Status Job ID Links Posted Started Updated
Runtime
Duration
In Waiting
Machine Teuthology Branch OS Type OS Version Description Nodes
pass 5976693 2021-03-18 10:15:07 2021-03-18 10:15:16 2021-03-18 10:39:39 0:24:23 0:09:18 0:15:05 smithi master ubuntu 18.04 rados/thrash-erasure-code-big/{ceph cluster/{12-osds openstack} mon_election/connectivity msgr-failures/few objectstore/bluestore-hybrid rados recovery-overrides/{more-partial-recovery} supported-random-distro$/{ubuntu_latest} thrashers/careful thrashosds-health workloads/ec-rados-plugin=lrc-k=4-m=2-l=3} 3
pass 5976694 2021-03-18 10:15:08 2021-03-18 10:17:26 2021-03-18 10:38:55 0:21:29 0:10:38 0:10:51 smithi master centos 8.3 rados/verify/{centos_latest ceph clusters/{fixed-2 openstack} d-thrash/none mon_election/connectivity msgr-failures/few msgr/async objectstore/bluestore-hybrid rados tasks/mon_recovery validater/lockdep} 2
pass 5976695 2021-03-18 10:15:09 2021-03-18 10:17:47 2021-03-18 10:46:51 0:29:04 0:23:38 0:05:26 smithi master rhel 8.3 rados/thrash-erasure-code-overwrites/{bluestore-bitmap ceph clusters/{fixed-2 openstack} fast/normal mon_election/connectivity msgr-failures/osd-delay rados recovery-overrides/{more-partial-recovery} supported-random-distro$/{rhel_8} thrashers/minsize_recovery thrashosds-health workloads/ec-small-objects-overwrites} 2
pass 5976696 2021-03-18 10:15:09 2021-03-18 10:17:57 2021-03-18 11:04:49 0:46:52 0:40:14 0:06:38 smithi master rhel 8.3 rados/cephadm/smoke/{distro/rhel_8.3_kubic_stable fixed-2 mon_election/classic start} 2
pass 5976697 2021-03-18 10:15:10 2021-03-18 10:18:07 2021-03-18 10:49:36 0:31:29 0:21:33 0:09:56 smithi master centos 8.3 rados/thrash-erasure-code-isa/{arch/x86_64 ceph clusters/{fixed-2 openstack} mon_election/connectivity msgr-failures/osd-delay objectstore/bluestore-low-osd-mem-target rados recovery-overrides/{more-active-recovery} supported-random-distro$/{centos_8} thrashers/none thrashosds-health workloads/ec-rados-plugin=isa-k=2-m=1} 2
pass 5976698 2021-03-18 10:15:11 2021-03-18 10:18:37 2021-03-18 10:38:27 0:19:50 0:10:42 0:09:08 smithi master ubuntu 18.04 rados/perf/{ceph mon_election/classic objectstore/bluestore-low-osd-mem-target openstack scheduler/dmclock_1Shard_16Threads settings/optimized ubuntu_18.04 workloads/fio_4K_rand_read} 1
pass 5976699 2021-03-18 10:15:12 2021-03-18 10:19:38 2021-03-18 11:05:33 0:45:55 0:35:18 0:10:37 smithi master ubuntu 20.04 rados/cephadm/with-work/{0-distro/ubuntu_20.04_kubic_stable fixed-2 mode/root mon_election/classic msgr/async-v2only start tasks/rados_api_tests} 2
pass 5976700 2021-03-18 10:15:13 2021-03-18 10:19:48 2021-03-18 10:53:13 0:33:25 0:23:04 0:10:21 smithi master ubuntu 18.04 rados/thrash/{0-size-min-size-overrides/3-size-2-min-size 1-pg-log-overrides/short_pg_log 2-recovery-overrides/{default} backoff/peering ceph clusters/{fixed-2 openstack} crc-failures/default d-balancer/on mon_election/connectivity msgr-failures/fastclose msgr/async objectstore/bluestore-comp-zlib rados supported-random-distro$/{ubuntu_latest} thrashers/mapgap thrashosds-health workloads/rados_api_tests} 2
pass 5976701 2021-03-18 10:15:14 2021-03-18 10:19:48 2021-03-18 10:52:56 0:33:08 0:26:30 0:06:38 smithi master rhel 8.3 rados/singleton-nomsgr/{all/multi-backfill-reject mon_election/connectivity rados supported-random-distro$/{rhel_8}} 2
dead 5976702 2021-03-18 10:15:15 2021-03-18 10:19:49 2021-03-18 11:04:32 0:44:43 smithi master ubuntu 18.04 rados/thrash-old-clients/{0-size-min-size-overrides/2-size-2-min-size 1-install/mimic backoff/peering_and_degraded ceph clusters/{openstack three-plus-one} d-balancer/on distro$/{ubuntu_18.04} mon_election/connectivity msgr-failures/few rados thrashers/none thrashosds-health workloads/snaps-few-objects} 3
fail 5976703 2021-03-18 10:15:16 2021-03-18 10:21:19 2021-03-18 10:47:17 0:25:58 0:12:40 0:13:18 smithi master ubuntu 20.04 rados/cephadm/dashboard/{0-distro/ubuntu_20.04_kubic_testing task/test_e2e} 2
Failure Reason:

Command failed (workunit test cephadm/create_iscsi_disks.sh) on smithi160 with status 1: 'mkdir -p -- /home/ubuntu/cephtest/mnt.1/client.1/tmp && cd -- /home/ubuntu/cephtest/mnt.1/client.1/tmp && CEPH_CLI_TEST_DUP_COMMAND=1 CEPH_REF=88df47230b5ad85e95b0be2eca6f5763914b175c TESTDIR="/home/ubuntu/cephtest" CEPH_ARGS="--cluster ceph" CEPH_ID="1" PATH=$PATH:/usr/sbin CEPH_BASE=/home/ubuntu/cephtest/clone.client.1 CEPH_ROOT=/home/ubuntu/cephtest/clone.client.1 adjust-ulimits ceph-coverage /home/ubuntu/cephtest/archive/coverage timeout 3h /home/ubuntu/cephtest/clone.client.1/qa/workunits/cephadm/create_iscsi_disks.sh'

pass 5976704 2021-03-18 10:15:17 2021-03-18 10:23:50 2021-03-18 10:47:32 0:23:42 0:17:24 0:06:18 smithi master rhel 8.3 rados/singleton/{all/rebuild-mondb mon_election/connectivity msgr-failures/few msgr/async-v1only objectstore/bluestore-comp-lz4 rados supported-random-distro$/{rhel_8}} 1
pass 5976705 2021-03-18 10:15:18 2021-03-18 10:24:40 2021-03-18 13:46:44 3:22:04 3:11:56 0:10:08 smithi master centos 8.3 rados/standalone/{mon_election/classic supported-random-distro$/{centos_8} workloads/osd} 1
pass 5976706 2021-03-18 10:15:19 2021-03-18 10:25:10 2021-03-18 10:46:28 0:21:18 0:09:04 0:12:14 smithi master ubuntu 18.04 rados/multimon/{clusters/6 mon_election/classic msgr-failures/many msgr/async-v1only no_pools objectstore/bluestore-comp-zstd rados supported-random-distro$/{ubuntu_latest} tasks/mon_recovery} 2
pass 5976707 2021-03-18 10:15:20 2021-03-18 10:26:41 2021-03-18 10:53:03 0:26:22 0:15:24 0:10:58 smithi master ubuntu 18.04 rados/cephadm/smoke/{distro/ubuntu_18.04 fixed-2 mon_election/connectivity start} 2
pass 5976708 2021-03-18 10:15:21 2021-03-18 10:27:21 2021-03-18 11:06:45 0:39:24 0:29:08 0:10:16 smithi master centos 8.3 rados/singleton-bluestore/{all/cephtool mon_election/connectivity msgr-failures/none msgr/async objectstore/bluestore-comp-lz4 rados supported-random-distro$/{centos_8}} 1
pass 5976709 2021-03-18 10:15:21 2021-03-18 10:27:22 2021-03-18 11:02:35 0:35:13 0:25:14 0:09:59 smithi master centos 8.3 rados/basic/{ceph clusters/{fixed-2 openstack} mon_election/connectivity msgr-failures/many msgr/async-v2only objectstore/bluestore-comp-snappy rados supported-random-distro$/{centos_8} tasks/rados_api_tests} 2
pass 5976710 2021-03-18 10:15:22 2021-03-18 10:27:52 2021-03-18 11:29:38 1:01:46 0:54:16 0:07:30 smithi master rhel 8.3 rados/thrash/{0-size-min-size-overrides/2-size-2-min-size 1-pg-log-overrides/normal_pg_log 2-recovery-overrides/{more-async-partial-recovery} backoff/peering_and_degraded ceph clusters/{fixed-2 openstack} crc-failures/bad_map_crc_failure d-balancer/crush-compat mon_election/classic msgr-failures/few msgr/async-v1only objectstore/bluestore-comp-zstd rados supported-random-distro$/{rhel_8} thrashers/morepggrow thrashosds-health workloads/radosbench-high-concurrency} 2
pass 5976711 2021-03-18 10:15:23 2021-03-18 10:28:42 2021-03-18 11:02:06 0:33:24 0:20:13 0:13:11 smithi master ubuntu 20.04 rados/cephadm/smoke-roleless/{1-start 2-services/{basic rgw} 3-final distro/ubuntu_20.04_kubic_stable} 2
pass 5976712 2021-03-18 10:15:24 2021-03-18 10:30:43 2021-03-18 10:56:04 0:25:21 0:16:04 0:09:17 smithi master ubuntu 18.04 rados/singleton-nomsgr/{all/osd_stale_reads mon_election/classic rados supported-random-distro$/{ubuntu_latest}} 1
fail 5976713 2021-03-18 10:15:25 2021-03-18 10:30:53 2021-03-18 10:59:30 0:28:37 0:20:05 0:08:32 smithi master ubuntu 18.04 rados/singleton/{all/recovery-preemption mon_election/classic msgr-failures/many msgr/async-v2only objectstore/bluestore-comp-snappy rados supported-random-distro$/{ubuntu_latest}} 1
Failure Reason:

Command failed on smithi045 with status 1: 'sudo TESTDIR=/home/ubuntu/cephtest bash -c \'egrep \'"\'"\'(defer backfill|defer recovery)\'"\'"\' /var/log/ceph/ceph-osd.*.log\''

pass 5976714 2021-03-18 10:15:26 2021-03-18 10:30:54 2021-03-18 16:10:33 5:39:39 4:57:26 0:42:13 smithi master centos 8.3 rados/objectstore/{backends/objectstore supported-random-distro$/{centos_8}} 1
pass 5976715 2021-03-18 10:15:27 2021-03-18 10:30:54 2021-03-18 11:16:48 0:45:54 0:35:34 0:10:20 smithi master ubuntu 20.04 rados/cephadm/thrash/{0-distro/ubuntu_20.04_kubic_stable 1-start 2-thrash 3-tasks/rados_api_tests fixed-2 msgr/async-v1only root} 2
pass 5976716 2021-03-18 10:15:28 2021-03-18 10:31:34 2021-03-18 10:54:12 0:22:38 0:10:29 0:12:09 smithi master centos 8.3 rados/thrash-erasure-code-shec/{ceph clusters/{fixed-4 openstack} mon_election/classic msgr-failures/few objectstore/bluestore-comp-lz4 rados recovery-overrides/{more-partial-recovery} supported-random-distro$/{centos_8} thrashers/default thrashosds-health workloads/ec-rados-plugin=shec-k=4-m=3-c=2} 4
pass 5976717 2021-03-18 10:15:29 2021-03-18 10:32:35 2021-03-18 10:57:56 0:25:21 0:19:21 0:06:00 smithi master rhel 8.3 rados/mgr/{clusters/{2-node-mgr} debug/mgr mon_election/connectivity objectstore/bluestore-hybrid supported-random-distro$/{rhel_8} tasks/progress} 2
pass 5976718 2021-03-18 10:15:30 2021-03-18 10:32:45 2021-03-18 11:02:10 0:29:25 0:20:21 0:09:04 smithi master ubuntu 20.04 rados/cephadm/workunits/{0-distro/ubuntu_20.04_kubic_testing mon_election/connectivity task/test_orch_cli} 1
pass 5976719 2021-03-18 10:15:31 2021-03-18 10:32:45 2021-03-18 10:54:05 0:21:20 0:12:01 0:09:19 smithi master ubuntu 18.04 rados/perf/{ceph mon_election/connectivity objectstore/bluestore-stupid openstack scheduler/dmclock_default_shards settings/optimized ubuntu_18.04 workloads/fio_4K_rand_rw} 1
pass 5976720 2021-03-18 10:15:32 2021-03-18 10:32:45 2021-03-18 12:50:21 2:17:36 2:06:36 0:11:00 smithi master ubuntu 18.04 rados/thrash/{0-size-min-size-overrides/3-size-2-min-size 1-pg-log-overrides/short_pg_log 2-recovery-overrides/{more-async-recovery} backoff/normal ceph clusters/{fixed-2 openstack} crc-failures/default d-balancer/on mon_election/connectivity msgr-failures/osd-delay msgr/async-v2only objectstore/bluestore-hybrid rados supported-random-distro$/{ubuntu_latest} thrashers/none thrashosds-health workloads/radosbench} 2
