sage-2021-06-20_22:54:30-rados-master-distro-basic-smithi/6182065

Description: rados/upgrade/parallel/{0-start 1-tasks distro1$/{rhel_8.3_kubic_stable} mon_election/classic upgrade-sequence workload/{ec-rados-default rados_api rados_loadgenbig rbd_import_export test_rbd_api test_rbd_python}}

Log: http://qa-proxy.ceph.com/teuthology/sage-2021-06-20_22:54:30-rados-master-distro-basic-smithi/6182065/teuthology.log

Failure Reason:

SELinux denials found on ubuntu@smithi120.front.sepia.ceph.com: ['type=AVC msg=audit(1624236283.638:8442): avc: denied { getattr } for pid=75230 comm="dashboard" laddr=172.21.15.120 lport=8443 faddr=172.21.15.120 fport=55202 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236244.416:8199): avc: denied { read } for pid=75230 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=22026 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236253.090:8273): avc: denied { getattr } for pid=92897 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=43728 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236282.356:8372): avc: denied { write } for pid=88288 comm="log" name="socket" dev="tmpfs" ino=16739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236250.503:8251): avc: denied { read } for pid=114775 comm="pgrep" name="status" dev="proc" ino=288397 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236283.092:8418): avc: denied { getattr } for pid=92897 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=332371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236243.317:8152): avc: denied { open } for pid=88288 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236282.645:8389): avc: denied { open } for pid=75230 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=22026 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236283.637:8433): avc: denied { sendto } for pid=94580 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236263.636:8325): avc: denied { search } for pid=94580 comm="conmon" name="journal" dev="tmpfs" ino=16735 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236283.090:8409): avc: denied { read } for pid=92897 comm="node_exporter" name="entropy_avail" dev="proc" ino=332371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236243.384:8166): avc: denied { read } for pid=75230 comm="msgr-worker-0" path="socket:[385393]" dev="sockfs" ino=385393 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236261.552:8317): avc: denied { getattr } for pid=78007 comm="safe_timer" path="/var/lib/ceph/mon/ceph-a/store.db/LOCK" dev="dm-4" ino=16797829 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236283.090:8404): avc: denied { read } for pid=92897 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236261.552:8318): avc: denied { write } for pid=78007 comm="safe_timer" path="/var/lib/ceph/mon/ceph-a/store.db/000181.log" dev="dm-4" ino=16797838 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236283.089:8401): avc: denied { open } for pid=92897 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=331566 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236243.636:8177): avc: denied { create } for pid=94603 comm="alertmanager" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236283.090:8410): avc: denied { getattr } for pid=92897 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236250.515:8252): avc: denied { search } for pid=85732 comm="log" name="run" dev="sda1" ino=2621829 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c90,c745 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236279.242:8353): avc: denied { search } for pid=79931 comm="log" name="diff" dev="sda1" ino=2621781 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236283.090:8411): avc: denied { open } for pid=92897 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/net/eno1/addr_assign_type" dev="sysfs" ino=35397 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236253.639:8300): avc: denied { search } for pid=75230 comm="dashboard" name="usr" dev="sda1" ino=1839380 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236282.356:8373): avc: denied { search } for pid=90794 comm="log" name="journal" dev="tmpfs" ino=16735 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236283.432:8428): avc: denied { name_connect } for pid=94603 comm="alertmanager" dest=8443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:http_port_t:s0 tclass=tcp_socket permissive=1', 'type=AVC msg=audit(1624236253.089:8266): avc: denied { getattr } for pid=92897 comm="node_exporter" path="/proc/7" dev="proc" ino=332938 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236243.680:8194): avc: denied { open } for pid=79931 comm="safe_timer" path="/var/lib/ceph/mon/ceph-c/store.db" dev="dm-4" ino=16797836 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236253.093:8286): avc: denied { search } for pid=92897 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236246.660:8231): avc: denied { getopt } for pid=94603 comm="alertmanager" laddr=172.21.15.120 lport=55046 faddr=172.21.15.120 fport=8443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236283.093:8425): avc: denied { search } for pid=92897 comm="node_exporter" name="host" dev="sda1" ino=2621895 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c53,c483 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236283.090:8407): avc: denied { read } for pid=92897 comm="node_exporter" name="file-nr" dev="proc" ino=332368 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236282.374:8383): avc: denied { open } for pid=88288 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236283.092:8416): avc: denied { search } for pid=92897 comm="node_exporter" name="net" dev="proc" ino=332944 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236253.089:8268): avc: denied { open } for pid=92897 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=331567 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236282.356:8373): avc: denied { search } for pid=90794 comm="log" name="run" dev="sda1" ino=2621871 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c324,c948 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236259.156:8302): avc: denied { ioctl } for pid=75230 comm="mgr-fin" path="/usr/share/ceph/mgr/cephadm/serve.py" dev="overlay" ino=2230907 ioctlcmd=0x5401 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c21,c837 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236243.317:8153): avc: denied { open } for pid=88288 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236283.090:8413): avc: denied { search } for pid=92897 comm="node_exporter" name="rpc" dev="proc" ino=4026532409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236244.416:8200): avc: denied { getattr } for pid=75230 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=22026 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236250.515:8253): avc: denied { search } for pid=85732 comm="safe_timer" name="/" dev="overlay" ino=2621823 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c90,c745 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236243.317:8152): avc: denied { read } for pid=88288 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236248.311:8242): avc: denied { shutdown } for pid=75230 comm="msgr-worker-1" laddr=172.21.15.120 lport=48686 faddr=172.21.15.178 fport=6824 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236246.428:8225): avc: denied { read } for pid=75230 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=22026 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236253.092:8281): avc: denied { search } for pid=92897 comm="node_exporter" name="1" dev="proc" ino=332919 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236282.374:8384): avc: denied { search } for pid=88288 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236263.090:8321): avc: denied { open } for pid=92897 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236253.094:8290): avc: denied { search } for pid=92897 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1624236253.093:8286): avc: denied { getattr } for pid=92897 comm="node_exporter" name="/" dev="tmpfs" ino=16452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236243.636:8179): avc: denied { setopt } for pid=94603 comm="alertmanager" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236253.092:8281): avc: denied { read } for pid=92897 comm="node_exporter" name="mounts" dev="proc" ino=331576 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236243.384:8167): avc: denied { search } for pid=75230 comm="log" name="run" dev="sda1" ino=2103193 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c21,c837 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236277.930:8342): avc: denied { read } for pid=75230 comm="dashboard" name="lib" dev="overlay" ino=660568 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c21,c837 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236279.301:8357): avc: denied { sendto } for pid=85732 comm="log" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236247.757:8236): avc: denied { write } for pid=79931 comm="msgr-worker-0" laddr=172.21.15.120 lport=3301 faddr=172.21.15.178 fport=59516 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236253.090:8270): avc: denied { open } for pid=92897 comm="node_exporter" path="/proc/7/net/sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236244.428:8201): avc: denied { open } for pid=75230 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=1841422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c21,c837 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236263.312:8323): avc: denied { name_connect } for pid=75230 comm="msgr-worker-1" dest=6824 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unreserved_port_t:s0 tclass=tcp_socket permissive=1', 'type=AVC msg=audit(1624236243.636:8178): avc: denied { setopt } for pid=94603 comm="alertmanager" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236283.089:8402): avc: denied { read } for pid=92897 comm="node_exporter" name="fd" dev="proc" ino=331567 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236283.638:8443): avc: denied { read } for pid=94603 comm="alertmanager" path="socket:[405824]" dev="sockfs" ino=405824 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236282.657:8395): avc: denied { search } for pid=78007 comm="log" name="/" dev="overlay" ino=2621755 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c123,c908 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236243.638:8189): avc: denied { getattr } for pid=75230 comm="dashboard" name="connections.py" dev="sda1" ino=1968794 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236283.432:8429): avc: denied { getopt } for pid=94603 comm="alertmanager" laddr=172.21.15.120 lport=42600 faddr=172.21.15.178 fport=8443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236283.432:8427): avc: denied { setopt } for pid=94603 comm="alertmanager" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236248.869:8245): avc: denied { getopt } for pid=75230 comm="dashboard" laddr=172.21.15.120 lport=8443 faddr=172.21.15.120 fport=55070 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236283.637:8432): avc: denied { open } for pid=94580 comm="conmon" path="/dev/null" dev="devtmpfs" ino=12290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236253.092:8283): avc: denied { search } for pid=92897 comm="node_exporter" name="fs" dev="proc" ino=332367 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236250.503:8248): avc: denied { getattr } for pid=114775 comm="pgrep" path="/proc/75207" dev="proc" ino=279159 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236248.869:8246): avc: denied { getattr } for pid=75230 comm="dashboard" laddr=172.21.15.120 lport=8443 faddr=172.21.15.120 fport=55070 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236283.683:8445): avc: denied { search } for pid=79931 comm="safe_timer" name="mon.c" dev="dm-4" ino=8388751 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236277.343:8327): avc: denied { search } for pid=78007 comm="log" name="/" dev="overlay" ino=2621755 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c123,c908 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236279.242:8352): avc: denied { search } for pid=78007 comm="log" name="diff" dev="sda1" ino=2621755 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236283.638:8440): avc: denied { getopt } for pid=75230 comm="dashboard" laddr=172.21.15.120 lport=8443 faddr=172.21.15.120 fport=55202 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236253.090:8274): avc: denied { read } for pid=92897 comm="node_exporter" name="hwmon0" dev="sysfs" ino=35588 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236243.384:8165): avc: denied { write } for pid=79931 comm="msgr-worker-2" laddr=172.21.15.120 lport=56450 faddr=172.21.15.120 fport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236252.477:8264): avc: denied { open } for pid=75230 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=1841422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c21,c837 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236253.092:8283): avc: denied { read } for pid=92897 comm="node_exporter" name="file-nr" dev="proc" ino=332368 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236261.552:8315): avc: denied { open } for pid=78007 comm="safe_timer" path="/var/lib/ceph/mon/ceph-a/store.db" dev="dm-4" ino=16797828 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236253.089:8269): avc: denied { search } for pid=92897 comm="node_exporter" name="net" dev="proc" ino=332944 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236245.970:8221): avc: denied { search } for pid=75230 comm="log" name="run" dev="sda1" ino=2103193 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c21,c837 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236283.090:8411): avc: denied { read } for pid=92897 comm="node_exporter" name="eno1" dev="sysfs" ino=35389 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236282.657:8391): avc: denied { open } for pid=75230 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=1841422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c21,c837 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236243.636:8172): avc: denied { search } for pid=94580 comm="conmon" name="/" dev="tmpfs" ino=16451 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236283.093:8424): avc: denied { search } for pid=92897 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1624236283.637:8433): avc: denied { write } for pid=94580 comm="conmon" name="socket" dev="tmpfs" ino=16739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236245.971:8222): avc: denied { search } for pid=78007 comm="log" name="run" dev="sda1" ino=2621761 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c123,c908 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236283.090:8403): avc: denied { getattr } for pid=92897 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=21498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236243.384:8164): avc: denied { search } for pid=79931 comm="log" name="/" dev="overlay" ino=2621781 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c732,c854 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236243.317:8152): avc: denied { search } for pid=88288 comm="safe_timer" name="diff" dev="sda1" ino=2621844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236243.757:8197): avc: denied { search } for pid=78007 comm="log" name="/" dev="overlay" ino=2621755 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c123,c908 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236282.657:8392): avc: denied { getattr } for pid=75230 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=1841422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c21,c837 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236243.317:8151): avc: denied { write } for pid=88288 comm="log" name="socket" dev="tmpfs" ino=16739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236282.356:8371): avc: denied { write } for pid=88288 comm="msgr-worker-1" laddr=172.21.15.120 lport=6822 faddr=172.21.15.178 fport=41850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236283.637:8432): avc: denied { search } for pid=94580 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236283.432:8428): avc: denied { connect } for pid=94603 comm="alertmanager" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236243.635:8169): avc: denied { use } for pid=94603 comm="alertmanager" path="pipe:[339028]" dev="pipefs" ino=339028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236253.636:8294): avc: denied { write } for pid=94580 comm="conmon" name="null" dev="devtmpfs" ino=12290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236246.238:8223): avc: denied { search } for pid=79931 comm="log" name="/" dev="overlay" ino=2621781 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c732,c854 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236282.356:8372): avc: denied { search } for pid=88288 comm="log" name="journal" dev="tmpfs" ino=16735 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236277.656:8335): avc: denied { search } for pid=90794 comm="log" name="run" dev="sda1" ino=2621871 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c324,c948 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236253.094:8289): avc: denied { search } for pid=92897 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236283.089:8399): avc: denied { search } for pid=92897 comm="node_exporter" name="/" dev="overlay" ino=2621886 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c53,c483 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236283.091:8415): avc: denied { getattr } for pid=92897 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236253.636:8295): avc: denied { sendto } for pid=94580 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236253.089:8265): avc: denied { getattr } for pid=92897 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236283.090:8409): avc: denied { search } for pid=92897 comm="node_exporter" name="kernel" dev="proc" ino=334912 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236253.148:8292): avc: denied { sendto } for pid=88288 comm="log" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236283.090:8409): avc: denied { open } for pid=92897 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=332371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236282.374:8383): avc: denied { read } for pid=88288 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236243.317:8154): avc: denied { append } for pid=88288 comm="log" path="/var/log/ceph/ceph-osd.2.log" dev="sda1" ino=396172 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236280.645:8363): avc: denied { read } for pid=75230 comm="safe_timer" name="os-release" dev="overlay" ino=1841422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c21,c837 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236253.092:8282): avc: denied { open } for pid=92897 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236282.356:8375): avc: denied { search } for pid=85732 comm="log" name="run" dev="sda1" ino=2621829 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c90,c745 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236277.815:8337): avc: denied { search } for pid=75230 comm="log" name="run" dev="sda1" ino=2103193 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c21,c837 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236243.637:8183): avc: denied { accept } for pid=75230 comm="dashboard" laddr=172.21.15.120 lport=8443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236263.089:8320): avc: denied { search } for pid=92897 comm="node_exporter" name="rpc" dev="proc" ino=4026532409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236283.093:8422): avc: denied { search } for pid=92897 comm="node_exporter" name="/" dev="tmpfs" ino=16451 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236244.428:8201): avc: denied { read } for pid=75230 comm="safe_timer" name="os-release" dev="overlay" ino=1841422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c21,c837 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236243.636:8171): avc: denied { search } for pid=94580 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236253.093:8285): avc: denied { getattr } for pid=92897 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236245.944:8220): avc: denied { write } for pid=88288 comm="log" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236277.928:8339): avc: denied { accept } for pid=75230 comm="dashboard" laddr=172.21.15.120 lport=8443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236243.317:8151): avc: denied { search } for pid=88288 comm="log" name="run" dev="sda1" ino=2621850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c212,c358 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236259.157:8303): avc: denied { write } for pid=75230 comm="log" path="pipe:[275122]" dev="pipefs" ino=275122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236253.094:8288): avc: denied { search } for pid=92897 comm="node_exporter" name="/" dev="tmpfs" ino=16451 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236243.638:8189): avc: denied { read } for pid=75230 comm="dashboard" name="lib" dev="sda1" ino=660568 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236283.090:8405): avc: denied { read } for pid=92897 comm="node_exporter" name="cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236261.369:8314): avc: denied { getattr } for pid=75230 comm="dashboard" path="/usr/lib/python3.6/site-packages/cheroot/connections.py" dev="sda1" ino=1968794 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236282.657:8391): avc: denied { search } for pid=75230 comm="safe_timer" name="usr" dev="sda1" ino=1839380 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236283.090:8414): avc: denied { getattr } for pid=92897 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=30846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236243.638:8189): avc: denied { read } for pid=75230 comm="dashboard" name="lib" dev="overlay" ino=660568 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c21,c837 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236258.981:8301): avc: denied { getattr } for pid=75230 comm="mgr-fin" path="/usr/share/ceph/mgr" dev="overlay" ino=2230888 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c21,c837 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236243.635:8169): avc: denied { write } for pid=94603 comm="alertmanager" path="pipe:[339028]" dev="pipefs" ino=339028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236282.356:8374): avc: denied { search } for pid=83205 comm="log" name="diff" dev="sda1" ino=2621802 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236243.636:8172): avc: denied { search } for pid=94580 comm="conmon" name="systemd" dev="tmpfs" ino=16460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236282.657:8391): avc: denied { read } for pid=75230 comm="safe_timer" name="os-release" dev="sda1" ino=1841422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236277.656:8334): avc: denied { write } for pid=85732 comm="msgr-worker-2" laddr=172.21.15.120 lport=6814 faddr=172.21.15.178 fport=53514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236278.621:8346): avc: denied { open } for pid=75230 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=22026 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236253.093:8284): avc: denied { getattr } for pid=92897 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236253.636:8295): avc: denied { search } for pid=94580 comm="conmon" name="/" dev="tmpfs" ino=16451 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236283.093:8420): avc: denied { getattr } for pid=92897 comm="node_exporter" name="/" dev="tmpfs" ino=16452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236244.416:8199): avc: denied { open } for pid=75230 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=22026 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236282.645:8389): avc: denied { search } for pid=75230 comm="safe_timer" name="container" dev="cgroup" ino=22019 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236244.428:8201): avc: denied { read } for pid=75230 comm="safe_timer" name="os-release" dev="sda1" ino=1841422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236281.975:8364): avc: