077): avc: denied { append } for pid=56187 comm="log" path="/var/log/ceph/ceph-osd.3.log" dev="sda1" ino=396225 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.059:8393): avc: denied { read } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.758:6757): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="tmpfs" ino=14376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051568.438:6965): avc: denied { getattr } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051730.465:7838): avc: denied { setopt } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.059:6618): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.438:8418): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.063:6739): avc: denied { getattr } for pid=34150 comm="node_exporter" name="/" dev="tmpfs" ino=14377 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051794.345:8132): avc: denied { create } for pid=40781 comm="grafana-server" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.062:6632): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="tmpfs" ino=14376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051570.465:7003): avc: denied { search } for pid=42730 comm="prometheus" name="/" dev="overlay" ino=1970479 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.059:8077): avc: denied { read } for pid=34150 comm="node_exporter" name="mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051500.465:6679): avc: denied { search } for pid=42730 comm="prometheus" name="etc" dev="sda1" ino=1970586 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051657.801:7443): avc: denied { getattr } for pid=25150 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.061:7480): avc: denied { search } for pid=34150 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616051943.062:8885): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051926.988:8774): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=394712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051726.766:7793): avc: denied { append } for pid=56187 comm="log" path="/var/log/ceph/ceph-osd.3.log" dev="sda1" ino=396225 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051726.865:7795): avc: denied { search } for pid=56187 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970683 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c367,c973 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051572.760:7025): avc: denied { getattr } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.059:7034): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051780.466:8016): avc: denied { read } for pid=42730 comm="prometheus" path="socket:[338073]" dev="sockfs" ino=338073 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051851.367:8340): avc: denied { append } for pid=42730 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051710.430:7698): avc: denied { search } for pid=44966 comm="safe_timer" name="/" dev="overlay" ino=1970645 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c812 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.063:8887): avc: denied { search } for pid=34150 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051942.054:8851): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="tmpfs" ino=14376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051513.059:6724): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051490.581:6569): avc: denied { search } for pid=25523 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051712.439:7723): avc: denied { read open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.061:8226): avc: denied { search } for pid=34150 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.437:8895): avc: denied { search } for pid=40781 comm="grafana-server" name="/" dev="overlay" ino=1968482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051586.438:7110): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/host-details.json" dev="overlay" ino=1574967 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051585.561:7106): avc: denied { search } for pid=44966 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970645 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c812 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.483:7809): avc: denied { use } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051853.060:8401): avc: denied { search } for pid=34150 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051799.882:8177): avc: denied { read } for pid=25523 comm="mgr-fin" name="localtime" dev="overlay" ino=394694 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051798.020:8147): avc: denied { remove_name } for pid=25150 comm="rocksdb:high0" name="000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051492.742:6605): avc: denied { open } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051656.034:7432): avc: denied { write } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051798.835:8160): avc: denied { search } for pid=56187 comm="safe_timer" name="diff" dev="sda1" ino=1970683 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051853.060:8405): avc: denied { search } for pid=34150 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.750:6753): avc: denied { search } for pid=56187 comm="safe_timer" name="/" dev="overlay" ino=1970683 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c367,c973 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051942.883:8860): avc: denied { search } for pid=25150 comm="safe_timer" name="mon.smithi038" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051593.060:7154): avc: denied { search } for pid=34150 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.059:8074): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=161740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.059:8075): avc: denied { read } for pid=34150 comm="node_exporter" name="hwmon" dev="sysfs" ino=20770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.060:8221): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051492.606:6602): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051514.438:6766): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051782.830:8066): avc: denied { read } for pid=25150 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051712.816:7725): avc: denied { open } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051707.481:7636): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="tmpfs" ino=14376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051933.059:8806): avc: denied { read } for pid=34150 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051570.776:7013): avc: denied { write } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051573.060:7047): avc: denied { search } for pid=34150 comm="node_exporter" name="fs" dev="proc" ino=161749 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051782.121:8047): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=394712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051933.060:8813): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051872.870:8532): avc: denied { search } for pid=25150 comm="safe_timer" name="/" dev="overlay" ino=790638 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051798.020:8147): avc: denied { unlink } for pid=25150 comm="rocksdb:high0" name="000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.062:6737): avc: denied { search } for pid=34150 comm="node_exporter" name="1" dev="proc" ino=157331 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051570.466:7011): avc: denied { append } for pid=42730 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051592.767:7129): avc: denied { getattr } for pid=25150 comm="rstore_compact" path="/sys/dev/block/253:4" dev="sysfs" ino=49632 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051942.054:8851): avc: denied { search } for pid=25126 comm="conmon" name="systemd" dev="tmpfs" ino=14385 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051781.438:8040): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051873.061:8553): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051513.758:6757): avc: denied { search } for pid=25126 comm="conmon" name="journal" dev="tmpfs" ino=14663 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051853.437:8414): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc" dev="sda1" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051800.000:8178): avc: denied { write } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051713.060:7743): avc: denied { search } for pid=34150 comm="node_exporter" name="kernel" dev="proc" ino=166165 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051593.060:7153): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="tmpfs" ino=14376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.059:6722): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051517.748:6779): avc: denied { getattr } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051584.778:7096): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051490.465:6566): avc: denied { append } for pid=42730 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.484:7810): avc: denied { read } for pid=25126 comm="conmon" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051784.120:8106): avc: denied { search } for pid=25523 comm="safe_timer" name="libpod-c85e7388139cde13396994da6ee9d29bf47c41b4da629ccf04835de0ad787d55.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.062:8884): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051733.060:7863): avc: denied { search } for pid=34150 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051639.406:7342): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051783.059:8073): avc: denied { read } for pid=34150 comm="node_exporter" name="stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051572.760:7024): avc: denied { search } for pid=25150 comm="safe_timer" name="mon.smithi038" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051873.061:8549): avc: denied { search } for pid=34150 comm="node_exporter" name="kernel" dev="proc" ino=166165 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051870.465:8496): avc: denied { search } for pid=42730 comm="prometheus" name="/" dev="overlay" ino=1970479 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.060:7051): avc: denied { search } for pid=34150 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051643.058:7370): avc: denied { read } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051933.897:8821): avc: denied { sendto } for pid=25126 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051933.060:8815): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="tmpfs" ino=14376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051781.438:8036): avc: denied { search } for pid=40781 comm="grafana-server" name="/" dev="overlay" ino=1968482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051733.059:7857): avc: denied { search } for pid=34150 comm="node_exporter" name="1" dev="proc" ino=157331 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051783.059:8072): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/7" dev="proc" ino=153420 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051866.615:8478): avc: denied { search } for pid=25523 comm="safe_timer" name="diff" dev="sda1" ino=1443983 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051853.437:8415): avc: denied { lock } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051871.439:8521): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051655.660:7430): avc: denied { open } for pid=44966 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051639.406:7343): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051707.480:7632): avc: denied { write } for pid=25150 comm="msgr-worker-2" laddr=172.21.15.38 lport=3300 faddr=172.21.15.175 fport=56714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.836:8105): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="tmpfs" ino=14376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051851.499:8341): avc: denied { search } for pid=50713 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051583.058:7064): avc: denied { read } for pid=34150 comm="node_exporter" name="stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051583.058:7069): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051783.060:8087): avc: denied { read } for pid=34150 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052860.670:9043): avc: denied { read } for pid=25523 comm="msgr-worker-1" path="socket:[364981]" dev="sockfs" ino=364981 scontext=system_u:system_r:spc_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1', 'type=AVC msg=audit(1616051637.797:7319): avc: denied { getattr } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.059:7029): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=161740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051860.464:8459): avc: denied { search } for pid=42730 comm="prometheus" name="/" dev="overlay" ino=1970479 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051789.087:8122): avc: denied { read } for pid=95286 comm="pgrep" name="status" dev="proc" ino=127371 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051640.437:7348): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.819:7817): avc: denied { dac_read_search } for pid=25150 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051568.439:6970): avc: denied { read open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051640.464:7351): avc: denied { search } for pid=42730 comm="prometheus" name="etc" dev="sda1" ino=1970586 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051643.058:7368): avc: denied { search } for pid=34150 comm="node_exporter" name="fs" dev="proc" ino=161749 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.059:8081): avc: denied { search } for pid=34150 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.071:8893): avc: denied { open } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.060:6735): avc: denied { search } for pid=34150 comm="node_exporter" name="kernel" dev="proc" ino=166165 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052140.681:8969): avc: denied { write } for pid=25523 comm="msgr-worker-1" laddr=172.21.15.38 lport=58510 faddr=172.21.15.38 