pass 5976721 2021-03-18 10:15:33 2021-03-18 10:32:46 2021-03-18 10:51:20 0:18:34 0:07:43 0:10:51 smithi master centos 8.3 rados/singleton-nomsgr/{all/pool-access mon_election/connectivity rados supported-random-distro$/{centos_8}} 1
pass 5976722 2021-03-18 10:15:34 2021-03-18 10:33:16 2021-03-18 10:52:34 0:19:18 0:11:45 0:07:33 smithi master rhel 8.3 rados/singleton/{all/resolve_stuck_peering mon_election/connectivity msgr-failures/none msgr/async objectstore/bluestore-comp-zlib rados supported-random-distro$/{rhel_8}} 2
pass 5976723 2021-03-18 10:15:34 2021-03-18 10:33:26 2021-03-18 11:00:04 0:26:38 0:15:38 0:11:00 smithi master ubuntu 20.04 rados/cephadm/smoke/{distro/ubuntu_20.04 fixed-2 mon_election/classic start} 2
pass 5976724 2021-03-18 10:15:35 2021-03-18 10:34:16 2021-03-18 11:12:45 0:38:29 0:25:48 0:12:41 smithi master ubuntu 20.04 rados/cephadm/upgrade/{1-start-distro/1-start-ubuntu_20.04 2-repo_digest/defaut 3-start-upgrade 4-wait mon_election/connectivity} 2
pass 5976725 2021-03-18 10:15:36 2021-03-18 10:34:37 2021-03-18 12:36:25 2:01:48 1:54:02 0:07:46 smithi master rhel 8.3 rados/standalone/{mon_election/connectivity supported-random-distro$/{rhel_8} workloads/scrub} 1
pass 5976726 2021-03-18 10:15:37 2021-03-18 10:47:30 2021-03-18 11:05:29 0:17:59 0:07:57 0:10:02 smithi master ubuntu 18.04 rados/monthrash/{ceph clusters/9-mons mon_election/classic msgr-failures/mon-delay msgr/async-v1only objectstore/bluestore-low-osd-mem-target rados supported-random-distro$/{ubuntu_latest} thrashers/one workloads/rados_5925} 2
pass 5976727 2021-03-18 10:15:38 2021-03-18 10:48:11 2021-03-18 11:19:30 0:31:19 0:24:15 0:07:04 smithi master rhel 8.3 rados/thrash-erasure-code/{ceph clusters/{fixed-2 openstack} fast/fast mon_election/connectivity msgr-failures/osd-delay objectstore/bluestore-low-osd-mem-target rados recovery-overrides/{more-async-recovery} supported-random-distro$/{rhel_8} thrashers/default thrashosds-health workloads/ec-small-objects} 2
pass 5976728 2021-03-18 10:15:39 2021-03-18 10:48:21 2021-03-18 11:27:14 0:38:53 0:26:16 0:12:37 smithi master ubuntu 18.04 rados/thrash-erasure-code-big/{ceph cluster/{12-osds openstack} mon_election/classic msgr-failures/osd-delay objectstore/bluestore-low-osd-mem-target rados recovery-overrides/{default} supported-random-distro$/{ubuntu_latest} thrashers/default thrashosds-health workloads/ec-rados-plugin=jerasure-k=4-m=2} 3
dead 5976729 2021-03-18 10:15:40 2021-03-18 10:49:41 2021-03-18 10:51:06 0:01:25 smithi master centos 8.3 rados/verify/{centos_latest ceph clusters/{fixed-2 openstack} d-thrash/default/{default thrashosds-health} mon_election/classic msgr-failures/few msgr/async-v1only objectstore/bluestore-low-osd-mem-target rados tasks/rados_api_tests validater/valgrind} 2
Failure Reason:

Error reimaging machines: Failed to power on smithi031

pass 5976730 2021-03-18 10:15:41 2021-03-18 10:49:42 2021-03-18 11:26:35 0:36:53 0:30:10 0:06:43 smithi master rhel 8.3 rados/thrash-erasure-code-isa/{arch/x86_64 ceph clusters/{fixed-2 openstack} mon_election/classic msgr-failures/fastclose objectstore/bluestore-stupid rados recovery-overrides/{more-async-partial-recovery} supported-random-distro$/{rhel_8} thrashers/pggrow thrashosds-health workloads/ec-rados-plugin=isa-k=2-m=1} 2
pass 5976731 2021-03-18 10:15:42 2021-03-18 10:49:42 2021-03-18 11:26:33 0:36:51 0:24:23 0:12:28 smithi master ubuntu 20.04 rados/cephadm/with-work/{0-distro/ubuntu_20.04_kubic_testing fixed-2 mode/packaged mon_election/connectivity msgr/async start tasks/rados_python} 2
pass 5976732 2021-03-18 10:15:43 2021-03-18 10:51:13 2021-03-18 11:09:41 0:18:28 0:09:52 0:08:36 smithi master centos 8.3 rados/singleton/{all/test-crash mon_election/classic msgr-failures/few msgr/async-v1only objectstore/bluestore-comp-zstd rados supported-random-distro$/{centos_8}} 1
pass 5976733 2021-03-18 10:15:44 2021-03-18 10:51:13 2021-03-18 11:13:55 0:22:42 0:14:27 0:08:15 smithi master rhel 8.3 rados/thrash/{0-size-min-size-overrides/2-size-2-min-size 1-pg-log-overrides/normal_pg_log 2-recovery-overrides/{more-active-recovery} backoff/peering ceph clusters/{fixed-2 openstack} crc-failures/bad_map_crc_failure d-balancer/crush-compat mon_election/classic msgr-failures/fastclose msgr/async objectstore/bluestore-low-osd-mem-target rados supported-random-distro$/{rhel_8} thrashers/pggrow thrashosds-health workloads/redirect} 2
pass 5976734 2021-03-18 10:15:45 2021-03-18 10:52:44 2021-03-18 11:30:57 0:38:13 0:30:14 0:07:59 smithi master rhel 8.3 rados/singleton-nomsgr/{all/recovery-unfound-found mon_election/classic rados supported-random-distro$/{rhel_8}} 1
pass 5976735 2021-03-18 10:15:46 2021-03-18 10:52:45 2021-03-18 11:20:52 0:28:07 0:16:12 0:11:55 smithi master ubuntu 20.04 rados/cephadm/smoke/{distro/ubuntu_20.04_kubic_stable fixed-2 mon_election/connectivity start} 2
pass 5976736 2021-03-18 10:15:47 2021-03-18 10:53:05 2021-03-18 11:28:41 0:35:36 0:24:44 0:10:52 smithi master ubuntu 18.04 rados/thrash-old-clients/{0-size-min-size-overrides/3-size-2-min-size 1-install/nautilus-v1only backoff/normal ceph clusters/{openstack three-plus-one} d-balancer/crush-compat distro$/{ubuntu_18.04} mon_election/classic msgr-failures/osd-delay rados thrashers/pggrow thrashosds-health workloads/test_rbd_api} 3
pass 5976737 2021-03-18 10:15:48 2021-03-18 10:53:16 2021-03-18 11:19:12 0:25:56 0:15:08 0:10:48 smithi master centos 8.3 rados/basic/{ceph clusters/{fixed-2 openstack} mon_election/classic msgr-failures/few msgr/async objectstore/bluestore-comp-zlib rados supported-random-distro$/{centos_8} tasks/rados_cls_all} 2
pass 5976738 2021-03-18 10:15:49 2021-03-18 10:54:06 2021-03-18 11:25:38 0:31:32 0:20:13 0:11:19 smithi master ubuntu 20.04 rados/cephadm/smoke-roleless/{1-start 2-services/{basic rgw} 3-final distro/ubuntu_20.04_kubic_testing} 2
pass 5976739 2021-03-18 10:15:50 2021-03-18 10:54:16 2021-03-18 11:13:52 0:19:36 0:10:22 0:09:14 smithi master rhel 8.3 rados/multimon/{clusters/9 mon_election/connectivity msgr-failures/few msgr/async-v2only no_pools objectstore/bluestore-hybrid rados supported-random-distro$/{rhel_8} tasks/mon_clock_no_skews} 3
pass 5976740 2021-03-18 10:15:50 2021-03-18 10:56:07 2021-03-18 11:21:40 0:25:33 0:13:54 0:11:39 smithi master ubuntu 18.04 rados/singleton/{all/test_envlibrados_for_rocksdb mon_election/connectivity msgr-failures/many msgr/async-v2only objectstore/bluestore-hybrid rados supported-random-distro$/{ubuntu_latest}} 1
pass 5976741 2021-03-18 10:15:51 2021-03-18 10:57:58 2021-03-18 11:17:40 0:19:42 0:09:02 0:10:40 smithi master ubuntu 18.04 rados/perf/{ceph mon_election/classic objectstore/bluestore-basic-min-osd-mem-target openstack scheduler/wpq_default_shards settings/optimized ubuntu_18.04 workloads/fio_4M_rand_read} 1
pass 5976742 2021-03-18 10:15:52 2021-03-18 10:57:58 2021-03-18 12:24:03 1:26:05 1:13:54 0:12:11 smithi master ubuntu 20.04 rados/cephadm/thrash/{0-distro/ubuntu_20.04_kubic_testing 1-start 2-thrash 3-tasks/radosbench fixed-2 msgr/async-v2only root} 2
pass 5976743 2021-03-18 10:15:53 2021-03-18 11:00:09 2021-03-18 11:14:47 0:14:38 0:06:52 0:07:46 smithi master ubuntu 18.04 rados/singleton-nomsgr/{all/version-number-sanity mon_election/connectivity rados supported-random-distro$/{ubuntu_latest}} 1
pass 5976744 2021-03-18 10:15:54 2021-03-18 11:00:09 2021-03-18 11:23:03 0:22:54 0:12:23 0:10:31 smithi master centos 8.3 rados/thrash/{0-size-min-size-overrides/3-size-2-min-size 1-pg-log-overrides/short_pg_log 2-recovery-overrides/{more-async-recovery} backoff/peering_and_degraded ceph clusters/{fixed-2 openstack} crc-failures/default d-balancer/on mon_election/connectivity msgr-failures/few msgr/async-v1only objectstore/bluestore-stupid rados supported-random-distro$/{centos_8} thrashers/careful thrashosds-health workloads/redirect_promote_tests} 2
pass 5976745 2021-03-18 10:15:55 2021-03-18 11:02:10 2021-03-18 11:45:57 0:43:47 0:33:04 0:10:43 smithi master ubuntu 18.04 rados/thrash-erasure-code-overwrites/{bluestore-bitmap ceph clusters/{fixed-2 openstack} fast/fast mon_election/classic msgr-failures/fastclose rados recovery-overrides/{more-partial-recovery} supported-random-distro$/{ubuntu_latest} thrashers/morepggrow thrashosds-health workloads/ec-snaps-few-objects-overwrites} 2
pass 5976746 2021-03-18 10:15:56 2021-03-18 11:02:40 2021-03-18 11:23:47 0:21:07 0:12:46 0:08:21 smithi master centos 8.2 rados/cephadm/workunits/{0-distro/centos_8.2_kubic_stable mon_election/connectivity task/test_adoption} 1
pass 5976747 2021-03-18 10:15:57 2021-03-18 11:02:40 2021-03-18 11:24:25 0:21:45 0:10:10 0:11:35 smithi master ubuntu 18.04 rados/thrash-erasure-code-shec/{ceph clusters/{fixed-4 openstack} mon_election/connectivity msgr-failures/osd-delay objectstore/bluestore-comp-snappy rados recovery-overrides/{more-active-recovery} supported-random-distro$/{ubuntu_latest} thrashers/careful thrashosds-health workloads/ec-rados-plugin=shec-k=4-m=3-c=2} 4
pass 5976748 2021-03-18 10:15:58 2021-03-18 11:03:31 2021-03-18 11:29:01 0:25:30 0:15:35 0:09:55 smithi master ubuntu 20.04 rados/cephadm/smoke/{distro/ubuntu_20.04_kubic_testing fixed-2 mon_election/classic start} 2
pass 5976749 2021-03-18 10:15:59 2021-03-18 11:03:31 2021-03-18 11:23:36 0:20:05 0:13:25 0:06:40 smithi master rhel 8.3 rados/mgr/{clusters/{2-node-mgr} debug/mgr mon_election/classic objectstore/bluestore-low-osd-mem-target supported-random-distro$/{rhel_8} tasks/prometheus} 2
pass 5976750 2021-03-18 11:04:42 2021-03-18 11:04:42 2021-03-18 12:26:21 1:21:39 1:10:58 0:10:41 smithi master ubuntu 18.04 rados/singleton/{all/thrash-backfill-full mon_election/classic msgr-failures/none msgr/async objectstore/bluestore-low-osd-mem-target rados supported-random-distro$/{ubuntu_latest}} 2
pass 5976751 2021-03-18 10:16:01 2021-03-18 11:04:52 2021-03-18 12:12:28 1:07:36 1:00:16 0:07:20 smithi master rhel 8.3 rados/dashboard/{clusters/{2-node-mgr} debug/mgr mon_election/classic random-objectstore$/{bluestore-comp-zstd} supported-random-distro$/{rhel_8} tasks/dashboard} 2