denied { write } for pid=75230 comm="safe_timer" path="pipe:[285255]" dev="pipefs" ino=285255 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236253.092:8281): avc: denied { open } for pid=92897 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=331576 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236243.637:8185): avc: denied { getopt } for pid=75230 comm="dashboard" laddr=172.21.15.120 lport=8443 faddr=172.21.15.120 fport=55034 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236252.465:8263): avc: denied { search } for pid=75230 comm="safe_timer" name="container" dev="cgroup" ino=22019 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236283.090:8405): avc: denied { open } for pid=92897 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236263.090:8321): avc: denied { read } for pid=92897 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236244.428:8201): avc: denied { open } for pid=75230 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=1841422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236253.091:8279): avc: denied { search } for pid=92897 comm="node_exporter" name="kernel" dev="proc" ino=334912 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236277.655:8331): avc: denied { read } for pid=83205 comm="msgr-worker-2" path="socket:[330868]" dev="sockfs" ino=330868 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236283.637:8433): avc: denied { search } for pid=94580 comm="conmon" name="journal" dev="tmpfs" ino=16735 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236263.681:8326): avc: denied { dac_read_search } for pid=79931 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236243.636:8171): avc: denied { search } for pid=94580 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236263.636:8324): avc: denied { read } for pid=94580 comm="conmon" path="pipe:[339028]" dev="pipefs" ino=339028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236283.089:8399): avc: denied { getattr } for pid=92897 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236282.657:8391): avc: denied { getattr } for pid=75230 comm="safe_timer" name="os-release" dev="sda1" ino=1841422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236258.981:8301): avc: denied { getattr } for pid=75230 comm="mgr-fin" path="/usr/share/ceph/mgr" dev="sda1" ino=2230888 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236263.636:8325): avc: denied { write } for pid=94580 comm="conmon" name="socket" dev="tmpfs" ino=16739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236281.975:8365): avc: denied { read } for pid=75230 comm="msgr-worker-1" path="pipe:[285255]" dev="pipefs" ino=285255 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236282.356:8369): avc: denied { write } for pid=90794 comm="msgr-worker-2" laddr=172.21.15.120 lport=6830 faddr=172.21.15.178 fport=34182 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236250.496:8247): avc: denied { search } for pid=83205 comm="log" name="/" dev="overlay" ino=2621802 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c605,c629 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236253.090:8276): avc: denied { read } for pid=92897 comm="node_exporter" name="physical_package_id" dev="sysfs" ino=28908 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236253.090:8276): avc: denied { open } for pid=92897 comm="node_exporter" path="/sys/devices/system/cpu/cpu0/topology/physical_package_id" dev="sysfs" ino=28908 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236263.091:8322): avc: denied { search } for pid=92897 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236282.356:8374): avc: denied { search } for pid=83205 comm="log" name="/" dev="overlay" ino=2621802 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c605,c629 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236282.356:8372): avc: denied { write } for pid=88288 comm="log" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236246.660:8228): avc: denied { create } for pid=94603 comm="alertmanager" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236251.152:8261): avc: denied { search } for pid=88288 comm="log" name="/" dev="overlay" ino=2621844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c212,c358 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236282.356:8374): avc: denied { search } for pid=83205 comm="log" name="journal" dev="tmpfs" ino=16735 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236282.356:8373): avc: denied { search } for pid=90794 comm="log" name="/" dev="overlay" ino=2621865 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c324,c948 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236243.376:8161): avc: denied { search } for pid=90794 comm="log" name="/" dev="overlay" ino=2621865 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c324,c948 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236282.356:8378): avc: denied { append } for pid=90794 comm="log" path="/var/log/ceph/ceph-osd.3.log" dev="sda1" ino=396174 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236253.090:8270): avc: denied { read } for pid=92897 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236243.368:8160): avc: denied { search } for pid=83205 comm="log" name="run" dev="sda1" ino=2621808 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c605,c629 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236283.432:8426): avc: denied { create } for pid=94603 comm="alertmanager" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236250.515:8254): avc: denied { search } for pid=85732 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236247.757:8235): avc: denied { read } for pid=78007 comm="msgr-worker-0" path="socket:[301082]" dev="sockfs" ino=301082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236253.090:8275): avc: denied { open } for pid=92897 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=30846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236261.017:8305): avc: denied { name_connect } for pid=94603 comm="alertmanager" dest=8443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:http_port_t:s0 tclass=tcp_socket permissive=1', 'type=AVC msg=audit(1624236243.636:8172): avc: denied { sendto } for pid=94580 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236261.203:8313): avc: denied { append } for pid=88288 comm="log" path="/var/log/ceph/ceph-osd.2.log" dev="sda1" ino=396172 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236279.600:8361): avc: denied { search } for pid=75230 comm="mgr-fin" name="usr" dev="sda1" ino=1839380 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236246.660:8233): avc: denied { write } for pid=94603 comm="alertmanager" path="socket:[395556]" dev="sockfs" ino=395556 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236243.636:8172): avc: denied { write } for pid=94580 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236247.907:8240): avc: denied { search } for pid=90794 comm="log" name="run" dev="sda1" ino=2621871 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c324,c948 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236283.683:8445): avc: denied { read } for pid=79931 comm="safe_timer" name="store.db" dev="dm-4" ino=16797836 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236282.657:8391): avc: denied { open } for pid=75230 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=1841422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236283.090:8407): avc: denied { search } for pid=92897 comm="node_exporter" name="fs" dev="proc" ino=332367 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236243.680:8196): avc: denied { getattr } for pid=79931 comm="safe_timer" path="/var/lib/ceph/mon/ceph-c/store.db/LOCK" dev="dm-4" ino=16797840 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236253.090:8278): avc: denied { search } for pid=92897 comm="node_exporter" name="rpc" dev="proc" ino=4026532409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236246.660:8234): avc: denied { read } for pid=94603 comm="alertmanager" path="socket:[395556]" dev="sockfs" ino=395556 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236283.092:8417): avc: denied { open } for pid=92897 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=331576 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236277.655:8332): avc: denied { read } for pid=83205 comm="msgr-worker-0" path="socket:[330871]" dev="sockfs" ino=330871 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236250.515:8254): avc: denied { read } for pid=85732 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236250.503:8249): avc: denied { open } for pid=114775 comm="pgrep" path="/proc/75207/status" dev="proc" ino=284852 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236279.364:8360): avc: denied { search } for pid=83205 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236283.637:8430): avc: denied { use } for pid=94603 comm="alertmanager" path="pipe:[339028]" dev="pipefs" ino=339028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236253.094:8288): avc: denied { search } for pid=92897 comm="node_exporter" name="user" dev="tmpfs" ino=15229 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236243.638:8189): avc: denied { search } for pid=75230 comm="dashboard" name="usr" dev="sda1" ino=1839380 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236246.428:8225): avc: denied { open } for pid=75230 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=22026 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236283.637:8432): avc: denied { write } for pid=94580 comm="conmon" name="null" dev="devtmpfs" ino=12290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236243.638:8189): avc: denied { getattr } for pid=75230 comm="dashboard" path="/usr/lib/python3.6/site-packages/cheroot/connections.py" dev="overlay" ino=1968794 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c21,c837 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236278.682:8348): avc: denied { getattr } for pid=79931 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236282.374:8384): avc: denied { read } for pid=88288 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236283.090:8412): avc: denied { open } for pid=92897 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236243.317:8151): avc: denied { write } for pid=88288 comm="log" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236243.636:8180): avc: denied { name_connect } for pid=94603 comm="alertmanager" dest=8443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:http_port_t:s0 tclass=tcp_socket permissive=1', 'type=AVC msg=audit(1624236243.636:8172): avc: denied { search } for pid=94580 comm="conmon" name="journal" dev="tmpfs" ino=16735 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236280.645:8363): avc: denied { open } for pid=75230 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=1841422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c21,c837 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236279.304:8358): avc: denied { search } for pid=88288 comm="log" name="/" dev="overlay" ino=2621844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c212,c358 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236251.152:8261): avc: denied { search } for pid=88288 comm="log" name="run" dev="sda1" ino=2621850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c212,c358 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236253.089:8265): avc: denied { search } for pid=92897 comm="node_exporter" name="/" dev="overlay" ino=2621886 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c53,c483 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236243.680:8194): avc: denied { read } for pid=79931 comm="safe_timer" name="store.db" dev="dm-4" ino=16797836 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236245.944:8219): avc: denied { search } for pid=88288 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236253.094:8289): avc: denied { search } for pid=92897 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236277.928:8340): avc: denied { getopt } for pid=75230 comm="dashboard" laddr=172.21.15.120 lport=8443 faddr=172.21.15.120 fport=55190 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236282.356:8373): avc: denied { search } for pid=90794 comm="log" name="diff" dev="sda1" ino=2621865 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236253.090:8277): avc: denied { getattr } for pid=92897 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/hwmon/hwmon0/uevent" dev="sysfs" ino=35585 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236279.600:8361): avc: denied { getattr } for pid=75230 comm="mgr-fin" path="/usr/share/zoneinfo/UTC" dev="overlay" ino=2490798 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c21,c837 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236279.301:8357): avc: denied { search } for pid=85732 comm="log" name="run" dev="sda1" ino=2621829 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c90,c745 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236243.636:8171): avc: denied { open } for pid=94580 comm="conmon" path="/dev/null" dev="devtmpfs" ino=12290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236283.638:8441): avc: denied { write } for pid=94603 comm="alertmanager" path="socket:[405824]" dev="sockfs" ino=405824 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236293.313:8449): avc: denied { shutdown } for pid=75230 comm="msgr-worker-1" laddr=172.21.15.120 lport=48848 faddr=172.21.15.178 fport=6824 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236243.636:8172): avc: denied { write } for pid=94580 comm="conmon" name="socket" dev="tmpfs" ino=16739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236278.085:8343): avc: denied { search } for pid=90794 comm="log" name="/" dev="overlay" ino=2621865 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c324,c948 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236282.657:8391): avc: denied { read } for pid=75230 comm="safe_timer" name="os-release" dev="sda1" ino=1839227 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236283.089:8400): avc: denied { getattr } for pid=92897 comm="node_exporter" path="/proc/7" dev="proc" ino=332938 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236283.637:8433): avc: denied { write } for pid=94580 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236253.089:8268): avc: denied { read } for pid=92897 comm="node_exporter" name="fd" dev="proc" ino=331567 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236282.657:8391): avc: denied { read } for pid=75230 comm="safe_timer" name="os-release" dev="overlay" ino=1841422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c21,c837 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236243.761:8198): avc: denied { write } for pid=78007 comm="safe_timer" path="/var/lib/ceph/mon/ceph-a/store.db/000181.log" dev="dm-4" ino=16797838 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236253.090:8272): avc: denied { read } for pid=92897 comm="node_exporter" name="xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236283.090:8407): avc: denied { open } for pid=92897 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=332368 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236278.399:8344): avc: denied { search } for pid=90794 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236283.092:8417): avc: denied { read } for pid=92897 comm="node_exporter" name="mounts" dev="proc" ino=331576 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236261.552:8316): avc: denied { getattr } for pid=78007 comm="safe_timer" path="/var/lib/ceph/mon/ceph-a/store.db" dev="dm-4" ino=16797828 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236277.928:8341): avc: denied { getattr } for pid=75230 comm="dashboard" laddr=172.21.15.120 lport=8443 faddr=172.21.15.120 fport=55190 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236246.660:8230): avc: denied { connect } for pid=94603 comm="alertmanager" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236293.313:8448): avc: denied { name_connect } for pid=75230 comm="msgr-worker-1" dest=6824 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unreserved_port_t:s0 tclass=tcp_socket permissive=1', 'type=AVC msg=audit(1624236243.637:8182): avc: denied { getopt } for pid=94603 