fport=6800 scontext=system_u:system_r:spc_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1', 'type=AVC msg=audit(1616051490.438:6556): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.061:7749): avc: denied { search } for pid=34150 comm="node_exporter" name="user" dev="tmpfs" ino=13870 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051514.739:6775): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.035:7279): avc: denied { use } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051491.754:6578): avc: denied { search } for pid=25126 comm="conmon" name="systemd" dev="tmpfs" ino=14385 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051925.537:8761): avc: denied { write } for pid=56187 comm="tp_osd_tp" path="pipe:[219361]" dev="pipefs" ino=219361 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051800.465:8192): avc: denied { connect } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.060:8222): avc: denied { read } for pid=34150 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051930.465:8783): avc: denied { create } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.058:8867): avc: denied { read } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.765:7754): avc: denied { open } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.060:6628): avc: denied { search } for pid=34150 comm="node_exporter" name="1" dev="proc" ino=157331 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051950.464:8906): avc: denied { connect } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051519.863:6782): avc: denied { getattr } for pid=25523 comm="mgr-fin" path="/usr/share/zoneinfo/UTC" dev="overlay" ino=1312345 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.060:7474): avc: denied { search } for pid=34150 comm="node_exporter" name="1" dev="proc" ino=157331 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051853.059:8387): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051779.882:7993): avc: denied { read } for pid=25523 comm="mgr-fin" name="localtime" dev="overlay" ino=394694 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051938.077:8828): avc: denied { open } for pid=41370 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051779.716:7991): avc: denied { write } for pid=25150 comm="ms_dispatch" path="pipe:[122661]" dev="pipefs" ino=122661 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051590.464:7116): avc: denied { create } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.062:8881): avc: denied { read } for pid=34150 comm="node_exporter" name="entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051933.059:8799): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051491.754:6576): avc: denied { use } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051942.054:8851): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051523.059:6803): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051584.778:7096): avc: denied { search } for pid=25126 comm="conmon" name="journal" dev="tmpfs" ino=14663 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051933.059:8801): avc: denied { read } for pid=34150 comm="node_exporter" name="mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051490.464:6559): avc: denied { search } for pid=42730 comm="prometheus" name="/" dev="overlay" ino=1970479 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051733.059:7857): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051584.504:7081): avc: denied { write } for pid=50713 comm="safe_timer" path="pipe:[200467]" dev="pipefs" ino=200467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051933.059:8806): avc: denied { read } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051584.778:7096): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="tmpfs" ino=14376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051584.504:7083): avc: denied { write } for pid=50713 comm="msgr-worker-0" laddr=172.21.15.38 lport=57534 faddr=172.21.15.38 fport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051655.469:7421): avc: denied { open } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.059:7458): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="overlay" ino=1968497 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c65,c509 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051851.499:8341): avc: denied { read } for pid=50713 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.060:7745): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051853.059:8394): avc: denied { read } for pid=34150 comm="node_exporter" name="addr_assign_type" dev="sysfs" ino=36729 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051643.059:7377): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051523.059:6801): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051793.058:8124): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="overlay" ino=1968497 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c65,c509 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051490.525:6567): avc: denied { search } for pid=56187 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051571.438:7021): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051933.063:8820): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=161750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.059:8690): avc: denied { search } for pid=34150 comm="node_exporter" name="kernel" dev="proc" ino=166165 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051872.870:8532): avc: denied { dac_read_search } for pid=25150 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051950.464:8903): avc: denied { search } for pid=42730 comm="prometheus" name="etc" dev="sda1" ino=1970586 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051781.997:8044): avc: denied { use } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051802.833:8199): avc: denied { getattr } for pid=25150 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.060:7040): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/hwmon/hwmon0/uevent" dev="sysfs" ino=36917 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.765:7753): avc: denied { search } for pid=25523 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051673.059:7512): avc: denied { search } for pid=34150 comm="node_exporter" name="1" dev="proc" ino=157331 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051733.058:7845): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="overlay" ino=1968497 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c65,c509 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051800.000:8180): avc: denied { write } for pid=25126 comm="conmon" name="socket" dev="tmpfs" ino=14667 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051513.062:6737): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051852.021:8350): avc: denied { sendto } for pid=25126 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051863.060:8475): avc: denied { search } for pid=34150 comm="node_exporter" name="user" dev="tmpfs" ino=13870 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051942.054:8851): avc: denied { sendto } for pid=25126 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051571.439:7023): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.059:7034): avc: denied { search } for pid=34150 comm="node_exporter" name="1" dev="proc" ino=157331 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051873.061:8553): avc: denied { read } for pid=34150 comm="node_exporter" name="mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051727.482:7808): avc: denied { write } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.059:6723): avc: denied { search } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=156443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051852.727:8361): avc: denied { search } for pid=56187 comm="safe_timer" name="/" dev="overlay" ino=1970683 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c367,c973 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.060:8092): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051860.464:8465): avc: denied { getattr } for pid=42730 comm="prometheus" laddr=172.21.15.38 lport=49384 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.889:8715): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="tmpfs" ino=14376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051517.748:6776): avc: denied { search } for pid=25150 comm="safe_timer" name="/" dev="overlay" ino=790638 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051710.007:7697): avc: denied { read } for pid=25150 comm="msgr-worker-2" path="socket:[166319]" dev="sockfs" ino=166319 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051942.883:8860): avc: denied { open } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051728.414:7829): avc: denied { getattr } for pid=25523 comm="mgr-fin" path="/usr/lib64/python3.6" dev="overlay" ino=1050275 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.394:7289): avc: denied { getattr } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051715.566:7760): avc: denied { getattr } for pid=42730 comm="prometheus" path="/prometheus/queries.active" dev="dm-4" ino=158 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.438:7800): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051933.061:8818): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051801.366:8197): avc: denied { signal } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051781.997:8045): avc: denied { read } for pid=25126 comm="conmon" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051853.060:8403): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051872.114:8531): avc: denied { search } for pid=44966 comm="safe_timer" name="/" dev="overlay" ino=1970645 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c812 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051873.061:8553): avc: denied { search } for pid=34150 comm="node_exporter" name="1" dev="proc" ino=157331 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051852.021:8350): avc: denied { search } for pid=25126 comm="conmon" name="journal" dev="tmpfs" ino=14663 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051799.437:8169): avc: denied { search } for pid=40781 comm="grafana-server" name="etc" dev="sda1" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051570.465:7005): avc: denied { setopt } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051937.440:8823): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/host-details.json" dev="overlay" ino=1574967 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051922.955:8678): avc: denied { open } for pid=44966 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051514.438:6763): avc: denied { search } for pid=40781 comm="grafana-server" name="dashboards" dev="sda1" ino=1574963 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051726.865:7795): avc: denied { open } for pid=56187 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051871.438:8516): avc: denied { search } for pid=40781 comm="grafana-server" name="etc" dev="sda1" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051655.566:7426): avc: denied { open } for pid=42730 comm="prometheus" path="/prometheus" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051784.437:8112): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051643.059:7382): avc: denied { search } for pid=34150 comm="node_exporter" name="1" dev="proc" ino=157331 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051780.097:8005): avc: denied { open } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051784.132:8108): avc: denied { open } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051643.058:7366): avc: denied { read } for pid=34150 comm="node_exporter" name="stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051707.815:7650): avc: denied { open } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.060:8700): avc: denied { search } for pid=34150 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.059:8078): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051587.762:7114): avc: denied { getattr } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051508.429:6696): avc: denied { read } for pid=77272 comm="msgr-worker-1" path="pipe:[269127]" dev="pipefs" ino=269127 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051723.059:7770): avc: denied { read } for pid=34150 comm="node_exporter" name="net" dev="sysfs" ino=20806 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051925.438:8757): avc: denied { search } for pid=40781 comm="grafana-server" name="diff" dev="sda1" ino=1968482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051593.058:7135): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="overlay" ino=1968497 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c65,c509 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051710.466:7705): avc: denied { read } for pid=42730 comm="prometheus" path="socket:[326150]" dev="sockfs" ino=326150 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052695.712:9015): avc: denied { write } for pid=25523 comm="msgr-worker-1" laddr=172.21.15.38 lport=58510 faddr=172.21.15.38 fport=6800 scontext=system_u:system_r:spc_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1', 'type=AVC msg=audit(1616051566.427:6923): avc: denied { append } for pid=50713 comm="log" path="/var/log/ceph/ceph-osd.2.log" dev="sda1" ino=396222 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051657.041:7437): avc: denied { read } for pid=25126 comm="conmon" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051933.059:8799): avc: denied { read } for pid=34150 comm="node_exporter" name="stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.484:7811): avc: denied { write } for pid=25126 comm="conmon" name="socket" dev="tmpfs" ino=14667 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051854.095:8436): avc: denied { write } for pid=50713 comm="msgr-worker-1" laddr=172.21.15.38 lport=47776 faddr=172.21.15.38 fport=3300 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051922.951:8674): avc: denied { search } for pid=25523 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051793.838:8130): avc: denied { search } for pid=25126 comm="conmon" name="journal" dev="tmpfs" ino=14663 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051570.465:7009): avc: denied { write } for pid=42730 comm="prometheus" path="socket:[304241]" dev="sockfs" ino=304241 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051585.125:7103): avc: denied { search } for pid=25523 comm="safe_timer" name="libpod-c85e7388139cde13396994da6ee9d29bf47c41b4da629ccf04835de0ad787d55.