pass 5976752 2021-03-18 10:16:02 2021-03-18 11:05:32 2021-03-18 11:20:18 0:14:46 0:07:00 0:07:46 smithi master ubuntu 18.04 rados/objectstore/{backends/alloc-hint supported-random-distro$/{ubuntu_latest}} 1
pass 5976753 2021-03-18 10:16:03 2021-03-18 11:05:32 2021-03-18 11:22:55 0:17:23 0:08:39 0:08:44 smithi master centos 8.3 rados/rest/{mgr-restful supported-random-distro$/{centos_8}} 1
pass 5976754 2021-03-18 10:16:04 2021-03-18 11:05:43 2021-03-18 11:26:42 0:20:59 0:13:17 0:07:42 smithi master ubuntu 18.04 rados/singleton-nomsgr/{all/admin_socket_output mon_election/classic rados supported-random-distro$/{ubuntu_latest}} 1
pass 5976755 2021-03-18 10:16:04 2021-03-18 11:05:43 2021-03-18 11:28:35 0:22:52 0:11:21 0:11:31 smithi master centos 8.3 rados/standalone/{mon_election/classic supported-random-distro$/{centos_8} workloads/crush} 1
fail 5976756 2021-03-18 10:16:05 2021-03-18 11:06:53 2021-03-18 11:51:53 0:45:00 0:33:07 0:11:53 smithi master ubuntu 20.04 rados/upgrade/pacific-x/parallel/{0-start 1-tasks distro1$/{ubuntu_20.04} mon_election/classic upgrade-sequence workload/{ec-rados-default rados_api rados_loadgenbig rbd_import_export test_rbd_api test_rbd_python}} 2
Failure Reason:

Command failed on smithi065 with status 128: 'rm -rf /home/ubuntu/cephtest/clone.client.0 && git clone --depth 1 --branch pacific https://github.com/sseshasa/ceph.git /home/ubuntu/cephtest/clone.client.0 && cd /home/ubuntu/cephtest/clone.client.0'

pass 5976757 2021-03-18 10:16:06 2021-03-18 11:08:24 2021-03-18 11:37:57 0:29:33 0:19:35 0:09:58 smithi master centos 8.3 rados/valgrind-leaks/{1-start 2-inject-leak/mon centos_latest} 1
pass 5976758 2021-03-18 10:16:07 2021-03-18 11:08:54 2021-03-18 11:32:28 0:23:34 0:15:58 0:07:36 smithi master rhel 8.3 rados/thrash/{0-size-min-size-overrides/2-size-2-min-size 1-pg-log-overrides/normal_pg_log 2-recovery-overrides/{more-partial-recovery} backoff/normal ceph clusters/{fixed-2 openstack} crc-failures/bad_map_crc_failure d-balancer/crush-compat mon_election/classic msgr-failures/osd-delay msgr/async-v2only objectstore/filestore-xfs rados supported-random-distro$/{rhel_8} thrashers/default thrashosds-health workloads/redirect_set_object} 2
pass 5976759 2021-03-18 10:16:08 2021-03-18 11:09:25 2021-03-18 12:14:17 1:04:52 0:55:59 0:08:53 smithi master centos 8.2 rados/cephadm/with-work/{0-distro/centos_8.2_kubic_stable fixed-2 mode/root mon_election/classic msgr/async start tasks/rados_api_tests} 2
fail 5976760 2021-03-18 10:16:09 2021-03-18 11:09:25 2021-03-18 11:46:59 0:37:34 0:25:25 0:12:09 smithi master centos 8.2 rados/cephadm/dashboard/{0-distro/centos_8.2_kubic_stable task/test_e2e} 2
Failure Reason:

Command failed (workunit test cephadm/test_dashboard_e2e.sh) on smithi114 with status 1: 'mkdir -p -- /home/ubuntu/cephtest/mnt.0/client.0/tmp && cd -- /home/ubuntu/cephtest/mnt.0/client.0/tmp && CEPH_CLI_TEST_DUP_COMMAND=1 CEPH_REF=88df47230b5ad85e95b0be2eca6f5763914b175c TESTDIR="/home/ubuntu/cephtest" CEPH_ARGS="--cluster ceph" CEPH_ID="0" PATH=$PATH:/usr/sbin CEPH_BASE=/home/ubuntu/cephtest/clone.client.0 CEPH_ROOT=/home/ubuntu/cephtest/clone.client.0 adjust-ulimits ceph-coverage /home/ubuntu/cephtest/archive/coverage timeout 3h /home/ubuntu/cephtest/clone.client.0/qa/workunits/cephadm/test_dashboard_e2e.sh'

pass 5976761 2021-03-18 10:16:10 2021-03-18 11:11:55 2021-03-18 11:59:56 0:48:01 0:37:24 0:10:37 smithi master centos 8.3 rados/singleton/{all/thrash-eio mon_election/connectivity msgr-failures/few msgr/async-v1only objectstore/bluestore-stupid rados supported-random-distro$/{centos_8}} 2
pass 5976762 2021-03-18 10:16:11 2021-03-18 11:12:46 2021-03-18 11:51:00 0:38:14 0:28:01 0:10:13 smithi master centos 8.2 rados/cephadm/orchestrator_cli/{2-node-mgr orchestrator_cli random-distro$/{centos_8.2_kubic_stable}} 2
pass 5976763 2021-03-18 10:16:12 2021-03-18 11:13:56 2021-03-18 11:46:57 0:33:01 0:24:29 0:08:32 smithi master centos 8.3 rados/monthrash/{ceph clusters/3-mons mon_election/connectivity msgr-failures/few msgr/async-v2only objectstore/bluestore-stupid rados supported-random-distro$/{centos_8} thrashers/sync-many workloads/rados_api_tests} 2
pass 5976764 2021-03-18 10:16:13 2021-03-18 11:13:56 2021-03-18 11:49:57 0:36:01 0:25:30 0:10:31 smithi master ubuntu 18.04 rados/thrash-erasure-code/{ceph clusters/{fixed-2 openstack} fast/normal mon_election/classic msgr-failures/fastclose objectstore/bluestore-stupid rados recovery-overrides/{more-active-recovery} supported-random-distro$/{ubuntu_latest} thrashers/fastread thrashosds-health workloads/ec-rados-plugin=clay-k=4-m=2} 2
pass 5976765 2021-03-18 10:16:14 2021-03-18 11:13:57 2021-03-18 11:36:22 0:22:25 0:09:09 0:13:16 smithi master ubuntu 18.04 rados/thrash-erasure-code-big/{ceph cluster/{12-osds openstack} mon_election/connectivity msgr-failures/fastclose objectstore/bluestore-stupid rados recovery-overrides/{default} supported-random-distro$/{ubuntu_latest} thrashers/fastread thrashosds-health workloads/ec-rados-plugin=lrc-k=4-m=2-l=3} 3
pass 5976766 2021-03-18 10:16:15 2021-03-18 11:16:58 2021-03-18 11:42:37 0:25:39 0:16:11 0:09:28 smithi master centos 8.3 rados/verify/{centos_latest ceph clusters/{fixed-2 openstack} d-thrash/none mon_election/connectivity msgr-failures/few msgr/async-v2only objectstore/bluestore-stupid rados tasks/rados_cls_all validater/lockdep} 2
pass 5976767 2021-03-18 10:16:16 2021-03-18 11:17:18 2021-03-18 11:34:27 0:17:09 0:11:30 0:05:39 smithi master rhel 8.3 rados/singleton-nomsgr/{all/balancer mon_election/connectivity rados supported-random-distro$/{rhel_8}} 1
pass 5976768 2021-03-18 10:16:17 2021-03-18 11:17:18 2021-03-18 11:34:01 0:16:43 0:09:06 0:07:37 smithi master ubuntu 18.04 rados/perf/{ceph mon_election/connectivity objectstore/bluestore-bitmap openstack scheduler/dmclock_1Shard_16Threads settings/optimized ubuntu_18.04 workloads/fio_4M_rand_rw} 1
pass 5976769 2021-03-18 10:16:18 2021-03-18 11:17:19 2021-03-18 11:44:01 0:26:42 0:17:58 0:08:44 smithi master rhel 8.3 rados/thrash/{0-size-min-size-overrides/3-size-2-min-size 1-pg-log-overrides/short_pg_log 2-recovery-overrides/{more-async-recovery} backoff/peering ceph clusters/{fixed-2 openstack} crc-failures/default d-balancer/on mon_election/connectivity msgr-failures/fastclose msgr/async objectstore/bluestore-bitmap rados supported-random-distro$/{rhel_8} thrashers/mapgap thrashosds-health workloads/set-chunks-read} 2
pass 5976770 2021-03-18 10:16:19 2021-03-18 11:18:09 2021-03-18 11:53:28 0:35:19 0:25:45 0:09:34 smithi master centos 8.3 rados/thrash-erasure-code-isa/{arch/x86_64 ceph clusters/{fixed-2 openstack} mon_election/connectivity msgr-failures/few objectstore/filestore-xfs rados recovery-overrides/{default} supported-random-distro$/{centos_8} thrashers/careful thrashosds-health workloads/ec-rados-plugin=isa-k=2-m=1} 2
pass 5976771 2021-03-18 10:16:20 2021-03-18 11:18:09 2021-03-18 12:04:27 0:46:18 0:36:04 0:10:14 smithi master centos 8.2 rados/cephadm/smoke/{distro/centos_8.2_kubic_stable fixed-2 mon_election/classic start} 2
pass 5976772 2021-03-18 10:16:21 2021-03-18 11:19:20 2021-03-18 11:43:17 0:23:57 0:13:08 0:10:49 smithi master ubuntu 18.04 rados/basic/{ceph clusters/{fixed-2 openstack} mon_election/connectivity msgr-failures/many msgr/async-v1only objectstore/bluestore-comp-zstd rados supported-random-distro$/{ubuntu_latest} tasks/rados_python} 2
pass 5976773 2021-03-18 10:16:22 2021-03-18 11:19:40 2021-03-18 12:07:56 0:48:16 0:36:04 0:12:12 smithi master ubuntu 18.04 rados/thrash-old-clients/{0-size-min-size-overrides/2-size-2-min-size 1-install/nautilus-v2only backoff/peering ceph clusters/{openstack three-plus-one} d-balancer/on distro$/{ubuntu_18.04} mon_election/connectivity msgr-failures/fastclose rados thrashers/careful thrashosds-health workloads/cache-snaps} 3
fail 5976774 2021-03-18 10:16:23 2021-03-18 11:20:20 2021-03-18 12:56:28 1:36:08 1:25:39 0:10:29 smithi master centos 8.2 rados/cephadm/smoke-roleless/{1-start 2-services/{basic rgw} 3-final distro/centos_8.2_kubic_stable} 2
Failure Reason:

SELinux denials found on ubuntu@smithi144.front.sepia.ceph.com: ['type=AVC msg=audit(1616067937.861:6764): avc: denied { read } for pid=24908 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067936.631:6752): avc: denied { search } for pid=33907 comm="node_exporter" name="/" dev="tmpfs" ino=14361 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068217.170:8141): avc: denied { open } for pid=61313 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067989.472:6995): avc: denied { getattr } for pid=25279 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068056.629:7266): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=43728 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067997.507:7039): avc: denied { getattr } for pid=25279 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067916.631:6609): avc: denied { open } for pid=33907 comm="node_exporter" path="/sys/devices/system/cpu/cpu0/topology/physical_package_id" dev="sysfs" ino=28908 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068005.479:7062): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067996.631:7033): avc: denied { getattr } for pid=33907 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068226.629:8193): avc: denied { read } for pid=33907 comm="node_exporter" name="hwmon0" dev="sysfs" ino=35588 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067916.630:6594): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc/7" dev="proc" ino=159982 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068270.048:8396): avc: denied { search } for pid=55839 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068356.630:8859): avc: denied { search } for pid=33907 comm="node_exporter" name="1" dev="proc" ino=157102 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068276.650:8450): avc: denied { append } for pid=45496 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c629 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067986.630:6914): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/sys/class/net/lo" dev="sysfs" ino=21524 