| Posted | Started | Updated | Runtime |
Duration |
In Waiting |
Machine | Teuthology Branch | OS Type | OS Version | Nodes | Status |
|---|---|---|---|---|---|---|---|---|---|---|---|
| 2021-06-12 13:05:52 | 2021-06-12 13:20:37 | 2021-06-12 15:56:44 | 2:36:07 | 2:24:17 | 0:11:50 | smithi | master | centos | 8.2 | 2 | fail |
Description: rados/upgrade/parallel/{0-start 1-tasks distro1$/{centos_8.2_kubic_stable} mon_election/connectivity upgrade-sequence workload/{ec-rados-default rados_api rados_loadgenbig rbd_import_export test_rbd_api test_rbd_python}}
SELinux denials found on ubuntu@smithi012.front.sepia.ceph.com: ['type=AVC msg=audit(1623510530.777:7860): avc: denied { open } for pid=91078 comm="node_exporter" path="/sys/class/net" dev="sysfs" ino=20887 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510530.779:7876): avc: denied { getattr } for pid=91078 comm="node_exporter" name="/" dev="tmpfs" ino=3285 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510527.184:7835): avc: denied { write } for pid=73456 comm="log" name="socket" dev="tmpfs" ino=3583 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510543.661:7987): avc: denied { use } for pid=92790 comm="alertmanager" path="pipe:[329846]" dev="pipefs" ino=329846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510524.626:7790): avc: denied { name_connect } for pid=92790 comm="alertmanager" dest=8443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:http_port_t:s0 tclass=tcp_socket permissive=1', 'type=AVC msg=audit(1623510530.776:7856): avc: denied { search } for pid=91078 comm="node_exporter" name="/" dev="overlay" ino=2752564 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c145,c193 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510540.778:7966): avc: denied { search } for pid=91078 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510524.626:7793): avc: denied { getattr } for pid=92790 comm="alertmanager" laddr=172.21.15.12 lport=53796 faddr=172.21.15.12 fport=8443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510530.776:7856): avc: denied { getattr } for pid=91078 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510538.604:7923): avc: denied { read } for pid=78076 comm="msgr-worker-0" path="socket:[290150]" dev="sockfs" ino=290150 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510526.259:7810): avc: denied { getattr } for pid=76165 comm="safe_timer" path="/var/lib/ceph/mon/ceph-a/store.db/LOCK" dev="dm-4" ino=33595525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510533.660:7895): avc: denied { write } for pid=92790 comm="alertmanager" path="pipe:[329846]" dev="pipefs" ino=329846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510533.660:7896): avc: denied { read } for pid=92766 comm="conmon" path="pipe:[329846]" dev="pipefs" ino=329846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510524.272:7771): avc: denied { search } for pid=76165 comm="log" name="/" dev="overlay" ino=2623612 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c303,c729 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510530.779:7875): avc: denied { getattr } for pid=91078 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510538.892:7936): avc: denied { name_connect } for pid=92790 comm="alertmanager" dest=8443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:http_port_t:s0 tclass=tcp_socket permissive=1', 'type=AVC msg=audit(1623510524.822:7801): avc: denied { open } for pid=83882 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510530.777:7857): avc: denied { getattr } for pid=91078 comm="node_exporter" path="/proc/7" dev="proc" ino=320088 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510540.777:7957): avc: denied { read } for pid=91078 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510533.660:7897): avc: denied { search } for pid=92766 comm="conmon" name="systemd" dev="tmpfs" ino=3293 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510528.171:7855): avc: denied { read } for pid=73456 comm="safe_timer" name="os-release" dev="sda1" ino=1968276 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510524.822:7803): avc: denied { open } for pid=83882 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510527.184:7836): avc: denied { search } for pid=76165 comm="log" name="/" dev="overlay" ino=2623612 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c303,c729 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510540.199:7944): avc: denied { read } for pid=81361 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510538.604:7918): avc: denied { write } for pid=78076 comm="safe_timer" path="pipe:[287114]" dev="pipefs" ino=287114 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510527.785:7848): avc: denied { search } for pid=88925 comm="log" name="run" dev="sda1" ino=2752549 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c378,c408 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510530.777:7858): avc: denied { read } for pid=91078 comm="node_exporter" name="stat" dev="proc" ino=320429 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510538.604:7919): avc: denied { sendto } for pid=78076 comm="log" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510538.891:7932): avc: denied { search } for pid=76165 comm="log" name="run" dev="sda1" ino=2623618 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c303,c729 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510530.777:7862): avc: denied { read } for pid=91078 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510530.777:7861): avc: denied { search } for pid=91078 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510539.524:7940): avc: denied { read } for pid=73456 comm="mgr-fin" name="localtime" dev="overlay" ino=789596 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c157,c1021 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510540.779:7970): avc: denied { search } for pid=91078 comm="node_exporter" name="/" dev="tmpfs" ino=3284 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510530.778:7868): avc: denied { getattr } for pid=91078 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/hwmon/hwmon0/uevent" dev="sysfs" ino=37336 