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.437:7294): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051567.039:6938): avc: denied { read } for pid=25523 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.060:8699): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051800.229:8188): avc: denied { open } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051922.951:8675): avc: denied { search } for pid=25523 comm="safe_timer" name="libpod-c85e7388139cde13396994da6ee9d29bf47c41b4da629ccf04835de0ad787d55.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.058:8865): avc: denied { read } for pid=34150 comm="node_exporter" name="stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051567.759:6944): avc: denied { getattr } for pid=25150 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.071:8893): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.058:8207): avc: denied { read } for pid=34150 comm="node_exporter" name="arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.437:8413): avc: denied { getattr } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051669.146:7490): avc: denied { write } for pid=50713 comm="tp_osd_tp" path="pipe:[200469]" dev="pipefs" ino=200469 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051797.996:8145): avc: denied { open } for pid=25150 comm="rstore_compact" path="/var/lib/ceph/mon/ceph-smithi038/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051782.986:8069): avc: denied { search } for pid=44966 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970645 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c812 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051640.464:7356): avc: denied { connect } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051643.058:7367): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=161740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051514.438:6767): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051733.060:7863): avc: denied { search } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=156443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051852.021:8350): avc: denied { write } for pid=25126 comm="conmon" name="socket" dev="tmpfs" ino=14667 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051568.439:6970): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.059:7026): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="overlay" ino=1968497 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c65,c509 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051570.391:7002): avc: denied { search } for pid=44966 comm="safe_timer" name="/" dev="overlay" ino=1970645 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c812 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.484:7811): avc: denied { write } for pid=25126 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051853.059:8399): avc: denied { search } for pid=34150 comm="node_exporter" name="kernel" dev="proc" ino=166165 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051922.880:8669): avc: denied { search } for pid=25150 comm="safe_timer" name="diff" dev="sda1" ino=790638 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051672.807:7503): avc: denied { getattr } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051520.775:6792): avc: denied { open } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.069:6745): avc: denied { append } for pid=42730 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.061:8407): avc: denied { search } for pid=34150 comm="node_exporter" name="host" dev="sda1" ino=1970467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c65,c509 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051873.062:8559): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051500.466:6687): avc: denied { read } for pid=42730 comm="prometheus" path="socket:[283583]" dev="sockfs" ino=283583 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.058:8385): avc: denied { search } for pid=34150 comm="node_exporter" name="7" dev="proc" ino=153420 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.059:7733): avc: denied { read } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051660.465:7448): avc: denied { search } for pid=42730 comm="prometheus" name="etc" dev="sda1" ino=1970586 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051514.439:6768): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.058:8208): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051643.059:7379): avc: denied { read } for pid=34150 comm="node_exporter" name="hwmon0" dev="sysfs" ino=36920 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051593.059:7147): avc: denied { search } for pid=34150 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051671.652:7499): avc: denied { search } for pid=56187 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970683 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c367,c973 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.058:6609): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="overlay" ino=1968497 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c65,c509 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051643.059:7376): avc: denied { open } for pid=34150 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=48270 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.060:7049): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051871.018:8513): avc: denied { write } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051496.439:6676): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.484:7811): avc: denied { sendto } for pid=25126 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051513.060:6736): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051568.766:6974): avc: denied { write } for pid=25126 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051854.161:8438): avc: denied { search } for pid=41370 comm="safe_timer" name="/" dev="overlay" ino=1970626 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c358,c658 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.382:7287): avc: denied { open } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.059:7460): avc: denied { read } for pid=34150 comm="node_exporter" name="stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.394:7289): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051517.748:6777): avc: denied { search } for pid=25150 comm="safe_timer" name="mon.smithi038" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.060:7044): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.765:7755): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051782.172:8048): avc: denied { search } for pid=56187 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970683 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c367,c973 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.059:8394): avc: denied { open } for pid=34150 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/net/eno1/addr_assign_type" dev="sysfs" ino=36729 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.059:7026): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051567.051:6941): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051730.465:7834): avc: denied { search } for pid=42730 comm="prometheus" name="/" dev="overlay" ino=1970479 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051863.059:8471): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=161740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051520.465:6788): avc: denied { write } for pid=42730 comm="prometheus" path="socket:[287589]" dev="sockfs" ino=287589 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051669.671:7493): avc: denied { search } for pid=44966 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970645 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c812 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051715.566:7759): avc: denied { open } for pid=42730 comm="prometheus" path="/prometheus" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051655.566:7426): avc: denied { read } for pid=42730 comm="prometheus" name="data" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051852.866:8362): avc: denied { dac_read_search } for pid=25150 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051530.464:6811): avc: denied { getattr } for pid=42730 comm="prometheus" path="/etc/hosts" dev="tmpfs" ino=180144 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.438:7296): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051583.058:7063): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051584.327:7079): avc: denied { read } for pid=50713 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051950.464:8905): avc: denied { setopt } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.382:7287): avc: denied { search } for pid=25523 comm="safe_timer" name="libpod-c85e7388139cde13396994da6ee9d29bf47c41b4da629ccf04835de0ad787d55.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051592.767:7131): avc: denied { open } for pid=25150 comm="rstore_compact" path="/sys/devices/virtual/block/dm-4/queue/logical_block_size" dev="sysfs" ino=49669 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.439:7807): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/cephfs-overview.json" dev="sda1" ino=1574966 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051513.063:6741): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="tmpfs" ino=14376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051872.022:8526): avc: denied { sendto } for pid=25126 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051873.061:8554): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051584.327:7078): avc: denied { open } for pid=50713 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051870.465:8496): avc: denied { getattr } for pid=42730 comm="prometheus" path="/etc/hosts" dev="tmpfs" ino=180144 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051722.818:7765): avc: denied { dac_read_search } for pid=25150 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051923.061:8706): avc: denied { search } for pid=34150 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616051587.762:7111): avc: denied { getattr } for pid=25150 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051520.763:6790): avc: denied { read } for pid=25523 comm="safe_timer" name="meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051643.060:7384): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.062:7481): avc: denied { read } for pid=34150 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051745.439:7878): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-overview.json" dev="overlay" ino=1574974 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051799.437:8173): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051655.439:7417): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051710.465:7700): avc: denied { create } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051593.059:7139): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051799.882:8177): avc: denied { read } for pid=25523 comm="mgr-fin" name="localtime" dev="sda1" ino=394694 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051803.059:8213): avc: denied { read } for pid=34150 comm="node_exporter" name="hwmon0" dev="sysfs" ino=36920 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.059:8076): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051872.870:8532): avc: denied { getattr } for pid=25150 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.058:6612): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=161740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051866.627:8481): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=394712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051925.439:8759): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051512.715:6703): avc: denied { search } for pid=25523 comm="safe_timer" name="diff" dev="sda1" ino=1443983 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051923.059:8688): avc: denied { search } for pid=34150 comm="node_exporter" name="fs" dev="proc" ino=161749 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.060:7741): avc: denied { search } for pid=34150 comm="node_exporter" name="fs" dev="proc" ino=161749 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051793.607:8128): avc: denied { create } for pid=40781 comm="grafana-server" name="grafana.db-journal" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051573.059:7035): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=48082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051723.059:7768): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/stat" dev="proc" ino=4026532033 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051490.052:6545): avc: denied { append } for pid=44966 comm="log" path="/var/log/ceph/ceph-osd.1.log" dev="sda1" ino=396218 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051870.283:8494): avc: denied { read } for pid=44966 comm="msgr-worker-1" path="socket:[218869]" dev="sockfs" ino=218869 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051567.759:6945): avc: denied { read } for pid=25150 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.058:8209): avc: denied { search } for pid=34150 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051643.058:7373): avc: denied { open } for pid=34150 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=50013 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051670.438:7496): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051853.071:8408): avc: denied { append } for pid=42730 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051780.097:8006): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.758:6757): avc: denied { search } for pid=25126 