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068341.478:8746): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/etc" dev="sda1" ino=1968494 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068146.631:7805): avc: denied { read } for pid=33907 comm="node_exporter" name="addr_assign_type" dev="sysfs" ino=35397 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068072.430:7390): avc: denied { search } for pid=45496 comm="prometheus" name="etc" dev="sda1" ino=1970592 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c629 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068006.629:7085): avc: denied { read } for pid=33907 comm="node_exporter" name="fd" dev="proc" ino=164528 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067926.631:6677): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068206.631:8088): avc: denied { search } for pid=33907 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068132.430:7732): avc: denied { create } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067985.190:6881): avc: denied { read } for pid=25279 comm="msgr-worker-2" path="socket:[236258]" dev="sockfs" ino=236258 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067936.630:6737): avc: denied { search } for pid=33907 comm="node_exporter" name="kernel" dev="proc" ino=160351 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068077.478:7460): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068126.307:7614): avc: denied { lock } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067996.629:7020): avc: denied { read } for pid=33907 comm="node_exporter" name="sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.631:7812): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067996.631:7036): avc: denied { search } for pid=33907 comm="node_exporter" name="user" dev="tmpfs" ino=16432 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068136.842:7752): avc: denied { getattr } for pid=92770 comm="pgrep" path="/proc/24908" dev="proc" ino=128204 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068089.805:7488): avc: denied { getattr } for pid=45496 comm="prometheus" path="/prometheus/wal" dev="dm-4" ino=16777360 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c629 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068346.630:8783): avc: denied { search } for pid=33907 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068128.479:7701): avc: denied { read } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068201.818:8049): avc: denied { search } for pid=46071 comm="safe_timer" name="/" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c131,c293 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068342.430:8760): avc: denied { write } for pid=45496 comm="prometheus" path="socket:[365025]" dev="sockfs" ino=365025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068353.456:8813): avc: denied { search } for pid=25279 comm="safe_timer" name="/" dev="overlay" ino=1443998 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068346.629:8775): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=43728 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068336.661:8659): avc: denied { search } for pid=33907 comm="node_exporter" name="rpc" dev="proc" ino=4026532409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068005.544:7067): avc: denied { open } for pid=25279 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068216.630:8117): avc: denied { search } for pid=33907 comm="node_exporter" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068216.631:8127): avc: denied { search } for pid=33907 comm="node_exporter" name="fs" dev="proc" ino=160425 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068267.923:8322): avc: denied { search } for pid=24908 comm="safe_timer" name="/" dev="overlay" ino=1443979 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c138,c292 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068198.701:7987): avc: denied { open } for pid=25279 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067986.631:6925): avc: denied { getattr } for pid=33907 comm="node_exporter" name="/" dev="tmpfs" ino=14362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067934.817:6695): avc: denied { getattr } for pid=25279 comm="mgr-fin" path="/usr/share/zoneinfo/UTC" dev="overlay" ino=1312328 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067916.630:6597): avc: denied { search } for pid=33907 comm="node_exporter" name="net" dev="proc" ino=159988 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068353.479:8824): avc: denied { read } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067930.480:6685): avc: denied { read open } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068056.204:7248): avc: denied { search } for pid=61313 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068286.629:8504): avc: denied { read } for pid=33907 comm="node_exporter" name="file-nr" dev="proc" ino=160426 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067986.630:6915): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=164950 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068346.632:8789): avc: denied { search } for pid=33907 comm="node_exporter" name="kernel" dev="proc" ino=160351 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068269.053:8361): avc: denied { open } for pid=25279 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.397:7784): avc: denied { read } for pid=25279 comm="safe_timer" name="os-release" dev="sda1" ino=394714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068268.074:8337): avc: denied { open } for pid=50453 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068286.072:8489): avc: denied { sendto } for pid=24885 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068066.632:7384): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=159485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068056.478:7254): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/etc" dev="sda1" ino=1968494 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068146.235:7772): avc: denied { append } for pid=55839 comm="log" path="/var/log/ceph/ceph-osd.2.log" dev="sda1" ino=396209 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068056.629:7267): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/7/net/sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067936.631:6748): avc: denied { search } for pid=33907 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068217.959:8154): avc: denied { sendto } for pid=24885 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067915.479:6573): avc: denied { read } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067915.115:6569): avc: denied { open } for pid=25279 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068076.629:7440): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=43916 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068126.632:7648): avc: denied { search } for pid=33907 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.309:7778): avc: denied { read } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067918.480:6652): avc: denied { open } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067992.431:7004): avc: denied { setopt } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.397:7784): avc: denied { getattr } for pid=25279 comm="safe_timer" name="os-release" dev="sda1" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067935.201:6705): avc: denied { search } for pid=25279 comm="safe_timer" name="/" dev="overlay" ino=1443998 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067986.630:6908): avc: denied { read } for pid=33907 comm="node_exporter" name="stat" dev="proc" ino=164527 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068006.629:7091): avc: denied { open } for pid=33907 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/net/eno1/addr_assign_type" dev="sysfs" ino=35397 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068197.911:7965): avc: denied { dac_read_search } for pid=24908 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067936.631:6751): avc: denied { search } for pid=33907 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067936.582:6725): avc: denied { search } for pid=24885 comm="conmon" name="journal" dev="tmpfs" ino=1180 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068006.600:7077): avc: denied { search } for pid=24885 comm="conmon" name="journal" dev="tmpfs" ino=1180 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068271.053:8405): avc: denied { getattr } for pid=25279 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068346.630:8780): avc: denied { search } for pid=33907 comm="node_exporter" name="1" dev="proc" ino=157102 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068146.480:7788): avc: denied { read } for pid=36781 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067934.996:6697): avc: denied { append } for pid=55839 comm="log" path="/var/log/ceph/ceph-osd.2.log" dev="sda1" ino=396209 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068353.479:8825): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068005.022:7051): avc: denied { write } for pid=75114 comm="ceph_timer" path="pipe:[270603]" dev="pipefs" ino=270603 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068276.630:8435): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067936.480:6721): avc: denied { read open } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068276.630:8426): avc: denied { read } for pid=33907 comm="node_exporter" name="stat" dev="proc" ino=164527 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.516:7792): avc: denied { open } for pid=50453 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067996.629:7015): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc/7" dev="proc" ino=159982 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067986.630:6915): avc: denied { read } for pid=33907 comm="node_exporter" name="mounts" dev="proc" ino=164950 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068206.631:8090): avc: denied { search } for pid=33907 