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510540.777:7956): avc: denied { open } for pid=91078 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510538.892:7935): avc: denied { setopt } for pid=92790 comm="alertmanager" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510538.604:7921): avc: denied { write } for pid=78076 comm="msgr-worker-0" laddr=172.21.15.12 lport=3301 faddr=172.21.15.64 fport=48994 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510540.777:7959): avc: denied { read } for pid=91078 comm="node_exporter" name="cpufreq" dev="sysfs" ino=31743 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510540.231:7945): avc: denied { open } for pid=73456 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=18090 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510540.777:7951): avc: denied { search } for pid=91078 comm="node_exporter" name="7" dev="proc" ino=320088 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510531.273:7886): avc: denied { read } for pid=113554 comm="pgrep" name="status" dev="proc" ino=265177 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510530.778:7866): avc: denied { open } for pid=91078 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/net/eno1/addr_assign_type" dev="sysfs" ino=37147 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510533.660:7897): avc: denied { search } for pid=92766 comm="conmon" name="/" dev="tmpfs" ino=3284 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510527.160:7828): avc: denied { setopt } for pid=92790 comm="alertmanager" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510540.231:7946): avc: denied { getattr } for pid=73456 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=18090 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510527.612:7845): avc: denied { search } for pid=81361 comm="log" name="/" dev="overlay" ino=2623659 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c492,c990 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510527.184:7835): avc: denied { search } for pid=73456 comm="log" name="run" dev="sda1" ino=2623593 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c157,c1021 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510530.777:7858): avc: denied { search } for pid=91078 comm="node_exporter" name="7" dev="proc" ino=320088 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510538.891:7932): avc: denied { search } for pid=76165 comm="log" name="/" dev="overlay" ino=2623612 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c303,c729 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510543.661:7989): avc: denied { search } for pid=92766 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510533.292:7894): avc: denied { getattr } for pid=78076 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510535.040:7905): avc: denied { write } for pid=73456 comm="msgr-worker-1" laddr=172.21.15.12 lport=56840 faddr=172.21.15.12 fport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510540.777:7953): avc: denied { read } for pid=91078 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510524.502:7786): avc: denied { search } for pid=73456 comm="log" name="run" dev="sda1" ino=2623593 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c157,c1021 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510527.160:7831): avc: denied { getattr } for pid=92790 comm="alertmanager" laddr=172.21.15.12 lport=53804 faddr=172.21.15.12 fport=8443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510526.259:7807): avc: denied { getattr } for pid=76165 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510526.259:7808): avc: denied { search } for pid=76165 comm="safe_timer" name="mon.a" dev="dm-4" ino=16777348 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510538.604:7919): avc: denied { write } for pid=78076 comm="log" name="socket" dev="tmpfs" ino=3583 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510527.184:7836): avc: denied { search } for pid=76165 comm="log" name="run" dev="sda1" ino=2623618 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c303,c729 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510524.523:7787): avc: denied { read } for pid=73456 comm="mgr-fin" name="localtime" dev="overlay" ino=789596 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c157,c1021 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510540.780:7976): avc: denied { open } for pid=91078 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=323987 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510528.159:7853): avc: denied { read } for pid=73456 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=18090 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510530.778:7873): avc: denied { search } for pid=91078 comm="node_exporter" name="1" dev="proc" ino=320070 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510530.778:7865): avc: denied { read } for pid=91078 comm="node_exporter" name="hwmon0" dev="sysfs" ino=37339 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510540.780:7974): avc: denied { open } for pid=91078 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=323985 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510540.777:7952): avc: denied { open } for pid=91078 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=320430 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510530.780:7878): avc: denied { search } for pid=91078 comm="node_exporter" name="/" dev="tmpfs" ino=3284 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510535.387:7908): avc: denied { getopt } for pid=73456 comm="dashboard" laddr=172.21.15.12 lport=8443 faddr=172.21.15.12 fport=53868 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510540.779:7968): avc: denied { getattr } for pid=91078 comm="node_exporter" name="/" dev="tmpfs" ino=3285 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510537.992:7913): avc: denied { open } for pid=88925 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510524.502:7786): avc: denied { search } for pid=73456 comm="log" name="/" dev="overlay" ino=2102821 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c157,c1021 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510540.777:7953): avc: denied { open } for pid=91078 comm="node_exporter" path="/proc/7/net/dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510526.159:7806): avc: denied { open } for pid=73456 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=1971751 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510540.231:7945): avc: denied { read } for pid=73456 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=18090 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510524.626:7797): avc: denied { read } for pid=92790 comm="alertmanager" path="socket:[386785]" dev="sockfs" ino=386785 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510538.892:7936): avc: denied { connect } for pid=92790 comm="alertmanager" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510540.780:7974): avc: denied { search } for pid=91078 comm="node_exporter" name="kernel" dev="proc" ino=321192 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510540.778:7961): avc: denied { open } for pid=91078 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=31831 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510531.260:7884): avc: denied { getattr } for pid=76165 comm="safe_timer" path="/var/lib/ceph/mon/ceph-a/store.db" dev="dm-4" ino=33595524 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510524.322:7783): avc: denied { search } for pid=86472 comm="log" name="run" dev="sda1" ino=2752528 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c80,c589 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510540.199:7944): avc: denied { search } for pid=81361 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510540.780:7976): avc: denied { search } for pid=91078 comm="node_exporter" name="fs" dev="proc" ino=323986 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510531.273:7886): avc: denied { open } for pid=113554 comm="pgrep" path="/proc/73433/status" dev="proc" ino=265177 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510540.780:7976): avc: denied { read } for pid=91078 comm="node_exporter" name="file-nr" dev="proc" ino=323987 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510527.160:7829): avc: denied { connect } for pid=92790 comm="alertmanager" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510538.231:7914): avc: denied { read } for pid=73456 comm="safe_timer" name="os-release" dev="overlay" ino=1971751 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c157,c1021 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510541.262:7977): avc: denied { dac_read_search } for pid=76165 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510541.262:7980): avc: denied { getattr } for pid=76165 comm="safe_timer" path="/var/lib/ceph/mon/ceph-a/store.db/LOCK" dev="dm-4" ino=33595525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510540.777:7949): avc: denied { search } for pid=91078 comm="node_exporter" name="/" dev="overlay" ino=2752564 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c145,c193 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510524.272:7771): avc: denied { search } for pid=76165 comm="log" name="run" dev="sda1" ino=2623618 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c303,c729 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510526.147:7805): avc: denied { getattr } for pid=73456 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=18090 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510541.278:7981): avc: denied { getattr } for pid=92790 comm="alertmanager" laddr=172.21.15.12 lport=53880 faddr=172.21.15.12 fport=8443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510540.495:7948): avc: denied { read } for pid=81361 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510526.259:7807): avc: denied { dac_read_search } for pid=76165 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510533.660:7895): avc: denied { use } for pid=92790 comm="alertmanager" path="pipe:[329846]" dev="pipefs" ino=329846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510541.262:7978): avc: denied { read } for pid=76165 comm="safe_timer" name="store.db" dev="dm-4" ino=33595524 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510524.822:7802): avc: denied { search } for pid=83882 comm="log" name="run" dev="sda1" ino=2623686 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c97,c238 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510530.778:7865): avc: denied { getattr } for pid=91078 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/hwmon/hwmon0" dev="sysfs" ino=37335 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510540.243:7947): avc: denied { open } for pid=73456 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=1971751 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c157,c1021 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510541.278:7986): avc: denied { read } for pid=92790 comm="alertmanager" path="socket:[394589]" dev="sockfs" ino=394589 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510528.159:7854): avc: denied { getattr } for pid=73456 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=18090 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510538.709:7926): avc: denied { search } for pid=88925 comm="log" name="/" dev="overlay" ino=2752543 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c378,c408 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510531.273:7888): avc: denied { open } for pid=113554 comm="pgrep" path="/proc/73456/status" dev="proc" ino=280950 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510530.778:7872): avc: denied { search } for pid=91078 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510530.778:7869): avc: denied { search } for pid=91078 comm="node_exporter" name="kernel" dev="proc" ino=321192 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510524.322:7785): avc: denied { search } for pid=81361 comm="log" name="run" dev="sda1" ino=2623665 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c492,c990 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510540.777:7950): avc: denied { getattr } for pid=91078 comm="node_exporter" path="/proc/7" dev="proc" ino=320088 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510538.891:7933): avc: denied { write } for