comm="conmon" name="systemd" dev="tmpfs" ino=14385 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051491.754:6578): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051669.059:7489): avc: denied { search } for pid=89174 comm="pgrep" name="25150" dev="proc" ino=127332 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051729.074:7830): avc: denied { getattr } for pid=92220 comm="pgrep" path="/proc/25126" dev="proc" ino=124122 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051577.760:7059): avc: denied { search } for pid=25150 comm="safe_timer" name="var" dev="sda1" ino=1183149 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051794.562:8139): avc: denied { read } for pid=25523 comm="msgr-worker-0" path="socket:[165222]" dev="sockfs" ino=165222 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.059:8390): avc: denied { read } for pid=34150 comm="node_exporter" name="net" dev="sysfs" ino=20806 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051784.120:8107): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051933.060:8815): avc: denied { search } for pid=34150 comm="node_exporter" name="user" dev="tmpfs" ino=13870 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051566.522:6932): avc: denied { read } for pid=56187 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051512.747:6708): avc: denied { read } for pid=25150 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051870.651:8508): avc: denied { getattr } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051584.867:7101): avc: denied { read } for pid=25523 comm="mgr-fin" name="localtime" dev="overlay" ino=394694 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051871.438:8516): avc: denied { getattr } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051852.542:8359): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=394712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.059:6618): avc: denied { read } for pid=34150 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.438:7801): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc" dev="sda1" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051803.059:8220): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052455.699:8985): avc: denied { write } for pid=25523 comm="msgr-worker-1" laddr=172.21.15.38 lport=58510 faddr=172.21.15.38 fport=6800 scontext=system_u:system_r:spc_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1', 'type=AVC msg=audit(1616051636.204:7266): avc: denied { open } for pid=50713 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051932.882:8795): avc: denied { getattr } for pid=25150 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.059:6615): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.059:6718): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/7" dev="proc" ino=153420 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.060:7041): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051643.058:7369): avc: denied { read } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.819:7819): avc: denied { getattr } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.060:8093): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="tmpfs" ino=14376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051569.867:7001): avc: denied { search } for pid=25523 comm="mgr-fin" name="usr" dev="sda1" ino=789155 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051673.059:7507): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=161740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051873.062:8558): avc: denied { search } for pid=34150 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616051713.060:7743): avc: denied { read } for pid=34150 comm="node_exporter" name="entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051669.555:7492): avc: denied { search } for pid=25523 comm="safe_timer" name="usr" dev="sda1" ino=789155 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051669.818:7494): avc: denied { write } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051922.963:8680): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051873.059:8537): avc: denied { search } for pid=34150 comm="node_exporter" name="7" dev="proc" ino=153420 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.059:8399): avc: denied { read } for pid=34150 comm="node_exporter" name="entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051566.522:6932): avc: denied { search } for pid=56187 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051941.716:8838): avc: denied { read } for pid=41370 comm="msgr-worker-0" path="socket:[236174]" dev="sockfs" ino=236174 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051941.712:8834): avc: denied { search } for pid=44966 comm="safe_timer" name="diff" dev="sda1" ino=1970645 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051922.880:8669): avc: denied { search } for pid=25150 comm="safe_timer" name="var" dev="sda1" ino=1183149 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051490.464:6561): avc: denied { setopt } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051593.059:7142): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.059:7732): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051672.807:7501): avc: denied { search } for pid=25150 comm="safe_timer" name="/" dev="overlay" ino=790638 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.060:7042): avc: denied { search } for pid=34150 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.061:6630): avc: denied { getattr } for pid=34150 comm="node_exporter" name="/" dev="tmpfs" ino=14377 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.059:6728): avc: denied { read } for pid=34150 comm="node_exporter" name="file-nr" dev="proc" ino=161750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.059:6717): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051570.465:7007): avc: denied { connect } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.060:7738): avc: denied { read } for pid=34150 comm="node_exporter" name="addr_assign_type" dev="sysfs" ino=36729 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051583.058:7066): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051723.060:7774): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/hwmon/hwmon0" dev="sysfs" ino=36916 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051570.776:7014): avc: denied { read } for pid=25126 comm="conmon" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051513.059:6720): avc: denied { read } for pid=34150 comm="node_exporter" name="stat" dev="proc" ino=4026532033 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051709.439:7681): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-overview.json" dev="overlay" ino=1574974 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051782.830:8065): avc: denied { search } for pid=25150 comm="safe_timer" name="var" dev="sda1" ino=1183149 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051780.465:8011): avc: denied { create } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.035:7281): avc: denied { search } for pid=25126 comm="conmon" name="journal" dev="tmpfs" ino=14663 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051640.464:7354): avc: denied { create } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051709.438:7676): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc" dev="sda1" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051707.815:7650): avc: denied { read } for pid=25150 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051490.594:6572): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051873.059:8541): avc: denied { read } for pid=34150 comm="node_exporter" name="hwmon" dev="sysfs" ino=20770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051512.715:6704): avc: denied { read } for pid=25523 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051726.865:7795): avc: denied { read } for pid=56187 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.059:6625): avc: denied { search } for pid=34150 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051494.380:6668): avc: denied { read } for pid=41370 comm="msgr-worker-0" path="socket:[224118]" dev="sockfs" ino=224118 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051707.741:7647): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.059:8073): avc: denied { search } for pid=34150 comm="node_exporter" name="7" dev="proc" ino=153420 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051784.437:8111): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051508.438:6697): avc: denied { search } for pid=40781 comm="grafana-server" name="dashboards" dev="sda1" ino=1574963 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051593.060:7155): avc: denied { search } for pid=34150 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616051927.882:8780): avc: denied { getattr } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.437:8899): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051492.742:6604): avc: denied { search } for pid=25150 comm="safe_timer" name="/" dev="overlay" ino=790638 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.059:8080): avc: denied { read } for pid=34150 comm="node_exporter" name="dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051926.975:8772): avc: denied { open } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051794.239:8131): avc: denied { search } for pid=40781 comm="grafana-server" name="/" dev="overlay" ino=1968482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051779.706:7986): avc: denied { append } for pid=56187 comm="log" path="/var/log/ceph/ceph-osd.3.log" dev="sda1" ino=396225 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051926.027:8765): avc: denied { search } for pid=25126 comm="conmon" name="journal" dev="tmpfs" ino=14663 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051573.059:7028): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051800.217:8186): avc: denied { open } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051733.060:7864): avc: denied { search } for pid=34150 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616051802.833:8199): avc: denied { dac_read_search } for pid=25150 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051866.615:8479): avc: denied { read } for pid=25523 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.061:7478): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="tmpfs" ino=14376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051796.438:8144): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.797:7316): avc: denied { dac_read_search } for pid=25150 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051513.059:6717): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="overlay" ino=1968497 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c65,c509 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.035:7281): avc: denied { sendto } for pid=25126 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051493.057:6608): avc: denied { signal } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.058:6611): avc: denied { search } for pid=34150 comm="node_exporter" name="7" dev="proc" ino=153420 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.060:8694): avc: denied { open } for pid=34150 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/net/eno1/addr_assign_type" dev="sysfs" ino=36729 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051490.437:6551): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051490.052:6547): avc: denied { write } for pid=44966 comm="msgr-worker-1" laddr=172.21.15.38 lport=57460 faddr=172.21.15.38 fport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051780.465:8009): avc: denied { search } for pid=42730 comm="prometheus" name="/" dev="overlay" ino=1970479 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051654.511:7401): avc: denied { search } for pid=40781 comm="grafana-server" name="/" dev="overlay" ino=1968482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.439:7806): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="sda1" ino=1574965 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051709.439:7679): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.889:8715): avc: denied { write } for pid=25126 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051514.439:6770): avc: denied { read } for pid=40781 comm="grafana-server" name="cephfs-overview.json" dev="sda1" ino=1574966 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051923.061:8703): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051530.834:6814): avc: denied { open } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051637.035:7281): avc: denied { search } for pid=25126 comm="conmon" name="systemd" dev="tmpfs" ino=14385 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051663.061:7477): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.058:6614): avc: denied { search } for pid=34150 comm="node_exporter" name="fs" dev="proc" ino=161749 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051711.471:7716): avc: denied { write } for pid=25126 comm="conmon" name="socket" dev="tmpfs" ino=14667 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051663.060:7471): avc: denied { search } for pid=34150 comm="node_exporter" name="fs" dev="proc" ino=161749 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051856.437:8452): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051794.354:8137): avc: denied { write } for pid=40781 comm="grafana-server" path="socket:[337809]" dev="sockfs" ino=337809 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.060:8088): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051491.988:6583): avc: denied { search } for pid=50713 comm="safe_timer" name="/" dev="overlay" ino=1970664 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c77,c661 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051571.063:7018): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051643.059:7376): avc: denied { read } for pid=34150 comm="node_exporter" name="ce_count" dev="sysfs" ino=48270 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.058:8870): avc: denied { read } for pid=34150 