comm="node_exporter" name="user" dev="tmpfs" ino=16432 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068353.468:8816): avc: denied { read } for pid=25279 comm="safe_timer" name="os-release" dev="overlay" ino=394714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.309:7777): avc: denied { search } for pid=36781 comm="grafana-server" name="/" dev="overlay" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068286.632:8515): avc: denied { search } for pid=33907 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068023.480:7134): avc: denied { search } for pid=36781 comm="grafana-server" name="/" dev="overlay" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068005.478:7058): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068076.630:7443): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=159485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067916.633:6615): avc: denied { search } for pid=33907 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068218.480:8163): avc: denied { lock } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068128.479:7704): avc: denied { open } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/osd-device-details.json" dev="overlay" ino=1574980 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068132.743:7739): avc: denied { write } for pid=24908 comm="fn_monstore" path="pipe:[124477]" dev="pipefs" ino=124477 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069070.691:8973): avc: denied { write } for pid=25279 comm="msgr-worker-1" laddr=172.21.15.144 lport=50576 faddr=172.21.15.144 fport=6800 scontext=system_u:system_r:spc_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1', 'type=AVC msg=audit(1616068005.479:7061): avc: denied { read } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068276.631:8437): avc: denied { search } for pid=33907 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067937.861:6763): avc: denied { search } for pid=24908 comm="safe_timer" name="var" dev="sda1" ino=1443990 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c138,c292 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067987.480:6956): avc: denied { read open } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067922.431:6669): avc: denied { read } for pid=45496 comm="prometheus" path="socket:[286504]" dev="sockfs" ino=286504 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068126.629:7627): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/7/net/sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068226.630:8200): avc: denied { read } for pid=33907 comm="node_exporter" name="entropy_avail" dev="proc" ino=159485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068346.632:8791): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=159485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068077.887:7465): avc: denied { search } for pid=24908 comm="safe_timer" name="mon.smithi144" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067986.630:6919): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=159485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067987.480:6957): avc: denied { open } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/cephfs-overview.json" dev="overlay" ino=1574977 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068356.628:8845): avc: denied { signal } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068355.652:8844): avc: denied { write } for pid=25279 comm="msgr-worker-1" laddr=172.21.15.144 lport=50576 faddr=172.21.15.144 fport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068355.157:8843): avc: denied { search } for pid=55839 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970670 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c421,c817 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068138.348:7759): avc: denied { search } for pid=25279 comm="safe_timer" name="etc" dev="sda1" ino=1444004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068126.308:7617): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068057.846:7317): avc: denied { read } for pid=25279 comm="safe_timer" name="os-release" dev="sda1" ino=394714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068352.938:8808): avc: denied { dac_read_search } for pid=24908 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068007.874:7111): avc: denied { open } for pid=24908 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi144/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068001.539:7045): avc: denied { append } for pid=45496 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c629 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068270.041:8395): avc: denied { write } for pid=24885 comm="conmon" name="socket" dev="tmpfs" ino=1184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068146.480:7788): avc: denied { read } for pid=36781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068354.459:8842): avc: denied { read } for pid=61313 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068267.582:8317): avc: denied { read } for pid=61313 comm="msgr-worker-0" path="socket:[273501]" dev="sockfs" ino=273501 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068212.774:8103): avc: denied { read } for pid=25279 comm="safe_timer" name="os-release" dev="overlay" ino=394714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068286.632:8517): avc: denied { search } for pid=33907 comm="node_exporter" name="user" dev="tmpfs" ino=16432 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067996.630:7030): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068276.631:8441): avc: denied { search } for pid=33907 comm="node_exporter" name="kernel" dev="proc" ino=160351 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067986.596:6900): avc: denied { read } for pid=24885 comm="conmon" path="pipe:[124477]" dev="pipefs" ino=124477 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068276.630:8432): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/sys/fs/xfs/stats/stats" dev="sysfs" ino=45563 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068006.629:7083): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc/7" dev="proc" ino=159982 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068075.651:7408): avc: denied { search } for pid=50453 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970651 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c490,c885 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068066.630:7379): avc: denied { search } for pid=33907 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068126.631:7644): avc: denied { getattr } for pid=33907 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068126.630:7641): avc: denied { search } for pid=33907 comm="node_exporter" name="1" dev="proc" ino=157102 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068356.629:8848): avc: denied { search } for pid=33907 comm="node_exporter" name="7" dev="proc" ino=159982 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068006.630:7101): avc: denied { read } for pid=33907 comm="node_exporter" name="mounts" dev="proc" ino=164950 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068286.631:8512): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/sys/class/net/lo" dev="sysfs" ino=21524 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068284.479:8463): avc: denied { lock } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068286.629:8497): avc: denied { search } for pid=33907 comm="node_exporter" name="7" dev="proc" ino=159982 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067989.472:6994): avc: denied { search } for pid=25279 comm="safe_timer" name="etc" dev="sda1" ino=1444004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068075.099:7395): avc: denied { read } for pid=46071 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068268.038:8330): avc: denied { write } for pid=24908 comm="fn_monstore" path="pipe:[124477]" dev="pipefs" ino=124477 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067916.631:6605): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067930.170:6680): avc: denied { search } for pid=55839 comm="safe_timer" name="/" dev="overlay" ino=1970670 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c421,c817 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068286.632:8516): avc: denied { search } for pid=33907 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068197.911:7967): avc: denied { getattr } for pid=24908 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi144/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068057.697:7308): avc: denied { read } for pid=24885 comm="conmon" path="pipe:[124477]" dev="pipefs" ino=124477 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068126.082:7607): avc: denied { write } for pid=77122 comm="msgr-worker-0" laddr=172.21.15.144 lport=50252 faddr=172.21.15.144 fport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068349.444:8805): avc: denied { read } for pid=25279 comm="safe_timer" name="os-release" dev="sda1" ino=394714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068276.631:8441): avc: denied { read } for pid=33907 comm="node_exporter" name="entropy_avail" dev="proc" ino=159485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068132.430:7730): avc: denied { search } for pid=45496 comm="prometheus" name="/" dev="overlay" ino=1970584 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c629 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.480:7788): avc: denied { open } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068006.315:7074): avc: denied { search } for pid=55839 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970670 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c421,c817 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.479:7786): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067986.309:6896): avc: denied { read } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068226.630:8195): avc: denied { read } for pid=33907 comm="node_exporter" name="stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067936.480:6722): avc: denied { open } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/osd-device-details.json" dev="overlay" ino=1574980 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068206.630:8067): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068284.479:8466): avc: denied { read } for pid=36781 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068126.629:7629): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=159485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068129.529:7724): avc: denied { search } for pid=55839 comm="safe_timer" name="/" dev="overlay" ino=1970670 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c421,c817 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067935.201:6706): avc: denied { search } for pid=25279 comm="safe_timer" name="libpod-007039c67f5fe93561bc11f5022aa1b83f7960612a98612f62b3f7d629d69d27.