pid=76165 comm="safe_timer" path="/var/lib/ceph/mon/ceph-a/store.db/000193.log" dev="dm-4" ino=33595543 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510543.661:7987): avc: denied { write } for pid=92790 comm="alertmanager" path="pipe:[329846]" dev="pipefs" ino=329846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510530.777:7859): avc: denied { read } for pid=91078 comm="node_exporter" name="fd" dev="proc" ino=320430 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510530.780:7879): avc: denied { search } for pid=91078 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510524.272:7775): avc: denied { append } for pid=76165 comm="log" path="/var/log/ceph/ceph-mon.a.log" dev="sda1" ino=394657 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510524.272:7773): avc: denied { write } for pid=76165 comm="msgr-worker-0" laddr=172.21.15.12 lport=41100 faddr=172.21.15.12 fport=3301 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510526.259:7809): avc: denied { getattr } for pid=76165 comm="safe_timer" path="/var/lib/ceph/mon/ceph-a/store.db" dev="dm-4" ino=33595524 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510527.162:7834): avc: denied { search } for pid=73456 comm="dashboard" name="/" dev="overlay" ino=2102821 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c157,c1021 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510539.524:7940): avc: denied { getattr } for pid=73456 comm="mgr-fin" name="UTC" dev="sda1" ino=2491973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510530.778:7873): avc: denied { open } for pid=91078 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=324844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510540.243:7947): avc: denied { read } for pid=73456 comm="safe_timer" name="os-release" dev="overlay" ino=1971751 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c157,c1021 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510538.893:7937): avc: denied { getopt } for pid=92790 comm="alertmanager" laddr=172.21.15.12 lport=59466 faddr=172.21.15.64 fport=8443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510530.778:7867): avc: denied { read } for pid=91078 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510540.780:7974): avc: denied { read } for pid=91078 comm="node_exporter" name="entropy_avail" dev="proc" ino=323985 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510531.456:7891): avc: denied { read } for pid=78076 comm="msgr-worker-1" path="pipe:[287115]" dev="pipefs" ino=287115 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510533.663:7902): avc: denied { getattr } for pid=73456 comm="dashboard" path="/usr/lib/python3.6/site-packages/cheroot/ssl/builtin.py" dev="sda1" ino=2097608 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510540.778:7962): avc: denied { search } for pid=91078 comm="node_exporter" name="1" dev="proc" ino=320070 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510524.822:7801): avc: denied { read } for pid=83882 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510543.661:7989): avc: denied { search } for pid=92766 comm="conmon" name="journal" dev="tmpfs" ino=3575 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510543.661:7989): avc: denied { search } for pid=92766 comm="conmon" name="systemd" dev="tmpfs" ino=3293 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510530.780:7880): avc: denied { search } for pid=91078 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1623510527.160:7830): avc: denied { getopt } for pid=92790 comm="alertmanager" laddr=172.21.15.12 lport=53804 faddr=172.21.15.12 fport=8443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510540.778:7966): avc: denied { search } for pid=91078 comm="node_exporter" name="net" dev="proc" ino=320094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510541.278:7982): avc: denied { accept } for pid=73456 comm="dashboard" laddr=172.21.15.12 lport=8443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510524.523:7787): avc: denied { search } for pid=73456 comm="mgr-fin" name="usr" dev="sda1" ino=1968429 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510537.992:7913): avc: denied { read } for pid=88925 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510528.171:7855): avc: denied { search } for pid=73456 comm="safe_timer" name="usr" dev="sda1" ino=1968429 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510530.778:7869): avc: denied { read } for pid=91078 comm="node_exporter" name="entropy_avail" dev="proc" ino=323985 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510538.604:7919): avc: denied { write } for pid=78076 comm="log" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510524.822:7801): avc: denied { search } for pid=83882 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510524.272:7771): avc: denied { search } for pid=76165 comm="log" name="journal" dev="tmpfs" ino=3575 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510538.709:7924): avc: denied { search } for pid=81361 comm="log" name="run" dev="sda1" ino=2623665 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c492,c990 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510538.895:7938): avc: denied { search } for pid=73456 comm="log" name="/" dev="overlay" ino=2102821 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c157,c1021 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510543.661:7989): avc: denied { write } for pid=92766 comm="conmon" name="socket" dev="tmpfs" ino=3583 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510533.660:7897): avc: denied { search } for pid=92766 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510530.777:7861): avc: denied { search } for pid=91078 comm="node_exporter" name="fs" dev="proc" ino=323986 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510538.604:7919): avc: denied { search } for pid=78076 comm="log" name="run" dev="sda1" ino=2623644 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c595,c722 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510524.626:7796): avc: denied { write } for pid=92790 comm="alertmanager" path="socket:[386785]" dev="sockfs" ino=386785 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510540.777:7956): avc: denied { read } for pid=91078 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510530.777:7860): avc: denied { read } for pid=91078 comm="node_exporter" name="net" dev="sysfs" ino=20887 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510527.160:7827): avc: denied { create } for pid=92790 comm="alertmanager" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510524.822:7801): avc: denied { search } for pid=83882 comm="safe_timer" name="/" dev="overlay" ino=2623680 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c97,c238 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510541.262:7979): avc: denied { getattr } for pid=76165 comm="safe_timer" path="/var/lib/ceph/mon/ceph-a/store.db" dev="dm-4" ino=33595524 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510541.278:7984): avc: denied { write } for pid=92790 comm="alertmanager" path="socket:[394589]" dev="sockfs" ino=394589 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510527.160:7832): avc: denied { write } for pid=92790 comm="alertmanager" path="socket:[393268]" dev="sockfs" ino=393268 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510524.272:7771): avc: denied { write } for pid=76165 comm="log" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510524.626:7792): avc: denied { accept } for pid=73456 comm="dashboard" laddr=172.21.15.12 lport=8443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510531.273:7887): avc: denied { getattr } for pid=113554 comm="pgrep" path="/proc/73456" dev="proc" ino=280946 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510540.777:7953): avc: denied { read } for pid=91078 comm="node_exporter" name="dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510538.709:7925): avc: denied { search } for pid=83882 comm="log" name="run" dev="sda1" ino=2623686 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c97,c238 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510530.780:7881): avc: denied { search } for pid=91078 comm="node_exporter" name="host" dev="sda1" ino=2752573 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c145,c193 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510530.778:7869): avc: denied { open } for pid=91078 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=323985 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510530.778:7867): avc: denied { open } for pid=91078 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510540.778:7960): avc: denied { getattr } for pid=91078 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=50690 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510539.524:7940): avc: denied { read } for pid=73456 comm="mgr-fin" name="localtime" dev="sda1" ino=789596 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510528.159:7853): avc: denied { open } for pid=73456 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=18090 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510524.322:7784): avc: denied { search } for pid=88925 comm="log" name="/" dev="overlay" ino=2752543 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c378,c408 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510530.780:7878): avc: denied { search } for pid=91078 comm="node_exporter" name="user" dev="tmpfs" ino=13499 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510524.322:7784): avc: denied { search } for pid=88925 comm="log" name="run" dev="sda1" ino=2752549 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c378,c408 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510527.612:7844): avc: denied { search } for pid=83882 comm="log" name="run" dev="sda1" ino=2623686 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c97,c238 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510524.626:7791): avc: denied { getopt } for pid=92790 comm="alertmanager" laddr=172.21.15.12 lport=53796 faddr=172.21.15.12 fport=8443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510530.778:7871): avc: denied { getattr } for pid=91078 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510526.259:7808): avc: denied { read } for pid=76165 comm="safe_timer" name="store.db" dev="dm-4" ino=33595524 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510540.779:7968): avc: denied { search } for pid=91078 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510530.777:7862): avc: denied { open } for pid=91078 comm="node_exporter" path="/proc/7/net/sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510540.778:7964): avc: denied { getattr } for pid=91078 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510524.272:7774): avc: denied { read } for pid=78076 comm="msgr-worker-1" path="socket:[289013]" dev="sockfs" ino=289013 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510538.709:7926): avc: denied { search } for pid=88925 comm="log" name="run" dev="sda1" ino=2752549 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c378,c408 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510540.777:7951): avc: denied { read } for pid=91078 comm="node_exporter" name="stat" dev="proc" ino=320429 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510538.892:7934): avc: denied { create } for pid=92790 comm="alertmanager" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510531.272:7885): avc: denied { getattr } for pid=113554 comm="pgrep" path="/proc/73433" dev="proc" ino=271550 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510538.231:7914): avc: denied { open } for pid=73456 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=1971751 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c157,c1021 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510527.612:7844): avc: denied { search } for pid=83882 comm="log" name="/" dev="overlay" ino=2623680 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c97,c238 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510530.777:7863): avc: denied { read } for pid=91078 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510539.524:7940): avc: denied { getattr } for pid=73456 comm="mgr-fin" path="/usr/share/zoneinfo/UTC" dev="overlay" ino=2491973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c157,c1021 