comm="node_exporter" name="hwmon" dev="sysfs" ino=20770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051657.801:7444): avc: denied { search } for pid=25150 comm="safe_timer" name="mon.smithi038" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051571.439:7023): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051657.041:7438): avc: denied { write } for pid=25126 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051569.266:6997): avc: denied { read } for pid=74283 comm="msgr-worker-2" path="pipe:[267014]" dev="pipefs" ino=267014 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.061:8224): avc: denied { search } for pid=34150 comm="node_exporter" name="fs" dev="proc" ino=161749 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051852.866:8363): avc: denied { open } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051584.867:7101): avc: denied { getattr } for pid=25523 comm="mgr-fin" path="/usr/share/zoneinfo/UTC" dev="overlay" ino=1312345 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.438:6640): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/pool-detail.json" dev="overlay" ino=1574971 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.060:7745): avc: denied { read } for pid=34150 comm="node_exporter" name="mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051733.058:7845): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.058:8205): avc: denied { read } for pid=34150 comm="node_exporter" name="fd" dev="proc" ino=161740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051922.951:8674): avc: denied { open } for pid=25523 comm="safe_timer" path="/proc/meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.438:8901): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/osds-overview.json" dev="overlay" ino=1574970 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.827:7822): avc: denied { open } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051860.464:8462): avc: denied { setopt } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051857.867:8455): avc: denied { search } for pid=25150 comm="safe_timer" name="mon.smithi038" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.059:6616): avc: denied { read } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051707.741:7648): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.061:7055): avc: denied { fork } for pid=34150 comm="node_exporter" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.059:6719): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051650.464:7391): avc: denied { setopt } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051867.869:8483): avc: denied { search } for pid=25150 comm="safe_timer" name="var" dev="sda1" ino=1183149 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051943.058:8872): avc: denied { open } for pid=34150 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=48270 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051593.060:7149): avc: denied { read } for pid=34150 comm="node_exporter" name="entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051744.510:7877): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051855.234:8447): avc: denied { search } for pid=44966 comm="safe_timer" name="/" dev="overlay" ino=1970645 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c812 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051490.437:6553): avc: denied { lock } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051924.511:8739): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051727.083:7796): avc: denied { search } for pid=50713 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970664 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c77,c661 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051497.774:6678): avc: denied { write } for pid=25126 comm="conmon" name="socket" dev="tmpfs" ino=14667 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051707.492:7642): avc: denied { search } for pid=44966 comm="safe_timer" name="/" dev="overlay" ino=1970645 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c812 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.063:6742): avc: denied { search } for pid=34150 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051866.615:8480): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051800.464:8189): avc: denied { search } for pid=42730 comm="prometheus" name="/" dev="overlay" ino=1970479 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.437:8895): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051584.327:7078): avc: denied { search } for pid=50713 comm="safe_timer" name="diff" dev="sda1" ino=1970664 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051663.059:7463): avc: denied { read } for pid=34150 comm="node_exporter" name="sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051784.132:8108): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051513.062:6737): avc: denied { read } for pid=34150 comm="node_exporter" name="mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051727.819:7818): avc: denied { search } for pid=25150 comm="safe_timer" name="mon.smithi038" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.060:7741): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=161750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.394:7289): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051567.051:6940): avc: denied { open } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051733.059:7860): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051873.059:8540): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=20785 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051667.976:7485): avc: denied { getattr } for pid=25523 comm="mgr-fin" path="/usr/lib64/python3.6" dev="overlay" ino=1050275 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051490.581:6568): avc: denied { search } for pid=25523 comm="safe_timer" name="/" dev="overlay" ino=1443983 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051860.464:8461): avc: denied { create } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051940.466:8832): avc: denied { append } for pid=42730 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051707.729:7645): avc: denied { search } for pid=25523 comm="safe_timer" name="libpod-c85e7388139cde13396994da6ee9d29bf47c41b4da629ccf04835de0ad787d55.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051922.951:8674): avc: denied { read } for pid=25523 comm="safe_timer" name="meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051512.715:6705): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051593.058:7137): avc: denied { read } for pid=34150 comm="node_exporter" name="stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.035:7281): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051707.815:7652): avc: denied { getattr } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051571.438:7021): avc: denied { search } for pid=40781 comm="grafana-server" name="etc" dev="sda1" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051727.827:7822): avc: denied { search } for pid=25523 comm="safe_timer" name="libpod-c85e7388139cde13396994da6ee9d29bf47c41b4da629ccf04835de0ad787d55.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.058:8210): avc: denied { search } for pid=34150 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051928.032:8781): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="tmpfs" ino=14376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051573.060:7046): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051733.059:7855): avc: denied { read } for pid=34150 comm="node_exporter" name="eno1" dev="sysfs" ino=36721 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.059:8683): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="overlay" ino=1968497 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c65,c509 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051673.060:7514): avc: denied { open } for pid=34150 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=30065 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051568.438:6965): avc: denied { search } for pid=40781 comm="grafana-server" name="/" dev="overlay" ino=1968482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.058:8863): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.058:6611): avc: denied { read } for pid=34150 comm="node_exporter" name="stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.071:8893): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=394712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051513.059:6724): avc: denied { read } for pid=34150 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051490.581:6569): avc: denied { open } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.059:8391): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051643.058:7374): avc: denied { read } for pid=34150 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051780.097:8005): avc: denied { search } for pid=25523 comm="safe_timer" name="libpod-c85e7388139cde13396994da6ee9d29bf47c41b4da629ccf04835de0ad787d55.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051723.060:7775): avc: denied { read } for pid=34150 comm="node_exporter" name="file-nr" dev="proc" ino=161750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.060:6626): avc: denied { search } for pid=34150 comm="node_exporter" name="kernel" dev="proc" ino=166165 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.483:7809): avc: denied { write } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051872.870:8533): avc: denied { open } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051723.060:7776): avc: denied { read } for pid=34150 comm="node_exporter" name="entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051857.867:8455): avc: denied { read } for pid=25150 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.758:6757): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051854.239:8439): avc: denied { search } for pid=40781 comm="grafana-server" name="var" dev="sda1" ino=1968491 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051707.741:7647): avc: denied { search } for pid=25523 comm="safe_timer" name="usr" dev="sda1" ino=789155 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051960.669:8917): avc: denied { name_connect } for pid=25523 comm="msgr-worker-2" dest=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unreserved_port_t:s0 tclass=tcp_socket permissive=1', 'type=AVC msg=audit(1616051584.778:7095): avc: denied { read } for pid=25126 comm="conmon" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051514.438:6763): avc: denied { search } for pid=40781 comm="grafana-server" name="etc" dev="sda1" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051727.484:7811): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="tmpfs" ino=14376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051573.060:7042): avc: denied { read } for pid=34150 comm="node_exporter" name="entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.060:8878): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051745.979:7879): avc: denied { write } for pid=25126 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051710.563:7707): avc: denied { search } for pid=56187 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970683 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c367,c973 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051794.345:8134): avc: denied { connect } for pid=40781 comm="grafana-server" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051655.438:7412): avc: denied { search } for pid=40781 comm="grafana-server" name="dashboards" dev="sda1" ino=1574963 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051853.058:8386): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=161740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051657.801:7445): avc: denied { getattr } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051670.439:7497): avc: denied { read open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.060:8695): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051779.706:7987): avc: denied { read } for pid=56187 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051779.882:7993): avc: denied { search } for pid=25523 comm="mgr-fin" name="etc" dev="sda1" ino=1443992 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051669.059:7487): avc: denied { read } for pid=89174 comm="pgrep" name="status" dev="proc" ino=124126 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051793.607:8128): avc: denied { write } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db-journal" dev="overlay" ino=1970591 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051640.465:7358): avc: denied { write } for pid=42730 comm="prometheus" path="socket:[313147]" dev="sockfs" ino=313147 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051661.367:7457): avc: denied { signal } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.058:8869): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=20785 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051669.059:7487): avc: denied { open } for pid=89174 comm="pgrep" path="/proc/25126/status" dev="proc" ino=124126 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051853.438:8418): avc: denied { read open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.059:7027): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/7" dev="proc" ino=153420 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.062:8881): avc: denied { search } for pid=34150 comm="node_exporter" name="kernel" dev="proc" ino=166165 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051872.870:8533): avc: denied { read } for pid=25150 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051568.438:6969): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051931.012:8791): avc: denied { open } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051673.059:7511): avc: denied { search } for pid=34150 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051927.881:8779): avc: denied { open } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051733.060:7862): avc: denied { search } for pid=34150 