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068056.629:7273): avc: denied { search } for pid=33907 comm="node_exporter" name="net" dev="proc" ino=159988 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068200.480:8034): avc: denied { read } for pid=36781 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067987.479:6954): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068338.238:8705): avc: denied { write } for pid=24885 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067916.630:6593): avc: denied { search } for pid=33907 comm="node_exporter" name="/" dev="overlay" ino=1970467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c480,c863 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067986.631:6929): avc: denied { search } for pid=33907 comm="node_exporter" name="user" dev="tmpfs" ino=16432 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068346.629:8773): avc: denied { read } for pid=33907 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068085.375:7477): avc: denied { add_name } for pid=36781 comm="grafana-server" name="grafana.db-journal" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068269.053:8362): avc: denied { getattr } for pid=25279 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068126.730:7656): avc: denied { search } for pid=24885 comm="conmon" name="journal" dev="tmpfs" ino=1180 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068286.629:8504): avc: denied { search } for pid=33907 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068353.478:8822): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/etc" dev="sda1" ino=1968494 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067916.631:6608): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/sys/class/net/lo" dev="sysfs" ino=21524 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068006.629:7088): avc: denied { read } for pid=33907 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068198.689:7985): avc: denied { search } for pid=25279 comm="safe_timer" name="libpod-007039c67f5fe93561bc11f5022aa1b83f7960612a98612f62b3f7d629d69d27.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.516:7792): avc: denied { read } for pid=50453 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067935.591:6713): avc: denied { open } for pid=50453 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068209.808:8098): avc: denied { open } for pid=45496 comm="prometheus" path="/prometheus" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c629 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068286.633:8521): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=159485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.630:7802): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068269.808:8391): avc: denied { getattr } for pid=45496 comm="prometheus" path="/prometheus/wal" dev="dm-4" ino=16777360 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c629 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068005.556:7070): avc: denied { getattr } for pid=25279 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068276.630:8425): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc/7" dev="proc" ino=159982 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068276.630:8433): avc: denied { open } for pid=33907 comm="node_exporter" path="/sys/fs/xfs/dm-4/stats/stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068059.479:7351): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068222.431:8176): avc: denied { search } for pid=45496 comm="prometheus" name="/" dev="overlay" ino=1970584 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c629 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068362.430:8881): avc: denied { setopt } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067913.862:6554): avc: denied { search } for pid=24885 comm="conmon" name="systemd" dev="tmpfs" ino=14370 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068126.637:7651): avc: denied { append } for pid=45496 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c629 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067916.631:6603): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068269.041:8359): avc: denied { search } for pid=25279 comm="safe_timer" name="libpod-007039c67f5fe93561bc11f5022aa1b83f7960612a98612f62b3f7d629d69d27.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068198.701:7987): avc: denied { read } for pid=25279 comm="safe_timer" name="os-release" dev="overlay" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069115.693:8982): avc: denied { write } for pid=25279 comm="msgr-worker-1" laddr=172.21.15.144 lport=50576 faddr=172.21.15.144 fport=6800 scontext=system_u:system_r:spc_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1', 'type=AVC msg=audit(1616067916.630:6593): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068206.630:8076): avc: denied { search } for pid=33907 comm="node_exporter" name="1" dev="proc" ino=157102 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068356.630:8857): avc: denied { read } for pid=33907 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068340.240:8740): avc: denied { search } for pid=24885 comm="conmon" name="journal" dev="tmpfs" ino=1180 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068342.430:8756): avc: denied { create } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068129.456:7722): avc: denied { write } for pid=50453 comm="osd_srv_heartbt" path="pipe:[203202]" dev="pipefs" ino=203202 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068198.101:7980): avc: denied { read } for pid=61313 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068197.911:7965): avc: denied { search } for pid=24908 comm="safe_timer" name="diff" dev="sda1" ino=1443979 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067930.334:6683): avc: denied { search } for pid=50453 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970651 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c490,c885 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068132.430:7733): avc: denied { setopt } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068056.308:7250): avc: denied { search } for pid=36781 comm="grafana-server" name="var" dev="sda1" ino=1968497 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068075.668:7410): avc: denied { write } for pid=24908 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi144/store.db/000018.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068056.308:7252): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068062.430:7363): avc: denied { connect } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067989.460:6991): avc: denied { search } for pid=25279 comm="safe_timer" name="/" dev="overlay" ino=1443998 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068286.629:8505): avc: denied { open } for pid=33907 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=43916 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068276.632:8446): avc: denied { search } for pid=33907 comm="node_exporter" name="/" dev="tmpfs" ino=14361 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.630:7794): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc/7" dev="proc" ino=159982 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068338.238:8705): avc: denied { sendto } for pid=24885 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068285.137:8483): avc: denied { read } for pid=25279 comm="safe_timer" name="os-release" dev="overlay" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067934.817:6695): avc: denied { read } for pid=25279 comm="mgr-fin" name="localtime" dev="overlay" ino=394696 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068286.632:8515): avc: denied { getattr } for pid=33907 comm="node_exporter" name="/" dev="tmpfs" ino=14362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068127.897:7683): avc: denied { getattr } for pid=24908 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi144/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068131.479:7729): avc: denied { read open } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068310.651:8557): avc: denied { write } for pid=25279 comm="msgr-worker-1" laddr=172.21.15.144 lport=50576 faddr=172.21.15.144 fport=6800 scontext=system_u:system_r:spc_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1', 'type=AVC msg=audit(1616068138.348:7759): avc: denied { open } for pid=25279 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068147.902:7836): avc: denied { open } for pid=24908 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi144/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068126.730:7656): avc: denied { write } for pid=24885 comm="conmon" name="socket" dev="tmpfs" ino=1184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068226.629:8184): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067914.816:6566): avc: denied { search } for pid=25279 comm="mgr-fin" name="/" dev="overlay" ino=1443998 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.630:7800): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=43728 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068217.000:8137): avc: denied { write } for pid=61313 