| Posted | Started | Updated | Runtime |
Duration |
In Waiting |
Machine | Teuthology Branch | OS Type | OS Version | Nodes | Status |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 2021-06-29 12:41:35 | 2021-07-02 11:38:00 | 2021-07-02 13:59:31 | 2:21:31 | 2:10:56 | 0:10:35 | smithi | master | centos | 8.2 | 2 | fail |
Description: rados/upgrade/parallel/{0-start 1-tasks distro1$/{centos_8.2_kubic_stable} mon_election/classic upgrade-sequence workload/{ec-rados-default rados_api rados_loadgenbig rbd_import_export test_rbd_api test_rbd_python}}
SELinux denials found on ubuntu@smithi118.front.sepia.ceph.com: ['type=AVC msg=audit(1625231861.659:7993): avc: denied { open } for pid=83979 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231864.759:8054): avc: denied { read } for pid=73458 comm="safe_timer" name="os-release" dev="sda1" ino=1971782 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231875.585:8144): avc: denied { search } for pid=76234 comm="log" name="/" dev="overlay" ino=2623638 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c54,c1018 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231879.771:8179): avc: denied { read } for pid=91151 comm="node_exporter" name="sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231869.773:8099): avc: denied { read } for pid=91151 comm="node_exporter" name="file-nr" dev="proc" ino=331808 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231882.155:8204): avc: denied { read } for pid=73435 comm="conmon" path="pipe:[268107]" dev="pipefs" ino=268107 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231863.632:8015): avc: denied { use } for pid=92858 comm="alertmanager" path="pipe:[330313]" dev="pipefs" ino=330313 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231864.747:8053): avc: denied { search } for pid=73458 comm="safe_timer" name="container" dev="cgroup" ino=18115 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231869.770:8077): avc: denied { read } for pid=91151 comm="node_exporter" name="stat" dev="proc" ino=330842 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231869.771:8085): avc: denied { read } for pid=91151 comm="node_exporter" name="cpufreq" dev="sysfs" ino=32524 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231881.973:8201): avc: denied { getattr } for pid=73458 comm="mgr-fin" path="/usr/share/ceph/mgr" dev="overlay" ino=2360433 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c8,c399 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231865.665:8073): avc: denied { search } for pid=78091 comm="log" name="/" dev="overlay" ino=2623664 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c86,c358 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231861.537:7990): avc: denied { search } for pid=83979 comm="log" name="run" dev="sda1" ino=2752524 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c759,c825 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231873.632:8116): avc: denied { use } for pid=92858 comm="alertmanager" path="pipe:[330313]" dev="pipefs" ino=330313 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231875.361:8134): avc: denied { search } for pid=81444 comm="log" name="/" dev="overlay" ino=2623685 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c359,c935 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231869.772:8090): avc: denied { search } for pid=91151 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231869.772:8092): avc: denied { search } for pid=91151 comm="node_exporter" name="user" dev="tmpfs" ino=16453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231862.747:8014): avc: denied { read } for pid=73458 comm="safe_timer" name="os-release" dev="sda1" ino=1971782 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231875.666:8145): avc: denied { search } for pid=78091 comm="log" name="/" dev="overlay" ino=2623664 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c86,c358 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231861.704:8005): avc: denied { search } for pid=88997 comm="log" name="run" dev="sda1" ino=2752566 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c367,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231882.155:8205): avc: denied { search } for pid=73435 comm="conmon" name="journal" dev="tmpfs" ino=15159 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231879.772:8187): avc: denied { getattr } for pid=91151 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/hwmon/hwmon0/uevent" dev="sysfs" ino=37287 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231864.882:8060): avc: denied { name_connect } for pid=73458 comm="msgr-worker-2" dest=6824 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unreserved_port_t:s0 tclass=tcp_socket permissive=1', 'type=AVC msg=audit(1625231875.861:8149): avc: denied { setopt } for pid=92858 comm="alertmanager" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231864.759:8054): avc: denied { open } for pid=73458 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=1971782 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231879.771:8181): avc: denied { getattr } for pid=91151 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231863.632:8015): avc: denied { write } for pid=92858 comm="alertmanager" path="pipe:[330313]" dev="pipefs" ino=330313 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231869.772:8095): avc: denied { search } for pid=91151 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1625231875.861:8154): avc: denied { getopt } for pid=73458 comm="dashboard" laddr=172.21.15.118 lport=8443 faddr=172.21.15.118 fport=39432 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231873.632:8118): avc: denied { write } for pid=92833 comm="conmon" name="socket" dev="tmpfs" ino=15163 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231875.973:8162): avc: denied { getattr } for pid=78091 comm="safe_timer" path="/var/lib/ceph/mon/ceph-c/store.db/LOCK" dev="dm-4" ino=33595536 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231861.701:8003): avc: denied { getattr } for pid=73458 comm="dashboard" laddr=172.21.15.118 lport=8443 faddr=172.21.15.118 fport=39350 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231869.771:8088): avc: denied { open } for pid=91151 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=325251 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231861.701:8000): avc: denied { write } for pid=92858 comm="alertmanager" path="socket:[389245]" dev="sockfs" ino=389245 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231863.632:8016): avc: denied { read } for pid=92833 comm="conmon" path="pipe:[330313]" dev="pipefs" ino=330313 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231875.361:8134): avc: denied { search } for pid=81444 comm="log" name="diff" dev="sda1" ino=2623685 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231876.819:8166): avc: denied { getattr } for pid=73458 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=18122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231875.273:8133): avc: denied { read } for pid=78091 comm="msgr-worker-0" path="socket:[320988]" dev="sockfs" ino=320988 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231861.703:8004): avc: denied { getattr } for pid=73458 comm="dashboard" name="ssl.py" dev="sda1" ino=2235165 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231875.273:8130): avc: denied { write } for pid=88997 comm="safe_timer" path="pipe:[318955]" dev="pipefs" ino=318955 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231875.863:8158): avc: denied { getattr } for pid=73458 comm="dashboard" path="/usr/lib64/python3.6/ssl.py" dev="overlay" ino=2235165 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c8,c399 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231864.040:8042): avc: denied { write } for pid=76234 comm="safe_timer" path="pipe:[283939]" dev="pipefs" ino=283939 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231875.973:8159): avc: denied { getattr } for pid=78091 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231879.771:8176): avc: denied { read } for pid=91151 comm="node_exporter" name="file-nr" dev="proc" ino=331808 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231861.490:7977): avc: denied { write } for pid=86479 comm="safe_timer" path="pipe:[311996]" dev="pipefs" ino=311996 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231875.361:8134): avc: denied { write } for pid=81444 comm="log" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231879.775:8195): avc: denied { search } for pid=91151 comm="node_exporter" name="user" dev="tmpfs" ino=16453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231861.701:7995): avc: denied { setopt } for pid=92858 comm="alertmanager" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231879.774:8193): avc: denied { getattr } for pid=91151 comm="node_exporter" name="/" dev="tmpfs" ino=1048 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231871.194:8112): avc: denied { read } for pid=92858 comm="alertmanager" path="socket:[394384]" dev="sockfs" ino=394384 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231875.509:8140): avc: denied { search } for pid=86479 comm="log" name="run" dev="sda1" ino=2752545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c412,c801 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231864.941:8065): avc: denied { getattr } for pid=73458 comm="dashboard" laddr=172.21.15.118 lport=8443 faddr=172.21.15.118 fport=39364 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231869.771:8080): avc: denied { read } for pid=91151 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231882.155:8205): avc: denied { search } for pid=73435 comm="conmon" name="systemd" dev="tmpfs" ino=1056 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231879.771:8175): avc: denied { search } for pid=91151 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231879.771:8178): avc: denied { read } for pid=91151 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231862.735:8012): avc: denied { search } for pid=73458 comm="safe_timer" name="container" dev="cgroup" ino=18115 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231861.659:7992): avc: denied { read } for pid=83979 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231876.831:8167): avc: denied { open } for pid=73458 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=1971782 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231869.770:8076): avc: denied { getattr } for pid=91151 comm="node_exporter" path="/proc/7" dev="proc" ino=324213 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231866.771:8074): avc: denied { read } for pid=73458 comm="safe_timer" name="os-release" dev="overlay" ino=1968307 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c8,c399 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231869.771:8084): avc: denied { search } for pid=91151 comm="node_exporter" name="kernel" dev="proc" ino=328803 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231864.882:8061): avc: denied { shutdown } for pid=73458 comm="msgr-worker-2" laddr=172.21.15.118 lport=50660 faddr=172.21.15.124 fport=6824 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231861.710:8007): avc: denied { search } for pid=78091 comm="log" name="run" dev="sda1" ino=2623670 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c86,c358 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231869.770:8075): avc: denied { search } for pid=91151 comm="node_exporter" name="/" dev="overlay" ino=2752581 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c620,c707 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231879.771:8174): avc: denied { read } for pid=91151 comm="node_exporter" name="fd" dev="proc" ino=330843 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231879.775:8198): avc: denied { search } for pid=91151 comm="node_exporter" name="host" dev="sda1" ino=2752590 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c620,c707 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231861.490:7978): avc: denied { search } for pid=86479 comm="log" name="run" dev="sda1" ino=2752545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c412,c801 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231875.973:8160): avc: denied { read } for pid=78091 comm="safe_timer" name="store.db" dev="dm-4" ino=33595532 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231863.632:8017): avc: denied { sendto } for pid=92833 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231882.155:8205): avc: denied { search } for pid=73435 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231862.020:8011): avc: denied { write } for pid=76234 comm="safe_timer" path="/var/lib/ceph/mon/ceph-a/store.db/000181.log" dev="dm-4" ino=33595534 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231871.193:8109): avc: denied { getopt } for pid=92858 comm="alertmanager" laddr=172.21.15.118 lport=39414 faddr=172.21.15.118 fport=8443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231864.759:8054): avc: denied { read } for pid=73458 comm="safe_timer" name="os-release" dev="overlay" ino=1971782 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c8,c399 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231864.759:8055): avc: denied { getattr } for pid=73458 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=1971782 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c8,c399 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231861.490:7979): avc: denied { read } for pid=86479 comm="msgr-worker-0" path="pipe:[311996]" dev="pipefs" ino=311996 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231869.771:8084): avc: denied { read } for pid=91151 comm="node_exporter" name="entropy_avail" dev="proc" ino=326158 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231875.693:8147): avc: denied { search } for pid=88997 comm="log" name="run" dev="sda1" ino=2752566 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c367,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231861.701:7994): avc: denied { create } for pid=92858 comm="alertmanager" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231869.770:8077): avc: denied { open } for pid=91151 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=330842 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231863.784:8040): avc: denied { getattr } for pid=76234 comm="safe_timer" path="/var/lib/ceph/mon/ceph-a/store.db" dev="dm-4" ino=33595524 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231863.784:8038): avc: denied { getattr } for pid=76234 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231864.710:8051): avc: denied { write } for pid=83979 comm="msgr-worker-0" laddr=172.21.15.118 lport=59640 faddr=172.21.15.118 fport=3301 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231879.775:8196): avc: denied { search } for pid=91151 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231872.205:8114): avc: denied { search } for pid=86479 comm="log" name="run" dev="sda1" ino=2752545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c412,c801 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231863.784:8039): avc: denied { search } for pid=76234 comm="safe_timer" name="mon.a" dev="dm-4" ino=16777348 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231873.632:8116): avc: denied { write } for pid=92858 comm="alertmanager" path="pipe:[330313]" dev="pipefs" ino=330313 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231875.693:8146): avc: denied { search } for pid=81444 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231863.632:8017): avc: denied { search } for pid=92833 comm="conmon" name="journal" dev="tmpfs" ino=15159 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231861.490:7978): avc: denied { search } for pid=86479 comm="log" name="diff" dev="sda1" ino=2752539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231864.759:8055): avc: denied { getattr } for pid=73458 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=1971782 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231875.666:8145): avc: denied { search } for pid=78091 comm="log" name="run" dev="sda1" ino=2623670 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c86,c358 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231869.772:8094): avc: denied { search } for pid=91151 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231875.861:8148): avc: denied { create } for pid=92858 comm="alertmanager" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231875.585:8143): avc: denied { search } for pid=73458 comm="log" name="/" dev="overlay" ino=1968095 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c8,c399 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231875.273:8131): avc: denied { read } for pid=88997 comm="msgr-worker-2" path="pipe:[318955]" dev="pipefs" ino=318955 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231861.703:8004): avc: denied { search } for pid=73458 comm="dashboard" name="usr" dev="sda1" ino=1968460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231862.747:8014): avc: denied { read } for pid=73458 comm="safe_timer" name="os-release" dev="overlay" ino=1971782 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c8,c399 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231869.771:8079): avc: denied { open } for pid=91151 comm="node_exporter" path="/proc/7/net/dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231875.273:8132): avc: denied { write } for pid=88997 comm="msgr-worker-2" laddr=172.21.15.118 lport=59912 faddr=172.21.15.118 fport=3301 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231875.863:8158): avc: denied { getattr } for pid=73458 comm="dashboard" name="ssl.py" dev="sda1" ino=2235165 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231861.490:7982): avc: denied { read } for pid=73458 comm="msgr-worker-0" path="socket:[369175]" dev="sockfs" ino=369175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231875.861:8151): avc: denied { getopt } for pid=92858 comm="alertmanager" laddr=172.21.15.118 lport=39432 faddr=172.21.15.118 fport=8443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231879.771:8174): avc: denied { open } for pid=91151 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=330843 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231879.775:8195): avc: denied { search } for pid=91151 comm="node_exporter" name="/" dev="tmpfs" ino=1047 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231879.770:8172): avc: denied { getattr } for pid=91151 comm="node_exporter" path="/proc/7" dev="proc" ino=324213 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231873.632:8118): avc: denied { sendto } for pid=92833 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231879.773:8192): avc: denied { search } for pid=91151 comm="node_exporter" name="1" dev="proc" ino=324193 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231875.361:8134): avc: denied { search } for pid=81444 comm="log" name="journal" dev="tmpfs" ino=15159 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231875.861:8150): avc: denied { name_connect } for pid=92858 comm="alertmanager" dest=8443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:http_port_t:s0 tclass=tcp_socket permissive=1', 'type=AVC msg=audit(1625231876.624:8164): avc: denied { open } for pid=83979 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231882.155:8205): avc: denied { search } for pid=73435 comm="conmon" name="/" dev="tmpfs" ino=1047 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231863.784:8039): avc: denied { read } for pid=76234 comm="safe_timer" name="store.db" dev="dm-4" ino=33595524 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231875.693:8146): avc: denied { read } for pid=81444 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231870.748:8105): avc: denied { search } for pid=76234 comm="log" name="/" dev="overlay" ino=2623638 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c54,c1018 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231869.770:8077): avc: denied { search } for pid=91151 comm="node_exporter" name="7" dev="proc" ino=324213 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231876.831:8167): avc: denied { read } for pid=73458 comm="safe_timer" name="os-release" dev="overlay" ino=1971782 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c8,c399 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231863.632:8017): avc: denied { write } for pid=92833 comm="conmon" name="socket" dev="tmpfs" ino=15163 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231869.771:8078): avc: denied { open } for pid=91151 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=330843 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231869.771:8087): avc: denied { getattr } for pid=91151 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=32612 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231875.863:8158): avc: denied { read } for pid=73458 comm="dashboard" name="lib64" dev="overlay" ino=789976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c8,c399 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231861.701:7998): avc: denied { getattr } for pid=92858 comm="alertmanager" laddr=172.21.15.118 lport=39350 faddr=172.21.15.118 fport=8443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231871.193:8106): avc: denied { create } for pid=92858 comm="alertmanager" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231861.710:8007): avc: denied { search } for pid=78091 comm="log" name="/" dev="overlay" ino=2623664 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c86,c358 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231861.490:7978): avc: denied { search } for pid=86479 comm="log" name="journal" dev="tmpfs" ino=15159 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231861.704:8005): avc: denied { search } for pid=88997 comm="log" name="/" dev="overlay" ino=2752560 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c367,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231879.773:8192): avc: denied { open } for pid=91151 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=325251 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231869.771:8084): avc: denied { open } for pid=91151 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=326158 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231882.155:8205): avc: denied { write } for pid=73435 comm="conmon" name="socket" dev="tmpfs" ino=15163 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231869.773:8099): avc: denied { open } for pid=91151 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=331808 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231863.632:8017): avc: denied { write } for pid=92833 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231869.772:8093): avc: denied { getattr } for pid=91151 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231869.771:8080): avc: denied { open } for pid=91151 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231876.819:8165): avc: denied { open } for pid=73458 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=18122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231876.819:8165): avc: denied { search } for pid=73458 comm="safe_timer" name="container" dev="cgroup" ino=18115 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231869.773:8098): avc: denied { search } for pid=91151 comm="node_exporter" name="host" dev="sda1" ino=2752590 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c620,c707 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231873.632:8118): avc: denied { search } for pid=92833 comm="conmon" name="systemd" dev="tmpfs" ino=1056 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231861.704:8006): avc: denied { search } for pid=81444 comm="log" name="run" dev="sda1" ino=2623691 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c359,c935 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231864.941:8064): avc: denied { getopt } for pid=73458 comm="dashboard" laddr=172.21.15.118 lport=8443 faddr=172.21.15.118 fport=39364 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231874.819:8126): avc: denied { search } for pid=73458 comm="safe_timer" name="usr" dev="sda1" ino=1968460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231861.703:8004): avc: denied { getattr } for pid=73458 comm="dashboard" path="/usr/lib64/python3.6/ssl.py" dev="overlay" ino=2235165 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c8,c399 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231861.701:7999): avc: denied { accept } for pid=73458 comm="dashboard" laddr=172.21.15.118 lport=8443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231875.973:8161): avc: denied { getattr } for pid=78091 comm="safe_timer" path="/var/lib/ceph/mon/ceph-c/store.db" dev="dm-4" ino=33595532 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231879.773:8192): avc: denied { read } for pid=91151 comm="node_exporter" name="mounts" dev="proc" ino=325251 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231875.361:8134): avc: denied { sendto } for pid=81444 comm="log" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231862.747:8014): avc: denied { open } for pid=73458 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=1971782 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231861.701:8002): avc: denied { read } for pid=92858 comm="alertmanager" path="socket:[389245]" dev="sockfs" ino=389245 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231869.771:8084): avc: denied { search } for pid=91151 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231871.193:8107): avc: denied { setopt } for pid=92858 comm="alertmanager" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231874.920:8128): avc: denied { search } for pid=81444 comm="log" name="run" dev="sda1" ino=2623691 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c359,c935 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231869.771:8083): avc: denied { open } for pid=91151 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231871.194:8111): avc: denied { write } for pid=92858 comm="alertmanager" path="socket:[394384]" dev="sockfs" ino=394384 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231879.774:8193): avc: denied { search } for pid=91151 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231873.632:8118): avc: denied { write } for pid=92833 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231871.985:8113): avc: denied { search } for pid=83979 comm="log" name="run" dev="sda1" ino=2752524 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c759,c825 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231874.807:8125): avc: denied { getattr } for pid=73458 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=18122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231869.799:8102): avc: denied { search } for pid=73458 comm="log" name="/" dev="overlay" ino=1968095 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c8,c399 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231861.490:7981): avc: denied { append } for pid=86479 comm="log" path="/var/log/ceph/ceph-osd.2.log" dev="sda1" ino=396648 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231873.106:8115): avc: denied { shutdown } for pid=73458 comm="msgr-worker-2" laddr=172.21.15.118 lport=50716 faddr=172.21.15.124 fport=6824 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231875.509:8140): avc: denied { search } for pid=86479 comm="log" name="/" dev="overlay" ino=2752539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c412,c801 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231881.973:8201): avc: denied { getattr } for pid=73458 comm="mgr-fin" path="/usr/share/ceph/mgr" dev="sda1" ino=2360433 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231879.772:8188): avc: denied { search } for pid=91151 comm="node_exporter" name="kernel" dev="proc" ino=328803 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231869.771:8081): avc: denied { search } for pid=91151 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231861.701:7996): avc: denied { connect } for pid=92858 comm="alertmanager" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231869.773:8099): avc: denied { search } for pid=91151 comm="node_exporter" name="fs" dev="proc" ino=331807 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231882.155:8203): avc: denied { use } for pid=73458 comm="log" path="pipe:[268107]" dev="pipefs" ino=268107 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231879.775:8194): avc: denied { search } for pid=91151 comm="node_exporter" name="/" dev="devtmpfs" ino=3 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231871.193:8108): avc: denied { connect } for pid=92858 comm="alertmanager" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231876.831:8167): avc: denied { open } for pid=73458 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=1971782 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c8,c399 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231875.973:8160): avc: denied { search } for pid=78091 comm="safe_timer" name="mon.c" dev="dm-4" ino=16777359 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231873.676:8123): avc: denied { search } for pid=83979 comm="log" name="journal" dev="tmpfs" ino=15159 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231861.659:7992): avc: denied { open } for pid=83979 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231869.779:8101): avc: denied { write } for pid=86479 comm="log" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231875.693:8146): avc: denied { open } for pid=81444 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231869.772:8091): avc: denied { search } for pid=91151 comm="node_exporter" name="/" dev="devtmpfs" ino=3 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231882.154:8202): avc: denied { ioctl } for pid=73458 comm="mgr-fin" path="/usr/share/ceph/mgr/cephadm/serve.py" dev="overlay" ino=2360452 ioctlcmd=0x5401 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c8,c399 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231861.537:7990): avc: denied { search } for pid=83979 comm="log" name="/" dev="overlay" ino=2752518 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c759,c825 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231875.861:8157): avc: denied { read } for pid=92858 comm="alertmanager" path="socket:[390120]" dev="sockfs" ino=390120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231861.583:7991): avc: denied { search } for pid=76234 comm="log" name="/" dev="overlay" ino=2623638 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c54,c1018 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231864.801:8059): avc: denied { name_connect } for pid=92858 comm="alertmanager" dest=8443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:http_port_t:s0 tclass=tcp_socket permissive=1', 'type=AVC msg=audit(1625231875.361:8135): avc: denied { append } for pid=81444 comm="log" path="/var/log/ceph/ceph-osd.0.log" dev="sda1" ino=396644 