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.059:8398): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051803.061:8225): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="tmpfs" ino=14376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.839:7824): avc: denied { search } for pid=25523 comm="safe_timer" name="etc" dev="sda1" ino=1443992 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051707.492:7642): avc: denied { read } for pid=44966 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051733.059:7856): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051788.932:8118): avc: denied { getattr } for pid=25523 comm="mgr-fin" path="/usr/lib64/python3.6" dev="overlay" ino=1050275 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051673.059:7508): avc: denied { read } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.058:8385): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051933.059:8801): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051569.867:7001): avc: denied { read } for pid=25523 comm="mgr-fin" name="localtime" dev="sda1" ino=394694 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051790.465:8123): avc: denied { append } for pid=42730 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051523.059:6804): avc: denied { search } for pid=34150 comm="node_exporter" name="fs" dev="proc" ino=161749 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051490.437:6551): avc: denied { search } for pid=40781 comm="grafana-server" name="/" dev="overlay" ino=1968482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051731.366:7844): avc: denied { signal } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051955.566:8912): avc: denied { getattr } for pid=42730 comm="prometheus" path="/prometheus/wal" dev="dm-4" ino=16777360 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.060:7045): avc: denied { read } for pid=34150 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051492.606:6602): avc: denied { open } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051523.060:6806): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051733.060:7865): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051930.466:8787): avc: denied { getattr } for pid=42730 comm="prometheus" laddr=172.21.15.38 lport=55609 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.061:7749): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="tmpfs" ino=14376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.060:7473): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051852.530:8357): avc: denied { read } for pid=25523 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.058:8385): avc: denied { read } for pid=34150 comm="node_exporter" name="stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.061:8704): avc: denied { search } for pid=34150 comm="node_exporter" name="user" dev="tmpfs" ino=13870 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051852.542:8359): avc: denied { open } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051637.439:7298): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-sync-overview.json" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051636.204:7265): avc: denied { open } for pid=50713 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051941.716:8837): avc: denied { read } for pid=41370 comm="msgr-worker-1" path="socket:[236177]" dev="sockfs" ino=236177 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.060:8405): avc: denied { search } for pid=34150 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051568.438:6967): avc: denied { lock } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051523.058:6800): avc: denied { read } for pid=34150 comm="node_exporter" name="hwmon0" dev="sysfs" ino=36920 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051657.801:7446): avc: denied { getattr } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051710.465:7699): avc: denied { search } for pid=42730 comm="prometheus" name="/" dev="overlay" ino=1970479 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051870.651:8508): avc: denied { search } for pid=25523 comm="safe_timer" name="etc" dev="sda1" ino=1443992 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051513.758:6755): avc: denied { write } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051655.469:7421): avc: denied { search } for pid=25523 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051657.041:7438): avc: denied { search } for pid=25126 comm="conmon" name="systemd" dev="tmpfs" ino=14385 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051871.438:8516): avc: denied { search } for pid=40781 comm="grafana-server" name="/" dev="overlay" ino=1968482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051873.059:8535): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="overlay" ino=1968497 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c65,c509 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051570.776:7013): avc: denied { use } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051709.438:7675): avc: denied { search } for pid=40781 comm="grafana-server" name="/" dev="overlay" ino=1968482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051863.060:8472): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051512.931:6711): avc: denied { append } for pid=44966 comm="log" path="/var/log/ceph/ceph-osd.1.log" dev="sda1" ino=396218 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051926.885:8771): avc: denied { search } for pid=50713 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.060:6628): avc: denied { read } for pid=34150 comm="node_exporter" name="mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051637.382:7288): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051733.063:7869): avc: denied { read } for pid=34150 comm="node_exporter" name="entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.178:8412): avc: denied { open } for pid=41370 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051798.066:8149): avc: denied { write } for pid=25150 comm="rocksdb:low0" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051940.438:8830): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051723.059:7771): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051587.762:7113): avc: denied { getattr } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051529.863:6810): avc: denied { getattr } for pid=25523 comm="mgr-fin" path="/usr/share/zoneinfo/UTC" dev="sda1" ino=1312345 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051923.059:8683): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051924.511:8738): avc: denied { search } for pid=40781 comm="grafana-server" name="var" dev="sda1" ino=1968491 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051657.801:7443): avc: denied { dac_read_search } for pid=25150 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051573.060:7050): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="tmpfs" ino=14376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.035:7279): avc: denied { write } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051783.060:8086): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/class/net/ens1f1" dev="sysfs" ino=37774 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051933.059:8798): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/7" dev="proc" ino=153420 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.060:7473): avc: denied { search } for pid=34150 comm="node_exporter" name="kernel" dev="proc" ino=166165 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051799.438:8176): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/host-details.json" dev="sda1" ino=1574967 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051513.059:6719): avc: denied { search } for pid=34150 comm="node_exporter" name="7" dev="proc" ino=153420 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051925.439:8760): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="overlay" ino=1574965 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051922.880:8669): avc: denied { search } for pid=25150 comm="safe_timer" name="/" dev="overlay" ino=790638 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051730.465:7837): avc: denied { setopt } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.060:7053): avc: denied { search } for pid=34150 comm="node_exporter" name="host" dev="sda1" ino=1970467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c65,c509 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051593.058:7137): avc: denied { search } for pid=34150 comm="node_exporter" name="7" dev="proc" ino=153420 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051570.465:7008): avc: denied { getattr } for pid=42730 comm="prometheus" laddr=172.21.15.38 lport=38791 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051799.437:8172): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051529.766:6809): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="tmpfs" ino=14376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051586.438:7109): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.061:8228): avc: denied { search } for pid=34150 comm="node_exporter" name="host" dev="sda1" ino=1970467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c65,c509 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051854.789:8445): avc: denied { read } for pid=41370 comm="msgr-worker-1" path="pipe:[177753]" dev="pipefs" ino=177753 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.062:8883): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.061:7478): avc: denied { search } for pid=34150 comm="node_exporter" name="user" dev="tmpfs" ino=13870 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.060:8091): avc: denied { read } for pid=34150 comm="node_exporter" name="file-nr" dev="proc" ino=161750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051937.440:8823): avc: denied { read } for pid=40781 comm="grafana-server" name="host-details.json" dev="overlay" ino=1574967 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.063:8888): avc: denied { search } for pid=34150 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616051523.058:6798): avc: denied { open } for pid=34150 comm="node_exporter" path="/sys/class/hwmon" dev="sysfs" ino=20770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051514.438:6764): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc" dev="sda1" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051513.059:6730): avc: denied { read } for pid=34150 comm="node_exporter" name="hwmon0" dev="sysfs" ino=36920 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.060:7741): avc: denied { read } for pid=34150 comm="node_exporter" name="file-nr" dev="proc" ino=161750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051586.437:7107): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051856.439:8454): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051593.060:7149): avc: denied { search } for pid=34150 comm="node_exporter" name="kernel" dev="proc" ino=166165 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.059:8388): avc: denied { search } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=156443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.062:8096): avc: denied { search } for pid=34150 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616051783.060:8091): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=161750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.797:7317): avc: denied { open } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051726.766:7786): avc: denied { write } for pid=74744 comm="ceph_timer" path="pipe:[269468]" dev="pipefs" ino=269468 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.437:8413): avc: denied { search } for pid=40781 comm="grafana-server" name="etc" dev="sda1" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051733.060:7865): avc: denied { read } for pid=34150 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051733.058:7852): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051673.060:7514): avc: denied { read } for pid=34150 comm="node_exporter" name="cpuinfo_max_freq" dev="sysfs" ino=30065 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.035:7281): avc: denied { write } for pid=25126 comm="conmon" name="socket" dev="tmpfs" ino=14667 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051733.063:7870): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051942.054:8851): avc: denied { write } for pid=25126 comm="conmon" name="socket" dev="tmpfs" ino=14667 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051512.747:6708): avc: denied { open } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.764:6659): avc: denied { write } for pid=25126 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051922.740:8663): avc: denied { read } for pid=25150 comm="msgr-worker-2" path="socket:[166319]" dev="sockfs" ino=166319 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.060:8879): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051497.744:6677): avc: denied { getattr } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.060:8692): avc: denied { read } for pid=34150 comm="node_exporter" name="net" dev="sysfs" ino=20806 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051710.465:7702): avc: denied { connect } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051512.964:6713): avc: denied { read } for pid=25150 comm="msgr-worker-2" path="pipe:[122661]" dev="pipefs" ino=122661 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051733.063:7869): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.059:7733): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/net/sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051593.059:7141): avc: denied { read } for pid=34150 comm="node_exporter" name="arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051872.870:8532): avc: denied { search } for pid=25150 comm="safe_timer" name="var" dev="sda1" ino=1183149 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051567.759:6944): avc: denied { search } for pid=25150 comm="safe_timer" name="var" dev="sda1" ino=1183149 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051923.889:8713): avc: denied { write } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051793.607:8128): avc: denied { write } for