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510535.387:7909): avc: denied { getattr } for pid=73456 comm="dashboard" laddr=172.21.15.12 lport=8443 faddr=172.21.15.12 fport=53868 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510540.199:7944): avc: denied { open } for pid=81361 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510540.777:7955): avc: denied { getattr } for pid=91078 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510534.207:7903): avc: denied { read } for pid=73456 comm="safe_timer" name="os-release" dev="sda1" ino=1971751 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510531.273:7888): avc: denied { read } for pid=113554 comm="pgrep" name="status" dev="proc" ino=280950 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510540.779:7971): avc: denied { search } for pid=91078 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510540.779:7973): avc: denied { search } for pid=91078 comm="node_exporter" name="host" dev="sda1" ino=2752573 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c145,c193 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510524.523:7787): avc: denied { getattr } for pid=73456 comm="mgr-fin" path="/usr/share/zoneinfo/UTC" dev="overlay" ino=2491973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c157,c1021 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510530.777:7861): avc: denied { read } for pid=91078 comm="node_exporter" name="file-nr" dev="proc" ino=323987 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510538.604:7922): avc: denied { append } for pid=78076 comm="log" path="/var/log/ceph/ceph-mon.c.log" dev="sda1" ino=394672 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510538.604:7920): avc: denied { read } for pid=78076 comm="msgr-worker-0" path="pipe:[287114]" dev="pipefs" ino=287114 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510524.322:7783): avc: denied { search } for pid=86472 comm="log" name="/" dev="overlay" ino=2752522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c80,c589 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510541.278:7983): avc: denied { getopt } for pid=73456 comm="dashboard" laddr=172.21.15.12 lport=8443 faddr=172.21.15.12 fport=53880 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510527.696:7847): avc: denied { search } for pid=88925 comm="log" name="/" dev="overlay" ino=2752543 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c378,c408 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510530.777:7858): avc: denied { open } for pid=91078 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=320429 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510524.626:7795): avc: denied { getattr } for pid=73456 comm="dashboard" laddr=172.21.15.12 lport=8443 faddr=172.21.15.12 fport=53796 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510540.779:7970): avc: denied { search } for pid=91078 comm="node_exporter" name="user" dev="tmpfs" ino=13499 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510531.260:7883): avc: denied { read } for pid=76165 comm="safe_timer" name="store.db" dev="dm-4" ino=33595524 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510524.626:7788): avc: denied { create } for pid=92790 comm="alertmanager" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510527.612:7845): avc: denied { search } for pid=81361 comm="log" name="run" dev="sda1" ino=2623665 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c492,c990 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510538.604:7919): avc: denied { search } for pid=78076 comm="log" name="journal" dev="tmpfs" ino=3575 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510540.243:7947): avc: denied { open } for pid=73456 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=1971751 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510524.626:7789): avc: denied { setopt } for pid=92790 comm="alertmanager" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510541.262:7978): avc: denied { open } for pid=76165 comm="safe_timer" path="/var/lib/ceph/mon/ceph-a/store.db" dev="dm-4" ino=33595524 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510530.778:7870): avc: denied { getattr } for pid=91078 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=323985 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510538.604:7919): avc: denied { search } for pid=78076 comm="log" name="diff" dev="sda1" ino=2623638 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510540.779:7969): avc: denied { search } for pid=91078 comm="node_exporter" name="/" dev="devtmpfs" ino=3 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510541.278:7985): avc: denied { getattr } for pid=73456 comm="dashboard" laddr=172.21.15.12 lport=8443 faddr=172.21.15.12 fport=53880 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510524.272:7772): avc: denied { read } for pid=76165 comm="msgr-worker-0" path="pipe:[278993]" dev="pipefs" ino=278993 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510524.523:7787): avc: denied { getattr } for pid=73456 comm="mgr-fin" name="UTC" dev="sda1" ino=2491973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510526.159:7806): avc: denied { open } for pid=73456 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=1971751 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c157,c1021 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510540.778:7961): avc: denied { read } for pid=91078 comm="node_exporter" name="cpuinfo_max_freq" dev="sysfs" ino=31831 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510530.778:7873): avc: denied { read } for pid=91078 comm="node_exporter" name="mounts" dev="proc" ino=324844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510531.273:7886): avc: denied { search } for pid=113554 comm="pgrep" name="73433" dev="proc" ino=271550 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510538.709:7927): avc: denied { search } for pid=86472 comm="log" name="run" dev="sda1" ino=2752528 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c80,c589 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510540.243:7947): avc: denied { read } for pid=73456 comm="safe_timer" name="os-release" dev="sda1" ino=1971751 