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231861.704:8006): avc: denied { search } for pid=81444 comm="log" name="/" dev="overlay" ino=2623685 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c359,c935 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231875.693:8147): avc: denied { search } for pid=88997 comm="log" name="/" dev="overlay" ino=2752560 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c367,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231869.772:8090): avc: denied { getattr } for pid=91151 comm="node_exporter" name="/" dev="tmpfs" ino=1048 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231861.490:7978): avc: denied { write } for pid=86479 comm="log" name="socket" dev="tmpfs" ino=15163 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231875.863:8158): avc: denied { read } for pid=73458 comm="dashboard" name="lib64" dev="sda1" ino=789976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231879.775:8197): avc: denied { search } for pid=91151 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1625231869.772:8094): avc: denied { search } for pid=91151 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231863.632:8017): avc: denied { search } for pid=92833 comm="conmon" name="/" dev="tmpfs" ino=1047 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231879.773:8191): avc: denied { getattr } for pid=91151 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231863.632:8017): avc: denied { search } for pid=92833 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231861.490:7978): avc: denied { write } for pid=86479 comm="log" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231874.919:8127): avc: denied { search } for pid=88997 comm="log" name="run" dev="sda1" ino=2752566 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c367,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231869.771:8088): avc: denied { search } for pid=91151 comm="node_exporter" name="1" dev="proc" ino=324193 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231864.894:8062): avc: denied { read } for pid=88997 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231873.632:8117): avc: denied { read } for pid=92833 comm="conmon" path="pipe:[330313]" dev="pipefs" ino=330313 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231879.770:8173): avc: denied { search } for pid=91151 comm="node_exporter" name="7" dev="proc" ino=324213 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231861.659:7993): avc: denied { search } for pid=83979 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231861.703:8004): avc: denied { read } for pid=73458 comm="dashboard" name="lib64" dev="sda1" ino=789976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231869.771:8079): avc: denied { read } for pid=91151 comm="node_exporter" name="dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231861.701:7997): avc: denied { getopt } for pid=92858 comm="alertmanager" laddr=172.21.15.118 lport=39350 faddr=172.21.15.118 fport=8443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231869.770:8075): avc: denied { getattr } for pid=91151 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231869.771:8086): avc: denied { read } for pid=91151 comm="node_exporter" name="cpuinfo_max_freq" dev="sysfs" ino=32612 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231879.770:8171): avc: denied { getattr } for pid=91151 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231869.771:8086): avc: denied { open } for pid=91151 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=32612 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231879.770:8171): avc: denied { search } for pid=91151 comm="node_exporter" name="/" dev="overlay" ino=2752581 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c620,c707 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231861.701:7996): avc: denied { name_connect } for pid=92858 comm="alertmanager" dest=8443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:http_port_t:s0 tclass=tcp_socket permissive=1', 'type=AVC msg=audit(1625231875.861:8152): avc: denied { getattr } for pid=92858 comm="alertmanager" laddr=172.21.15.118 lport=39432 faddr=172.21.15.118 fport=8443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231864.894:8062): avc: denied { open } for pid=88997 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231875.973:8160): avc: denied { open } for pid=78091 comm="safe_timer" path="/var/lib/ceph/mon/ceph-c/store.db" dev="dm-4" ino=33595532 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231879.775:8196): avc: denied { search } for pid=91151 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231875.531:8141): avc: denied { search } for pid=83979 comm="log" name="/" dev="overlay" ino=2752518 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c759,c825 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231879.771:8176): avc: denied { search } for pid=91151 comm="node_exporter" name="fs" dev="proc" ino=331807 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231869.771:8078): avc: denied { read } for pid=91151 comm="node_exporter" name="fd" dev="proc" ino=330843 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231870.285:8103): avc: denied { write } for pid=88997 comm="log" name="socket" dev="tmpfs" ino=15163 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231871.985:8113): avc: denied { search } for pid=83979 comm="log" name="/" dev="overlay" ino=2752518 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c759,c825 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231879.771:8183): avc: denied { open } for pid=91151 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231861.703:8004): avc: denied { read } for pid=73458 comm="dashboard" name="lib64" dev="overlay" ino=789976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c8,c399 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231861.490:7980): avc: denied { write } for pid=86479 comm="msgr-worker-0" laddr=172.21.15.118 lport=39596 faddr=172.21.15.118 fport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231863.784:8041): avc: denied { getattr } for pid=76234 comm="safe_timer" path="/var/lib/ceph/mon/ceph-a/store.db/LOCK" dev="dm-4" ino=33595525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231879.773:8190): avc: denied { read } for pid=91151 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231875.585:8144): avc: denied { search } for pid=76234 comm="log" name="run" dev="sda1" ino=2623644 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c54,c1018 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231875.585:8143): avc: denied { search } for pid=73458 comm="log" name="run" dev="sda1" ino=2623619 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c8,c399 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231879.772:8189): avc: denied { getattr } for pid=91151 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=326158 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231861.583:7991): avc: denied { search } for pid=76234 comm="log" name="run" dev="sda1" ino=2623644 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c54,c1018 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231869.771:8083): avc: denied { read } for pid=91151 comm="node_exporter" name="cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231863.784:8038): avc: denied { dac_read_search } for pid=76234 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231882.155:8205): avc: denied { sendto } for pid=73435 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231876.036:8163): avc: denied { write } for pid=76234 comm="safe_timer" path="/var/lib/ceph/mon/ceph-a/store.db/000181.log" dev="dm-4" ino=33595534 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231879.771:8184): avc: denied { getattr } for pid=91151 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=46240 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231861.490:7983): avc: denied { search } for pid=73458 comm="log" name="run" dev="sda1" ino=2623619 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c8,c399 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231863.783:8037): avc: denied { search } for pid=76234 comm="log" name="diff" dev="sda1" ino=2623638 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231879.771:8176): avc: denied { open } for pid=91151 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=331808 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231864.651:8050): avc: denied { sendto } for pid=83979 comm="log" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231879.771:8180): avc: denied { search } for pid=91151 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231869.771:8079): avc: denied { read } for pid=91151 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231875.861:8156): avc: denied { getattr } for pid=73458 comm="dashboard" laddr=172.21.15.118 lport=8443 faddr=172.21.15.118 fport=39432 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231869.771:8082): avc: denied { getattr } for pid=91151 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231879.770:8173): avc: denied { read } for pid=91151 comm="node_exporter" name="stat" dev="proc" ino=330842 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231862.735:8012): avc: denied { open } for pid=73458 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=18122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231879.883:8200): avc: denied { shutdown } for pid=73458 comm="msgr-worker-2" laddr=172.21.15.118 lport=50738 faddr=172.21.15.124 fport=6824 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231879.883:8199): avc: denied { name_connect } for pid=73458 comm="msgr-worker-2" dest=6824 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unreserved_port_t:s0 tclass=tcp_socket permissive=1', 'type=AVC msg=audit(1625231870.338:8104): avc: denied { search } for pid=76234 comm="log" name="run" dev="sda1" ino=2623644 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c54,c1018 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231861.659:7993): avc: denied { read } for pid=83979 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231875.861:8150): avc: denied { connect } for pid=92858 comm="alertmanager" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231865.665:8073): avc: denied { search } for pid=78091 comm="log" name="run" dev="sda1" ino=2623670 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c86,c358 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231879.772:8188): avc: denied { open } for pid=91151 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=326158 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231872.205:8114): avc: denied { search } for pid=86479 comm="log" name="/" dev="overlay" ino=2752539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c412,c801 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231875.861:8155): avc: denied { write } for pid=92858 comm="alertmanager" path="socket:[390120]" dev="sockfs" ino=390120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231861.701:8001): avc: denied { getopt } for pid=73458 comm="dashboard" laddr=172.21.15.118 lport=8443 faddr=172.21.15.118 fport=39350 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231876.831:8167): avc: denied { read } for pid=73458 comm="safe_timer" name="os-release" dev="sda1" ino=1971782 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231861.490:7978): avc: denied { sendto } for pid=86479 comm="log" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231863.632:8017): avc: denied { search } for pid=92833 comm="conmon" name="systemd" dev="tmpfs" ino=1056 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231864.710:8052): avc: denied { read } for pid=78091 comm="msgr-worker-0" path="socket:[311548]" dev="sockfs" ino=311548 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231875.973:8159): avc: denied { dac_read_search } for pid=78091 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231875.861:8153): avc: denied { accept } for pid=73458 comm="dashboard" laddr=172.21.15.118 lport=8443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231879.771:8175): avc: denied { search } for pid=91151 comm="node_exporter" name="net" dev="proc" ino=324219 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231879.771:8185): avc: denied { read } for pid=91151 comm="node_exporter" name="cpufreq" dev="sysfs" ino=32524 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231873.632:8118): avc: denied { search } for pid=92833 comm="conmon" name="/" dev="tmpfs" ino=1047 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231869.772:8096): avc: denied { search } for pid=91151 comm="node_exporter" name="net" dev="proc" ino=324219 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231875.531:8141): avc: denied { search } for pid=83979 comm="log" name="run" dev="sda1" ino=2752524 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c759,c825 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231864.941:8063): avc: denied { accept } for pid=73458 comm="dashboard" laddr=172.21.15.118 lport=8443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231873.632:8118): avc: denied { search } for pid=92833 comm="conmon" name="journal" dev="tmpfs" ino=15159 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231875.361:8134): avc: denied { search } for pid=81444 comm="log" name="run" dev="sda1" ino=2623691 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c359,c935 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231879.771:8177): avc: denied { getattr } for pid=91151 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231869.771:8089): avc: denied { getattr } for pid=91151 comm="node_exporter" path="/sys/class/net/enp3s0f1" dev="sysfs" ino=40703 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231882.155:8205): avc: denied { write } for pid=73435 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231879.773:8190): avc: denied { open } for pid=91151 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231879.770:8173): avc: denied { open } for pid=91151 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=330842 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231875.863:8158): avc: denied { search } for pid=73458 comm="dashboard" name="usr" dev="sda1" ino=1968460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231882.155:8203): avc: denied { write } for pid=73458 comm="log" path="pipe:[268107]" dev="pipefs" ino=268107 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231874.807:8124): avc: denied { read } for pid=73458 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=18122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231874.807:8124): avc: denied { open } for pid=73458 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=18122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231879.771:8182): avc: denied { read } for pid=91151 comm="node_exporter" name="hwmon" dev="sysfs" ino=21564 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231862.735:8013): avc: denied { getattr } for pid=73458 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=18122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231876.624:8164): avc: denied { read } for pid=83979 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231862.747:8014): avc: denied { open } for pid=73458 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=1971782 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c8,c399 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231861.659:7992): avc: denied { search } for pid=83979 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231871.193:8110): avc: denied { getattr } for pid=92858 comm="alertmanager" laddr=172.21.15.118 lport=39414 faddr=172.21.15.118 fport=8443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231861.490:7983): avc: denied { search } for pid=73458 comm="log" name="/" dev="overlay" ino=1968095 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c8,c399 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231869.772:8097): avc: denied { getattr } for pid=91151 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231869.774:8100): avc: denied { getattr } for pid=91151 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=326158 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231879.771:8179): avc: denied { open } for pid=91151 comm="node_exporter" path="/proc/7/net/sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231876.624:8164): avc: denied { search } for pid=83979 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231869.771:8088): avc: denied { read } for pid=91151 comm="node_exporter" name="mounts" dev="proc" ino=325251 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1625231863.784:8039): avc: denied { open } for pid=76234 comm="safe_timer" path="/var/lib/ceph/mon/ceph-a/store.db" dev="dm-4" ino=33595524 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231862.735:8012): avc: denied { read } for pid=73458 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=18122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231879.772:8186): avc: denied { open } for pid=91151 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=32612 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231861.490:7978): avc: denied { search } for pid=86479 comm="log" name="/" dev="overlay" ino=2752539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c412,c801 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231864.759:8054): avc: denied { open } for pid=73458 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=1971782 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c8,c399 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231879.772:8186): avc: denied { read } for pid=91151 comm="node_exporter" name="cpuinfo_max_freq" dev="sysfs" ino=32612 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231869.772:8092): avc: denied { search } for pid=91151 comm="node_exporter" name="/" dev="tmpfs" ino=1047 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231876.819:8165): avc: denied { read } for pid=73458 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=18122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231864.040:8043): avc: denied { read } for pid=76234 comm="msgr-worker-0" path="pipe:[283939]" dev="pipefs" ino=283939 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231879.772:8188): avc: denied { read } for pid=91151 comm="node_exporter" name="entropy_avail" dev="proc" ino=326158 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1625231875.361:8134): avc: denied { write } for pid=81444 comm="log" name="socket" dev="tmpfs" ino=15163 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:spc_t:s0"']
Pulpito