pid=40781 comm="grafana-server" name="grafana" dev="overlay" ino=1968308 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051780.465:8009): avc: denied { getattr } for pid=42730 comm="prometheus" path="/etc/hosts" dev="tmpfs" ino=180144 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051673.567:7520): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=394712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051669.059:7489): avc: denied { read } for pid=89174 comm="pgrep" name="status" dev="proc" ino=127371 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051799.438:8174): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051922.880:8670): avc: denied { search } for pid=25150 comm="safe_timer" name="mon.smithi038" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051567.697:6943): avc: denied { write } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db/000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051517.748:6776): avc: denied { dac_read_search } for pid=25150 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051870.283:8492): avc: denied { write } for pid=56187 comm="msgr-worker-2" laddr=172.21.15.38 lport=58832 faddr=172.21.15.38 fport=6808 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051643.058:7366): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.797:7318): avc: denied { getattr } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051942.883:8859): avc: denied { getattr } for pid=25150 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.059:8685): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051730.466:7842): avc: denied { read } for pid=42730 comm="prometheus" path="socket:[326540]" dev="sockfs" ino=326540 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051654.511:7401): avc: denied { search } for pid=40781 comm="grafana-server" name="var" dev="sda1" ino=1968491 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051871.103:8514): avc: denied { search } for pid=41370 comm="safe_timer" name="/" dev="overlay" ino=1970626 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c358,c658 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.437:7293): avc: denied { lock } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051873.061:8549): avc: denied { read } for pid=34150 comm="node_exporter" name="entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051779.993:7997): avc: denied { search } for pid=25126 comm="conmon" name="journal" dev="tmpfs" ino=14663 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051852.530:8357): avc: denied { open } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.797:7316): avc: denied { search } for pid=25150 comm="safe_timer" name="/" dev="overlay" ino=790638 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.063:6741): avc: denied { search } for pid=34150 comm="node_exporter" name="user" dev="tmpfs" ino=13870 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.058:8864): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/7" dev="proc" ino=153420 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051789.087:8122): avc: denied { search } for pid=95286 comm="pgrep" name="25150" dev="proc" ino=127332 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051726.766:7789): avc: denied { write } for pid=74744 comm="msgr-worker-1" laddr=172.21.15.38 lport=54484 faddr=172.21.15.38 fport=6802 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051639.394:7341): avc: denied { search } for pid=25523 comm="safe_timer" name="libpod-c85e7388139cde13396994da6ee9d29bf47c41b4da629ccf04835de0ad787d55.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051566.522:6931): avc: denied { search } for pid=56187 comm="safe_timer" name="diff" dev="sda1" ino=1970683 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051592.767:7128): avc: denied { getattr } for pid=25150 comm="rstore_compact" path="/sys" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051655.482:7423): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051707.479:7630): avc: denied { write } for pid=25150 comm="safe_timer" path="pipe:[122661]" dev="pipefs" ino=122661 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051784.438:8113): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/osd-device-details.json" dev="overlay" ino=1574969 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051781.438:8036): avc: denied { search } for pid=40781 comm="grafana-server" name="etc" dev="sda1" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051803.058:8202): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="overlay" ino=1968497 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c65,c509 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.438:7800): avc: denied { getattr } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051643.060:7383): avc: denied { getattr } for pid=34150 comm="node_exporter" name="/" dev="tmpfs" ino=14377 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051733.060:7866): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051567.759:6945): avc: denied { open } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051584.778:7096): avc: denied { write } for pid=25126 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051514.739:6774): avc: denied { search } for pid=25523 comm="safe_timer" name="etc" dev="sda1" ino=1443992 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051723.059:7769): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.059:8686): avc: denied { read } for pid=34150 comm="node_exporter" name="fd" dev="proc" ino=161740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.059:8875): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051508.439:6698): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051730.465:7836): avc: denied { create } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051851.499:8341): avc: denied { open } for pid=50713 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.438:7803): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051517.748:6777): avc: denied { open } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051490.438:6556): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051567.051:6940): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=394712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051643.059:7382): avc: denied { read } for pid=34150 comm="node_exporter" name="mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051779.993:7995): avc: denied { use } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051926.321:8769): avc: denied { open } for pid=41370 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051926.995:8776): avc: denied { search } for pid=56187 comm="safe_timer" name="/" dev="overlay" ino=1970683 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c367,c973 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.059:7460): avc: denied { search } for pid=34150 comm="node_exporter" name="7" dev="proc" ino=153420 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051584.867:7101): avc: denied { read } for pid=25523 comm="mgr-fin" name="localtime" dev="sda1" ino=394694 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051707.741:7647): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051490.437:6551): avc: denied { getattr } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051733.058:7850): avc: denied { search } for pid=34150 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051799.438:8174): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051567.289:6942): avc: denied { search } for pid=50713 comm="safe_timer" name="/" dev="overlay" ino=1970664 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c77,c661 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051584.778:7094): avc: denied { use } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051530.556:6813): avc: denied { signal } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051922.963:8679): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=394712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051655.482:7423): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=394712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051872.870:8533): avc: denied { search } for pid=25150 comm="safe_timer" name="mon.smithi038" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051660.465:7452): avc: denied { connect } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.058:8866): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=161740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051779.706:7985): avc: denied { open } for pid=56187 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051793.607:8128): avc: denied { add_name } for pid=40781 comm="grafana-server" name="grafana.db-journal" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051922.741:8667): avc: denied { read } for pid=25150 comm="msgr-worker-2" path="pipe:[122661]" dev="pipefs" ino=122661 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051933.060:8812): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=30065 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051800.000:8180): avc: denied { sendto } for pid=25126 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051726.766:7792): avc: denied { append } for pid=41370 comm="log" path="/var/log/ceph/ceph-osd.0.log" dev="sda1" ino=396216 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.059:7466): avc: denied { open } for pid=34150 comm="node_exporter" path="/sys/class/hwmon" dev="sysfs" ino=20770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.839:7824): avc: denied { open } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051941.712:8836): avc: denied { search } for pid=44966 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051960.669:8918): avc: denied { accept } for pid=25523 comm="msgr-worker-0" lport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051490.464:6562): avc: denied { connect } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051495.034:6672): avc: denied { open } for pid=50713 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051800.465:8195): avc: denied { read } for pid=42730 comm="prometheus" path="socket:[342714]" dev="sockfs" ino=342714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051925.438:8757): avc: denied { getattr } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051490.019:6540): avc: denied { read } for pid=25150 comm="msgr-worker-1" path="socket:[166308]" dev="sockfs" ino=166308 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.059:6725): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051512.747:6709): avc: denied { getattr } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.063:6742): avc: denied { search } for pid=34150 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051870.466:8501): avc: denied { write } for pid=42730 comm="prometheus" path="socket:[352872]" dev="sockfs" ino=352872 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.437:6638): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051513.059:6730): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/hwmon/hwmon0" dev="sysfs" ino=36916 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051520.465:6786): avc: denied { connect } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051642.798:7363): avc: denied { search } for pid=25150 comm="safe_timer" name="var" dev="sda1" ino=1183149 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051493.059:6617): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=20785 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051852.542:8359): avc: denied { open } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051873.061:8551): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051669.059:7487): avc: denied { search } for pid=89174 comm="pgrep" name="25126" dev="proc" ino=124122 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051493.059:6621): avc: denied { read } for pid=34150 comm="node_exporter" name="ce_count" dev="sysfs" ino=48270 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.061:7751): avc: denied { search } for pid=34150 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616051709.438:7675): avc: denied { getattr } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051493.058:6614): avc: denied { read } for pid=34150 comm="node_exporter" name="file-nr" dev="proc" ino=161750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051492.742:6605): avc: denied { read } for pid=25150 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051789.087:8120): avc: denied { search } for pid=95286 comm="pgrep" name="25126" dev="proc" ino=124122 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051663.059:7464): avc: denied { search } for pid=34150 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051707.479:7629): avc: denied { write } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.060:6734): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/hwmon/hwmon0/uevent" dev="sysfs" ino=36917 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.437:6639): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051490.438:6556): avc: denied { read open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.438:7800): avc: denied { search } for pid=40781 comm="grafana-server" name="dashboards" dev="sda1" ino=1574963 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051573.059:7037): avc: denied { search } for pid=34150 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051638.766:7335): avc: denied { read } for pid=44966 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051782.830:8066): avc: denied { open } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.059:7461): avc: denied { read } for pid=34150 comm="node_exporter" name="fd" dev="proc" ino=161740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.058:8873): avc: denied { read } for pid=34150 comm="node_exporter" name="hwmon0" dev="sysfs" ino=36920 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051643.058:7365): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/7" dev="proc" ino=153420 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051591.366:7126): avc: denied { signal } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051571.438:7021): avc: denied { getattr } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051799.882:8177): avc: denied { getattr } for pid=25523 comm="mgr-fin" path="/usr/share/zoneinfo/UTC" dev="overlay" ino=1312345 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.071:8894): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.059:7463): avc: denied { read } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051710.693:7712): avc: denied { read } for pid=76281 comm="msgr-worker-2" path="pipe:[273604]" dev="pipefs" ino=273604 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.061:7747): avc: denied { getattr } for pid=34150 comm="node_exporter" name="/" dev="tmpfs" ino=14377 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.060:7052): avc: denied { search } for pid=34150 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616051730.465:7840): avc: denied { getattr } for pid=42730 comm="prometheus" laddr=172.21.15.38 lport=44082 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051642.798:7363): avc: denied { search } for pid=25150 comm="safe_timer" name="/" dev="overlay" ino=790638 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051491.366:6574): avc: denied { signal } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.394:7289): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=394712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051593.059:7139): avc: denied { read } for pid=34150 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.439:7805): avc: denied { read open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.059:8686): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=161740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051863.060:8472): avc: denied { read } for pid=34150 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.060:8698): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/devices/system/cpu/cpu0/topology/physical_package_id" dev="sysfs" ino=28137 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.058:8210): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.059:7032): avc: denied { read } for pid=34150 comm="node_exporter" name="cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051514.056:6762): avc: denied { search } for pid=41370 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970626 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c358,c658 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051744.237:7874): avc: denied { read } for pid=44966 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.060:8093): avc: denied { search } for pid=34150 comm="node_exporter" name="user" dev="tmpfs" ino=13870 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051871.103:8515): avc: denied { read } for pid=41370 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051800.464:8189): avc: denied { search } for pid=42730 comm="prometheus" name="etc" dev="sda1" ino=1970586 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051492.940:6607): avc: denied { append } for pid=44966 comm="log" path="/var/log/ceph/ceph-osd.1.log" dev="sda1" ino=396218 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051729.074:7833): avc: denied { search } for pid=92220 comm="pgrep" name="25150" dev="proc" ino=127332 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051593.059:7144): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051643.058:7368): avc: denied { search } for pid=34150 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051710.693:7711): avc: denied { write } for pid=76281 comm="safe_timer" path="pipe:[273604]" dev="pipefs" ino=273604 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051640.465:7360): avc: denied { append } for pid=42730 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051673.567:7518): avc: denied { open } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.061:6631): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051723.060:7777): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051571.439:7023): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051941.712:8836): avc: denied { open } for pid=44966 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051798.329:8151): avc: denied { write } for pid=56187 comm="tp_osd_tp" path="pipe:[219360]" dev="pipefs" ino=219360 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051927.881:8779): avc: denied { read } for pid=25150 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051709.438:7675): avc: denied { search } for pid=40781 comm="grafana-server" name="etc" dev="sda1" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051779.993:7997): avc: denied { sendto } for pid=25126 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051783.059:8078): avc: denied { search } for pid=34150 comm="node_exporter" name="kernel" dev="proc" ino=166165 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051707.741:7647): avc: denied { getattr } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051779.716:7989): avc: denied { read } for pid=25150 comm="msgr-worker-2" path="socket:[166319]" dev="sockfs" ino=166319 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051568.438:6969): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051933.060:8810): avc: denied { read } for pid=34150 comm="node_exporter" name="cpuinfo_max_freq" dev="sysfs" ino=30065 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.061:7750): avc: denied { search } for pid=34150 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051721.802:7763): avc: denied { search } for pid=25523 comm="safe_timer" name="/" dev="overlay" ino=1443983 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051799.882:8177): avc: denied { search } for pid=25523 comm="mgr-fin" name="etc" dev="sda1" ino=1443992 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051943.060:8877): avc: denied { search } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=156443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051490.438:6558): avc: denied { read } for pid=40781 comm="grafana-server" name="osd-device-details.json" dev="sda1" ino=1574969 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051663.061:7475): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.058:8383): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="overlay" ino=1968497 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c65,c509 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.437:7294): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051494.380:6670): avc: denied { write } for pid=50713 comm="msgr-worker-0" laddr=172.21.15.38 lport=6822 faddr=172.21.15.175 fport=34958 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051930.465:8782): avc: denied { search } for pid=42730 comm="prometheus" name="/" dev="overlay" ino=1970479 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.059:6720): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/stat" dev="proc" ino=4026532033 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051520.763:6791): avc: denied { search } for pid=25523 comm="safe_timer" name="libpod-c85e7388139cde13396994da6ee9d29bf47c41b4da629ccf04835de0ad787d55.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051570.524:7012): avc: denied { search } for pid=56187 comm="safe_timer" name="/" dev="overlay" ino=1970683 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c367,c973 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.059:8077): avc: denied { search } for pid=34150 comm="node_exporter" name="1" dev="proc" ino=157331 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051943.437:8895): avc: denied { search } for pid=40781 comm="grafana-server" name="etc" dev="sda1" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051730.465:7841): avc: denied { write } for pid=42730 comm="prometheus" path="socket:[331060]" dev="sockfs" ino=331060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051723.060:7776): avc: denied { search } for pid=34150 comm="node_exporter" name="kernel" dev="proc" ino=166165 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051566.428:6927): avc: denied { write } for pid=77272 comm="msgr-worker-2" laddr=172.21.15.38 lport=48452 faddr=172.21.15.38 fport=3300 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051933.063:8820): avc: denied { read } for pid=34150 comm="node_exporter" name="file-nr" dev="proc" ino=161750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051673.567:7518): avc: denied { read } for pid=25523 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051802.833:8199): avc: denied { search } for pid=25150 comm="safe_timer" name="var" dev="sda1" ino=1183149 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051595.565:7157): avc: denied { open } for pid=42730 comm="prometheus" path="/prometheus" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051782.830:8067): avc: denied { getattr } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051793.693:8129): avc: denied { remove_name } for pid=40781 comm="grafana-server" name="grafana.db-journal" dev="overlay" ino=1970591 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051503.060:6690): avc: denied { read } for pid=34150 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051866.010:8477): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051870.282:8488): avc: denied { search } for pid=56187 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1970683 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051793.693:8129): avc: denied { unlink } for pid=40781 comm="grafana-server" name="grafana.db-journal" dev="overlay" ino=1970591 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051584.867:7101): avc: denied { getattr } for pid=25523 comm="mgr-fin" name="UTC" dev="sda1" ino=1312345 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051637.035:7281): avc: denied { write } for pid=25126 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051930.466:8788): avc: denied { write } for pid=42730 comm="prometheus" path="socket:[364708]" dev="sockfs" ino=364708 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051494.380:6669): avc: denied { read } for pid=41370 comm="msgr-worker-1" path="socket:[224121]" dev="sockfs" ino=224121 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051730.466:7843): avc: denied { append } for pid=42730 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.060:7744): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.839:7825): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051781.439:8042): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/osds-overview.json" dev="overlay" ino=1574970 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.059:8876): avc: denied { search } for pid=34150 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051673.061:7516): avc: denied { read } for pid=34150 comm="node_exporter" name="file-nr" dev="proc" ino=161750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051491.754:6578): avc: denied { write } for pid=25126 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051707.480:7631): avc: denied { read } for pid=25150 comm="msgr-worker-2" path="pipe:[122661]" dev="pipefs" ino=122661 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051870.639:8507): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051800.000:8180): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051640.437:7347): avc: denied { lock } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051860.464:8460): avc: denied { create } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051707.741:7647): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=394712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.060:7048): avc: denied { getattr } for pid=34150 comm="node_exporter" name="/" dev="tmpfs" ino=14377 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051922.951:8675): avc: denied { search } for pid=25523 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.889:8713): avc: denied { use } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051744.510:7875): avc: denied { lock } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051592.767:7127): avc: denied { add_name } for pid=25150 comm="rstore_compact" name="000015.log" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051798.329:8152): avc: denied { read } for pid=56187 comm="msgr-worker-1" path="pipe:[219360]" dev="pipefs" ino=219360 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051800.000:8179): avc: denied { read } for pid=25126 comm="conmon" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051636.204:7264): avc: denied { append } for pid=50713 comm="log" path="/var/log/ceph/ceph-osd.2.log" dev="sda1" ino=396222 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051872.022:8524): avc: denied { write } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051663.060:7474): avc: denied { read } for pid=34150 comm="node_exporter" name="mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051636.268:7271): avc: denied { search } for pid=41370 comm="safe_timer" name="/" dev="overlay" ino=1970626 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c358,c658 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051726.479:7785): avc: denied { write } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.060:7470): avc: denied { read } for pid=34150 comm="node_exporter" name="stats" dev="sysfs" ino=50085 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.059:6729): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=48082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051568.438:6966): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc" dev="sda1" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051863.060:8474): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051639.406:7342): avc: denied { getattr } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051733.059:7858): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/devices/system/cpu/cpu0/topology/physical_package_id" dev="sysfs" ino=28137 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051673.567:7519): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051712.594:7724): avc: denied { search } for pid=41370 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970626 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c358,c658 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"']