comm="alertmanager" laddr=172.21.15.120 lport=42434 faddr=172.21.15.178 fport=8443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236243.384:8163): avc: denied { read } for pid=79931 comm="msgr-worker-2" path="pipe:[294271]" dev="pipefs" ino=294271 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236245.970:8221): avc: denied { search } for pid=75230 comm="log" name="/" dev="overlay" ino=1841961 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c21,c837 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236253.636:8294): avc: denied { open } for pid=94580 comm="conmon" path="/dev/null" dev="devtmpfs" ino=12290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236253.092:8282): avc: denied { read } for pid=92897 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236283.683:8447): avc: denied { getattr } for pid=79931 comm="safe_timer" path="/var/lib/ceph/mon/ceph-c/store.db/LOCK" dev="dm-4" ino=16797840 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236253.636:8294): avc: denied { search } for pid=94580 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236245.971:8222): avc: denied { search } for pid=78007 comm="log" name="/" dev="overlay" ino=2621755 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c123,c908 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236283.093:8423): avc: denied { search } for pid=92897 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236253.089:8267): avc: denied { open } for pid=92897 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=331566 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236279.362:8359): avc: denied { search } for pid=83205 comm="log" name="run" dev="sda1" ino=2621808 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c605,c629 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236282.356:8376): avc: denied { append } for pid=83205 comm="log" path="/var/log/ceph/ceph-osd.0.log" dev="sda1" ino=396168 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236243.637:8188): avc: denied { read } for pid=94603 comm="alertmanager" path="socket:[394119]" dev="sockfs" ino=394119 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236250.515:8254): avc: denied { open } for pid=85732 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236243.415:8168): avc: denied { search } for pid=85732 comm="log" name="/" dev="overlay" ino=2621823 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c90,c745 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236261.203:8312): avc: denied { search } for pid=88288 comm="log" name="journal" dev="tmpfs" ino=16735 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236250.515:8253): avc: denied { search } for pid=85732 comm="safe_timer" name="diff" dev="sda1" ino=2621823 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236253.091:8279): avc: denied { open } for pid=92897 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=332371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236283.637:8432): avc: denied { search } for pid=94580 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236246.428:8226): avc: denied { getattr } for pid=75230 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=22026 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236248.680:8243): avc: denied { getattr } for pid=79931 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236250.503:8249): avc: denied { read } for pid=114775 comm="pgrep" name="status" dev="proc" ino=284852 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236282.374:8384): avc: denied { open } for pid=88288 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236243.317:8152): avc: denied { search } for pid=88288 comm="safe_timer" name="/" dev="overlay" ino=2621844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c212,c358 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236282.657:8393): avc: denied { write } for pid=75230 comm="safe_timer" path="pipe:[285255]" dev="pipefs" ino=285255 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236283.090:8412): avc: denied { read } for pid=92897 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236283.093:8422): avc: denied { search } for pid=92897 comm="node_exporter" name="user" dev="tmpfs" ino=15229 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236282.817:8397): avc: denied { write } for pid=78007 comm="safe_timer" path="/var/lib/ceph/mon/ceph-a/store.db/000181.log" dev="dm-4" ino=16797838 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236283.683:8444): avc: denied { dac_read_search } for pid=79931 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236261.203:8312): avc: denied { write } for pid=88288 comm="log" name="socket" dev="tmpfs" ino=16739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236277.762:8336): avc: denied { search } for pid=79931 comm="log" name="/" dev="overlay" ino=2621781 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c732,c854 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236250.503:8249): avc: denied { search } for pid=114775 comm="pgrep" name="75207" dev="proc" ino=279159 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236253.089:8267): avc: denied { read } for pid=92897 comm="node_exporter" name="stat" dev="proc" ino=331566 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236253.090:8270): avc: denied { read } for pid=92897 comm="node_exporter" name="sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236283.683:8445): avc: denied { open } for pid=79931 comm="safe_timer" path="/var/lib/ceph/mon/ceph-c/store.db" dev="dm-4" ino=16797836 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236277.343:8327): avc: denied { search } for pid=78007 comm="log" name="run" dev="sda1" ino=2621761 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c123,c908 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236283.092:8417): avc: denied { search } for pid=92897 comm="node_exporter" name="1" dev="proc" ino=332919 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236282.356:8367): avc: denied { read } for pid=85732 comm="msgr-worker-2" path="socket:[325468]" dev="sockfs" ino=325468 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236243.636:8181): avc: denied { name_connect } for pid=94603 comm="alertmanager" dest=8443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:http_port_t:s0 tclass=tcp_socket permissive=1', 'type=AVC msg=audit(1624236246.441:8227): avc: denied { read } for pid=75230 comm="safe_timer" name="os-release" dev="overlay" ino=1839227 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c21,c837 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236250.503:8251): avc: denied { search } for pid=114775 comm="pgrep" name="75230" dev="proc" ino=288393 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236247.907:8240): avc: denied { search } for pid=90794 comm="log" name="/" dev="overlay" ino=2621865 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c324,c948 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236243.757:8197): avc: denied { search } for pid=78007 comm="log" name="run" dev="sda1" ino=2621761 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c123,c908 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236250.503:8250): avc: denied { getattr } for pid=114775 comm="pgrep" path="/proc/75230" dev="proc" ino=288393 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236253.636:8294): avc: denied { search } for pid=94580 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236253.090:8275): avc: denied { read } for pid=92897 comm="node_exporter" name="cpuinfo_max_freq" dev="sysfs" ino=30846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236279.364:8360): avc: denied { read } for pid=83205 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236251.177:8262): avc: denied { getattr } for pid=75230 comm="dashboard" path="/usr/lib/python3.6/site-packages/cheroot/connections.py" dev="overlay" ino=1968794 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c21,c837 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236253.091:8279): avc: denied { read } for pid=92897 comm="node_exporter" name="entropy_avail" dev="proc" ino=332371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236282.762:8396): avc: denied { search } for pid=79931 comm="log" name="run" dev="sda1" ino=2621787 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c732,c854 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236283.638:8439): avc: denied { accept } for pid=75230 comm="dashboard" laddr=172.21.15.120 lport=8443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236244.416:8199): avc: denied { search } for pid=75230 comm="safe_timer" name="container" dev="cgroup" ino=22019 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236243.376:8161): avc: denied { search } for pid=90794 comm="log" name="run" dev="sda1" ino=2621871 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c324,c948 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236282.645:8388): avc: denied { search } for pid=75230 comm="log" name="run" dev="sda1" ino=2103193 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c21,c837 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236243.680:8193): avc: denied { getattr } for pid=79931 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236243.415:8168): avc: denied { search } for pid=85732 comm="log" name="run" dev="sda1" ino=2621829 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c90,c745 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236283.093:8421): avc: denied { search } for pid=92897 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236282.356:8373): avc: denied { write } for pid=90794 comm="log" name="socket" dev="tmpfs" ino=16739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236243.637:8187): avc: denied { getattr } for pid=75230 comm="dashboard" laddr=172.21.15.120 lport=8443 faddr=172.21.15.120 fport=55034 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236282.356:8372): avc: denied { search } for pid=88288 comm="log" name="/" dev="overlay" ino=2621844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c212,c358 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236262.537:8319): avc: denied { read } for pid=75230 comm="safe_timer" name="os-release" dev="sda1" ino=1841422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236243.317:8153): avc: denied { search } for pid=88288 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236282.356:8372): avc: denied { sendto } for pid=88288 comm="log" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236250.515:8252): avc: denied { search } for pid=85732 comm="log" name="/" dev="overlay" ino=2621823 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c90,c745 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236282.762:8396): avc: denied { search } for pid=79931 comm="log" name="/" dev="overlay" ino=2621781 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c732,c854 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236282.657:8395): avc: denied { search } for pid=78007 comm="log" name="run" dev="sda1" ino=2621761 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c123,c908 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236243.636:8180): avc: denied { connect } for pid=94603 comm="alertmanager" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236243.317:8151): avc: denied { search } for pid=88288 comm="log" name="/" dev="overlay" ino=2621844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c212,c358 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236243.680:8195): avc: denied { getattr } for pid=79931 comm="safe_timer" path="/var/lib/ceph/mon/ceph-c/store.db" dev="dm-4" ino=16797836 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236253.091:8280): avc: denied { getattr } for pid=92897 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=332371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236243.384:8164): avc: denied { search } for pid=79931 comm="log" name="run" dev="sda1" ino=2621787 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c732,c854 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236283.090:8408): avc: denied { getattr } for pid=92897 comm="node_exporter" path="/sys/class/net/eno1" dev="sysfs" ino=35389 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236280.633:8362): avc: denied { search } for pid=75230 comm="safe_timer" name="container" dev="cgroup" ino=22019 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236279.364:8360): avc: denied { open } for pid=83205 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236253.094:8291): avc: denied { search } for pid=92897 comm="node_exporter" name="host" dev="sda1" ino=2621895 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c53,c483 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236248.869:8244): avc: denied { accept } for pid=75230 comm="dashboard" laddr=172.21.15.120 lport=8443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236243.384:8167): avc: denied { search } for pid=75230 comm="log" name="/" dev="overlay" ino=1841961 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c21,c837 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236283.090:8411): avc: denied { read } for pid=92897 comm="node_exporter" name="addr_assign_type" dev="sysfs" ino=35397 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236253.092:8283): avc: denied { open } for pid=92897 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=332368 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236248.311:8241): avc: denied { name_connect } for pid=75230 comm="msgr-worker-1" dest=6824 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unreserved_port_t:s0 tclass=tcp_socket permissive=1', 'type=AVC msg=audit(1624236283.089:8401): avc: denied { read } for pid=92897 comm="node_exporter" name="stat" dev="proc" ino=331566 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236282.356:8372): avc: denied { search } for pid=88288 comm="log" name="run" dev="sda1" ino=2621850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c212,c358 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236250.503:8251): avc: denied { open } for pid=114775 comm="pgrep" path="/proc/75230/status" dev="proc" ino=288397 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236261.552:8315): avc: denied { read } for pid=78007 comm="safe_timer" name="store.db" dev="dm-4" ino=16797828 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236243.317:8152): avc: denied { search } for pid=88288 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236243.637:8184): avc: denied { getattr } for pid=94603 comm="alertmanager" laddr=172.21.15.120 lport=55034 faddr=172.21.15.120 fport=8443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236282.356:8377): avc: denied { append } for pid=88288 comm="log" path="/var/log/ceph/ceph-osd.2.log" dev="sda1" ino=396172 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236279.304:8358): avc: denied { search } for pid=88288 comm="log" name="run" dev="sda1" ino=2621850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c212,c358 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236277.446:8328): avc: denied { write } for pid=85732 comm="log" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236283.683:8446): avc: denied { getattr } for pid=79931 comm="safe_timer" path="/var/lib/ceph/mon/ceph-c/store.db" dev="dm-4" ino=16797836 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236282.374:8383): avc: denied { search } for pid=88288 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236246.238:8223): avc: denied { search } for pid=79931 comm="log" name="run" dev="sda1" ino=2621787 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c732,c854 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236282.356:8375): avc: denied { search } for pid=85732 comm="log" name="/" dev="overlay" ino=2621823 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c90,c745 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236259.168:8304): avc: denied { read } for pid=75230 comm="mgr-fin" name="lib" dev="sda1" ino=660568 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236253.089:8269): avc: denied { search } for pid=92897 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236278.498:8345): avc: denied { open } for pid=90794 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236246.660:8232): avc: denied { getattr } for pid=94603 comm="alertmanager" laddr=172.21.15.120 lport=55046 faddr=172.21.15.120 fport=8443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236277.762:8336): avc: denied { search } for pid=79931 comm="log" name="run" dev="sda1" ino=2621787 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c732,c854 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236243.317:8153): avc: denied { read } for pid=88288 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236278.621:8347): avc: denied { getattr } for pid=75230 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=22026 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236283.637:8431): avc: denied { read } for pid=94580 comm="conmon" path="pipe:[339028]" dev="pipefs" ino=339028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236243.368:8160): avc: denied { search } for pid=83205 comm="log" name="/" dev="overlay" ino=2621802 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c605,c629 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236282.645:8388): avc: denied { search } for pid=75230 comm="log" name="/" dev="overlay" ino=1841961 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c21,c837 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236243.384:8162): avc: denied { write } for pid=79931 comm="safe_timer" path="pipe:[294271]" dev="pipefs" ino=294271 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236277.656:8333): avc: denied { write } for pid=88288 comm="msgr-worker-2" laddr=172.21.15.120 lport=6824 faddr=172.21.15.178 fport=50592 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236282.356:8372): avc: denied { search } for pid=88288 comm="log" name="diff" dev="sda1" ino=2621844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236261.552:8315): avc: denied { search } for pid=78007 comm="safe_timer" name="mon.a" dev="dm-4" ino=8388740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236243.317:8151): avc: denied { sendto } for pid=88288 comm="log" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236252.477:8264): avc: denied { read } for pid=75230 comm="safe_timer" name="os-release" dev="overlay" ino=1841422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c21,c837 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236282.356:8370): avc: denied { write } for pid=83205 comm="msgr-worker-2" laddr=172.21.15.120 lport=6806 faddr=172.21.15.178 fport=44168 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236243.637:8186): avc: denied { write } for pid=94603 comm="alertmanager" path="socket:[394119]" dev="sockfs" ino=394119 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236253.636:8295): avc: denied { write } for pid=94580 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236243.636:8171): avc: denied { write } for pid=94580 comm="conmon" name="null" dev="devtmpfs" ino=12290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236282.657:8391): avc: denied { read } for pid=75230 comm="safe_timer" name="os-release" dev="overlay" ino=1839227 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c21,c837 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236283.093:8419): avc: denied { getattr } for pid=92897 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236278.498:8345): avc: denied { read } for pid=90794 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236243.680:8193): avc: denied { dac_read_search } for pid=79931 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236282.657:8394): avc: denied { read } for pid=75230 comm="msgr-worker-1" path="pipe:[285255]" dev="pipefs" ino=285255 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236253.089:8267): avc: denied { search } for pid=92897 comm="node_exporter" name="7" dev="proc" ino=332938 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236283.093:8420): avc: denied { search } for pid=92897 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236278.621:8346): avc: denied { read } for pid=75230 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=22026 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236283.089:8401): avc: denied { search } for pid=92897 comm="node_exporter" name="7" dev="proc" ino=332938 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236283.090:8406): avc: denied { open } for pid=92897 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236283.637:8430): avc: denied { write } for pid=94603 comm="alertmanager" path="pipe:[339028]" dev="pipefs" ino=339028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236253.636:8293): avc: denied { use } for pid=94603 comm="alertmanager" path="pipe:[339028]" dev="pipefs" ino=339028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236262.537:8319): avc: denied { open } for pid=75230 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=1841422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236282.356:8374): avc: denied { write } for pid=83205 comm="log" name="socket" dev="tmpfs" ino=16739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236283.637:8433): avc: denied { search } for pid=94580 comm="conmon" name="systemd" dev="tmpfs" ino=16460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236282.356:8368): avc: denied { read } for pid=85732 comm="msgr-worker-1" path="socket:[325465]" dev="sockfs" ino=325465 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236279.362:8359): avc: denied { search } for pid=83205 comm="log" name="/" dev="overlay" ino=2621802 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c605,c629 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236283.638:8438): avc: denied { getattr } for pid=94603 comm="alertmanager" laddr=172.21.15.120 lport=55202 faddr=172.21.15.120 fport=8443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236283.090:8406): avc: denied { read } for pid=92897 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236283.089:8402): avc: denied { open } for pid=92897 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=331567 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236282.645:8389): avc: denied { read } for pid=75230 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=22026 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236283.637:8433): avc: denied { search } for pid=94580 comm="conmon" name="/" dev="tmpfs" ino=16451 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236283.090:8407): avc: denied { search } for pid=92897 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236283.093:8423): avc: denied { search } for pid=92897 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236253.090:8271): avc: denied { getattr } for pid=92897 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236282.645:8390): avc: denied { getattr } for pid=75230 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=22026 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236243.636:8170): avc: denied { read } for pid=94580 comm="conmon" path="pipe:[339028]" dev="pipefs" ino=339028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236243.680:8194): avc: denied { search } for pid=79931 comm="safe_timer" name="mon.c" dev="dm-4" ino=8388751 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236253.094:8287): avc: denied { search } for pid=92897 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236282.356:8374): avc: denied { search } for pid=83205 comm="log" name="run" dev="sda1" ino=2621808 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c605,c629 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236250.515:8252): avc: denied { search } for pid=85732 comm="log" name="diff" dev="sda1" ino=2621823 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1624236263.091:8322): avc: denied { search } for pid=92897 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236243.317:8151): avc: denied { search } for pid=88288 comm="log" name="journal" dev="tmpfs" ino=16735 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236253.090:8272): avc: denied { open } for pid=92897 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1624236246.660:8229): avc: denied { setopt } for pid=94603 comm="alertmanager" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"']