comm="msgr-worker-1" laddr=172.21.15.144 lport=6828 faddr=172.21.15.152 fport=49540 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068057.697:7309): avc: denied { search } for pid=24885 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068218.799:8172): avc: denied { read } for pid=25279 comm="safe_timer" name="os-release" dev="overlay" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.631:7814): avc: denied { read } for pid=33907 comm="node_exporter" name="file-nr" dev="proc" ino=160426 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068337.236:8675): avc: denied { write } for pid=24908 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi144/store.db/000021.log" dev="dm-4" ino=178 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068348.254:8802): avc: denied { read } for pid=24885 comm="conmon" path="pipe:[124477]" dev="pipefs" ino=124477 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068146.631:7811): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068075.670:7413): avc: denied { search } for pid=24885 comm="conmon" name="systemd" dev="tmpfs" ino=14370 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068092.994:7496): avc: denied { search } for pid=61313 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068005.556:7069): avc: denied { open } for pid=25279 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068286.071:8487): avc: denied { write } for pid=24908 comm="fn_monstore" path="pipe:[124477]" dev="pipefs" ino=124477 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068006.600:7077): avc: denied { sendto } for pid=24885 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068287.926:8528): avc: denied { getattr } for pid=24908 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi144/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068286.632:8520): avc: denied { search } for pid=33907 comm="node_exporter" name="host" dev="sda1" ino=1970476 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c480,c863 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068076.629:7427): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068286.071:8487): avc: denied { use } for pid=24908 comm="fn_monstore" path="pipe:[124477]" dev="pipefs" ino=124477 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068206.632:8093): avc: denied { search } for pid=33907 comm="node_exporter" name="host" dev="sda1" ino=1970476 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c480,c863 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068356.629:8846): avc: denied { search } for pid=33907 comm="node_exporter" name="/" dev="overlay" ino=1970467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c480,c863 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068206.630:8078): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068218.480:8166): avc: denied { open } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067916.630:6600): avc: denied { search } for pid=33907 comm="node_exporter" name="kernel" dev="proc" ino=160351 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068340.240:8740): avc: denied { search } for pid=24885 comm="conmon" name="systemd" dev="tmpfs" ino=14370 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068216.632:8128): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=159485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068216.630:8113): avc: denied { read } for pid=33907 comm="node_exporter" name="stat" dev="proc" ino=164527 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067989.460:6992): avc: denied { search } for pid=25279 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068056.629:7270): avc: denied { read } for pid=33907 comm="node_exporter" name="addr_assign_type" dev="sysfs" ino=35397 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068075.099:7396): avc: denied { append } for pid=46071 comm="log" path="/var/log/ceph/ceph-osd.0.log" dev="sda1" ino=396203 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068206.631:8088): avc: denied { getattr } for pid=33907 comm="node_exporter" name="/" dev="tmpfs" ino=14362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068214.786:8108): avc: denied { search } for pid=25279 comm="safe_timer" name="etc" dev="sda1" ino=1444004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068075.659:7409): avc: denied { search } for pid=55839 comm="safe_timer" name="/" dev="overlay" ino=1970670 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c421,c817 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.397:7784): avc: denied { search } for pid=25279 comm="safe_timer" name="etc" dev="sda1" ino=1444004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068126.631:7647): avc: denied { search } for pid=33907 comm="node_exporter" name="/" dev="tmpfs" ino=14361 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068226.631:8209): avc: denied { search } for pid=33907 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616068346.631:8785): avc: denied { search } for pid=33907 comm="node_exporter" name="/" dev="tmpfs" ino=14361 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068206.631:8092): avc: denied { search } for pid=33907 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616068216.786:8132): avc: denied { search } for pid=25279 comm="safe_timer" name="libpod-007039c67f5fe93561bc11f5022aa1b83f7960612a98612f62b3f7d629d69d27.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067916.632:6612): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=160426 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067916.633:6614): avc: denied { search } for pid=33907 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067992.431:7007): avc: denied { getattr } for pid=45496 comm="prometheus" laddr=172.21.15.144 lport=56256 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068197.911:7969): avc: denied { write } for pid=24908 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi144/store.db/000021.log" dev="dm-4" ino=178 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068005.479:7063): avc: denied { open } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068056.694:7287): avc: denied { write } for pid=24908 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi144/store.db/000018.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067935.213:6708): avc: denied { open } for pid=25279 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068226.630:8199): avc: denied { search } for pid=33907 comm="node_exporter" name="net" dev="proc" ino=159988 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068006.629:7082): avc: denied { search } for pid=33907 comm="node_exporter" name="/" dev="overlay" ino=1970467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c480,c863 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068075.942:7418): avc: denied { search } for pid=25279 comm="safe_timer" name="/" dev="overlay" ino=1443998 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067914.337:6565): avc: denied { search } for pid=61313 comm="safe_timer" name="/" dev="overlay" ino=1970689 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c431,c852 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068213.150:8104): avc: denied { getattr } for pid=25279 comm="mgr-fin" path="/usr/lib64/python3.6" dev="overlay" ino=1050261 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068341.478:8745): avc: denied { search } for pid=36781 comm="grafana-server" name="etc" dev="sda1" ino=1968494 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068346.629:8768): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=164527 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067988.199:6982): avc: denied { search } for pid=55839 comm="safe_timer" name="/" dev="overlay" ino=1970670 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c421,c817 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068269.053:8361): avc: denied { read } for pid=25279 comm="safe_timer" name="os-release" dev="overlay" ino=394714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068202.431:8052): avc: denied { search } for pid=45496 comm="prometheus" name="/" dev="overlay" ino=1970584 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c629 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068346.629:8776): avc: denied { read } for pid=33907 comm="node_exporter" name="hwmon0" dev="sysfs" ino=35588 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067934.817:6695): avc: denied { search } for pid=25279 comm="mgr-fin" name="etc" dev="sda1" ino=1444004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068006.631:7104): avc: denied { search } for pid=33907 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068076.629:7435): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=164950 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068286.629:8498): avc: denied { read } for pid=33907 comm="node_exporter" name="fd" dev="proc" ino=164528 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068126.308:7617): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067986.631:6926): avc: denied { search } for pid=33907 comm="node_exporter" name="fs" dev="proc" ino=160425 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068126.629:7636): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067915.103:6567): avc: denied { read } for pid=25279 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067935.135:6704): avc: denied { search } for pid=46071 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068337.383:8679): avc: denied { search } for pid=25279 comm="safe_timer" name="usr" dev="sda1" ino=789157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068206.630:8070): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=164528 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068218.480:8167): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="sda1" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068197.750:7961): avc: denied { append } for pid=24908 comm="log" path="/var/log/ceph/ceph-mon.smithi144.log" dev="sda1" ino=396130 