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510540.777:7958): avc: denied { open } for pid=91078 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510543.661:7989): avc: denied { write } for pid=92766 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510534.975:7904): avc: denied { sendto } for pid=86472 comm="log" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510527.696:7846): avc: denied { search } for pid=86472 comm="log" name="run" dev="sda1" ino=2752528 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c80,c589 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510524.822:7803): avc: denied { search } for pid=83882 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510524.822:7803): avc: denied { read } for pid=83882 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510538.709:7925): avc: denied { search } for pid=83882 comm="log" name="/" dev="overlay" ino=2623680 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c97,c238 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510540.779:7967): avc: denied { getattr } for pid=91078 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510539.524:7940): avc: denied { search } for pid=73456 comm="mgr-fin" name="usr" dev="sda1" ino=1968429 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510524.272:7771): avc: denied { write } for pid=76165 comm="log" name="socket" dev="tmpfs" ino=3583 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510531.260:7883): avc: denied { search } for pid=76165 comm="safe_timer" name="mon.a" dev="dm-4" ino=16777348 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510540.777:7954): avc: denied { getattr } for pid=91078 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510540.780:7975): avc: denied { getattr } for pid=91078 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=323985 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510524.272:7771): avc: denied { search } for pid=76165 comm="log" name="diff" dev="sda1" ino=2623612 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510530.777:7864): avc: denied { getattr } for pid=91078 comm="node_exporter" path="/sys/class/net/eno2" dev="sysfs" ino=39249 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510524.626:7794): avc: denied { getopt } for pid=73456 comm="dashboard" laddr=172.21.15.12 lport=8443 faddr=172.21.15.12 fport=53796 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510534.207:7903): avc: denied { open } for pid=73456 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=1971751 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510524.272:7771): avc: denied { sendto } for pid=76165 comm="log" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510533.660:7897): avc: denied { search } for pid=92766 comm="conmon" name="journal" dev="tmpfs" ino=3575 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510540.778:7962): avc: denied { open } for pid=91078 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=324844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510540.495:7948): avc: denied { open } for pid=81361 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510524.272:7780): avc: denied { search } for pid=78076 comm="log" name="/" dev="overlay" ino=2623638 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c595,c722 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510527.161:7833): avc: denied { read } for pid=92790 comm="alertmanager" path="socket:[393268]" dev="sockfs" ino=393268 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510538.306:7916): avc: denied { name_connect } for pid=92790 comm="alertmanager" dest=8443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:http_port_t:s0 tclass=tcp_socket permissive=1', 'type=AVC msg=audit(1623510531.526:7893): avc: denied { search } for pid=81361 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510533.660:7897): avc: denied { sendto } for pid=92766 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510538.709:7927): avc: denied { search } for pid=86472 comm="log" name="/" dev="overlay" ino=2752522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c80,c589 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510533.660:7897): avc: denied { write } for pid=92766 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510540.777:7951): avc: denied { open } for pid=91078 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=320429 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510528.159:7852): avc: denied { open } for pid=73456 comm="safe_timer" path="/proc/meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510524.272:7780): avc: denied { search } for pid=78076 comm="log" name="run" dev="sda1" ino=2623644 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c595,c722 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510531.273:7889): avc: denied { search } for pid=76165 comm="log" name="diff" dev="sda1" ino=2623612 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510530.780:7879): avc: denied { search } for pid=91078 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510531.260:7883): avc: denied { open } for pid=76165 comm="safe_timer" path="/var/lib/ceph/mon/ceph-a/store.db" dev="dm-4" ino=33595524 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510528.159:7852): avc: denied { read } for pid=73456 comm="safe_timer" name="meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510526.147:7804): avc: denied { open } for pid=73456 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=18090 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510530.777:7861): avc: denied { open } for pid=91078 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=323987 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510526.259:7808): avc: denied { open } for pid=76165 comm="safe_timer" path="/var/lib/ceph/mon/ceph-a/store.db" dev="dm-4" ino=33595524 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510540.778:7965): avc: denied { search } for pid=91078 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510531.273:7888): avc: denied { search } for pid=113554 comm="pgrep" name="73456" dev="proc" ino=280946 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510530.780:7877): avc: denied { search } for pid=91078 comm="node_exporter" name="/" dev="devtmpfs" ino=3 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510531.260:7882): avc: denied { dac_read_search } for pid=76165 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510527.107:7826): avc: denied { write } for pid=83882 comm="log" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510540.231:7945): avc: denied { search } for pid=73456 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510540.778:7963): avc: denied { getattr } for pid=91078 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=31831 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510524.322:7785): avc: denied { search } for pid=81361 comm="log" name="/" dev="overlay" ino=2623659 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c492,c990 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510526.159:7806): avc: denied { read } for pid=73456 comm="safe_timer" name="os-release" dev="overlay" ino=1971751 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c157,c1021 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510538.231:7915): avc: denied { getattr } for pid=73456 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=1971751 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c157,c1021 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510524.272:7781): avc: denied { write } for pid=76165 comm="ms_dispatch" path="/var/lib/ceph/mon/ceph-a/store.db/000193.log" dev="dm-4" ino=33595543 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510540.779:7972): avc: denied { search } for pid=91078 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1623510540.777:7949): avc: denied { getattr } for pid=91078 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510540.777:7958): avc: denied { read } for pid=91078 comm="node_exporter" name="cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510538.895:7938): avc: denied { search } for pid=73456 comm="log" name="run" dev="sda1" ino=2623593 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c157,c1021 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510530.777:7859): avc: denied { open } for pid=91078 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=320430 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510526.147:7804): avc: denied { search } for pid=73456 comm="safe_timer" name="container" dev="cgroup" ino=18083 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510526.147:7804): avc: denied { read } for pid=73456 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=18090 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510526.159:7806): avc: denied { read } for pid=73456 comm="safe_timer" name="os-release" dev="sda1" ino=1971751 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510524.626:7790): avc: denied { connect } for pid=92790 comm="alertmanager" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510533.660:7897): avc: denied { write } for pid=92766 comm="conmon" name="socket" dev="tmpfs" ino=3583 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510540.778:7962): avc: denied { read } for pid=91078 comm="node_exporter" name="mounts" dev="proc" ino=324844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510543.661:7988): avc: denied { read } for pid=92766 comm="conmon" path="pipe:[329846]" dev="pipefs" ino=329846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510538.604:7919): avc: denied { search } for pid=78076 comm="log" name="/" dev="overlay" ino=2623638 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c595,c722 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510531.526:7892): avc: denied { search } for pid=81361 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510543.661:7989): avc: denied { search } for pid=92766 comm="conmon" name="/" dev="tmpfs" ino=3284 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510524.272:7770): avc: denied { write } for pid=76165 comm="safe_timer" path="pipe:[278993]" dev="pipefs" ino=278993 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510531.456:7890): avc: denied { write } for pid=78076 comm="safe_timer" path="pipe:[287115]" dev="pipefs" ino=287115 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510530.778:7866): avc: denied { read } for pid=91078 comm="node_exporter" name="addr_assign_type" dev="sysfs" ino=37147 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510524.523:7787): avc: denied { read } for pid=73456 comm="mgr-fin" name="localtime" dev="sda1" ino=789596 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1623510530.779:7876): avc: denied { search } for pid=91078 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510540.779:7971): avc: denied { search } for pid=91078 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510527.603:7843): avc: denied { search } for pid=78076 comm="log" name="journal" dev="tmpfs" ino=3575 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510530.779:7874): avc: denied { search } for pid=91078 comm="node_exporter" name="net" dev="proc" ino=320094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510540.231:7945): avc: denied { search } for pid=73456 comm="safe_timer" name="container" dev="cgroup" ino=18083 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510540.777:7952): avc: denied { read } for pid=91078 comm="node_exporter" name="fd" dev="proc" ino=320430 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510538.709:7924): avc: denied { search } for pid=81361 comm="log" name="/" dev="overlay" ino=2623659 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c492,c990 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510535.387:7907): avc: denied { accept } for pid=73456 comm="dashboard" laddr=172.21.15.12 lport=8443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510535.040:7906): avc: denied { read } for pid=73456 comm="msgr-worker-0" path="socket:[383615]" dev="sockfs" ino=383615 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510541.262:7978): avc: denied { search } for pid=76165 comm="safe_timer" name="mon.a" dev="dm-4" ino=16777348 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1623510543.661:7989): avc: denied { sendto } for pid=92766 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"']
Pulpito