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068226.630:8204): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/7/net/sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068276.630:8426): avc: denied { search } for pid=33907 comm="node_exporter" name="7" dev="proc" ino=159982 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.362:7780): avc: denied { search } for pid=46071 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068339.784:8739): avc: denied { search } for pid=46071 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c131,c293 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068198.689:7985): avc: denied { read } for pid=25279 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067916.631:6610): avc: denied { read } for pid=33907 comm="node_exporter" name="eno1" dev="sysfs" ino=35389 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068218.480:8168): avc: denied { open } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="sda1" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068077.479:7462): avc: denied { read } for pid=36781 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.631:7808): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=159485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067926.631:6678): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068206.631:8083): avc: denied { search } for pid=33907 comm="node_exporter" name="rpc" dev="proc" ino=4026532409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068126.629:7629): avc: denied { search } for pid=33907 comm="node_exporter" name="kernel" dev="proc" ino=160351 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068218.480:8164): avc: denied { read } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068066.631:7382): avc: denied { search } for pid=33907 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068216.630:8115): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=164528 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068300.648:8538): avc: denied { setopt } for pid=25279 comm="msgr-worker-2" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067985.459:6888): avc: denied { open } for pid=25279 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068077.479:7462): avc: denied { read open } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067936.631:6742): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067996.629:7019): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=159485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068152.431:7848): avc: denied { connect } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068216.630:8114): avc: denied { read } for pid=33907 comm="node_exporter" name="stat" dev="proc" ino=4026532033 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068085.616:7482): avc: denied { getopt } for pid=36781 comm="grafana-server" laddr=172.21.15.144 lport=44814 faddr=35.241.23.245 fport=443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068346.629:8777): avc: denied { read } for pid=33907 comm="node_exporter" name="file-nr" dev="proc" ino=160426 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068362.430:8878): avc: denied { search } for pid=45496 comm="prometheus" name="etc" dev="sda1" ino=1970592 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c629 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067936.630:6734): avc: denied { read } for pid=33907 comm="node_exporter" name="fd" dev="proc" ino=164528 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068076.629:7431): avc: denied { search } for pid=33907 comm="node_exporter" name="rpc" dev="proc" ino=4026532409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068269.479:8363): avc: denied { search } for pid=36781 comm="grafana-server" name="/" dev="overlay" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067915.480:6575): avc: denied { read open } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067917.312:6636): avc: denied { read } for pid=61313 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067936.308:6715): avc: denied { lock } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068268.038:8332): avc: denied { write } for pid=24885 comm="conmon" name="socket" dev="tmpfs" ino=1184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068066.629:7375): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=159485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068349.432:8804): avc: denied { getattr } for pid=25279 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068346.629:8779): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/hwmon/hwmon0/uevent" dev="sysfs" ino=35585 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067922.431:6666): avc: denied { connect } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068342.430:8754): avc: denied { search } for pid=45496 comm="prometheus" name="etc" dev="sda1" ino=1970592 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c629 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068092.052:7492): avc: denied { search } for pid=25279 comm="safe_timer" name="diff" dev="sda1" ino=1443998 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068075.100:7397): avc: denied { search } for pid=46071 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068276.632:8445): avc: denied { search } for pid=33907 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068006.600:7077): avc: denied { search } for pid=24885 comm="conmon" name="systemd" dev="tmpfs" ino=14370 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068356.629:8849): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=164528 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068292.430:8529): avc: denied { search } for pid=45496 comm="prometheus" name="etc" dev="sda1" ino=1970592 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c629 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068076.632:7454): avc: denied { search } for pid=33907 comm="node_exporter" name="host" dev="sda1" ino=1970476 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c480,c863 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068005.544:7066): avc: denied { search } for pid=25279 comm="safe_timer" name="/" dev="overlay" ino=1443998 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068005.544:7066): avc: denied { read } for pid=25279 comm="safe_timer" name="meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068337.383:8676): avc: denied { search } for pid=25279 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068338.639:8718): avc: denied { read } for pid=50453 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068058.891:7341): avc: denied { write } for pid=24885 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068085.608:7481): avc: denied { connect } for pid=36781 comm="grafana-server" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067913.679:6545): avc: denied { write } for pid=77122 comm="safe_timer" path="pipe:[274888]" dev="pipefs" ino=274888 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068075.670:7413): avc: denied { sendto } for pid=24885 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068356.629:8855): avc: denied { open } for pid=33907 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/net/eno1/addr_assign_type" dev="sysfs" ino=35397 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068286.629:8503): avc: denied { search } for pid=33907 comm="node_exporter" name="rpc" dev="proc" ino=4026532409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068214.786:8108): avc: denied { read } for pid=25279 comm="safe_timer" name="os-release" dev="overlay" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068066.629:7374): avc: denied { read } for pid=33907 comm="node_exporter" name="hwmon0" dev="sysfs" ino=35588 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068126.631:7647): avc: denied { search } for pid=33907 comm="node_exporter" name="user" dev="tmpfs" ino=16432 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068132.898:7742): avc: denied { getattr } for pid=24908 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi144/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068071.362:7387): avc: denied { write } for pid=78119 comm="msgr-worker-1" laddr=172.21.15.144 lport=51920 faddr=172.21.15.144 fport=6802 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068147.902:7837): avc: denied { getattr } for pid=24908 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi144/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068206.630:8071): avc: denied { search } for pid=33907 comm="node_exporter" name="net" dev="proc" ino=159988 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068198.701:7987): avc: denied { search } for pid=25279 comm="safe_timer" name="etc" dev="sda1" ino=1444004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068075.954:7422): avc: denied { getattr } for pid=25279 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068218.799:8172): avc: denied { search } for pid=25279 comm="safe_timer" name="etc" dev="sda1" ino=1444004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068056.308:7251): avc: denied { read } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068338.238:8705): avc: denied { search } for pid=24885 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067922.431:6664): avc: denied { create } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068126.730:7655): avc: denied { read } for pid=24885 comm="conmon" path="pipe:[124477]" dev="pipefs" ino=124477 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068353.468:8816): avc: denied { open } for pid=25279 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068007.874:7111): avc: denied { search } for pid=24908 comm="safe_timer" name="mon.smithi144" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068209.808:8099): avc: denied { getattr } for pid=45496 comm="prometheus" path="/prometheus/queries.active" dev="dm-4" ino=158 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c629 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068276.631:8443): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067918.579:6654): avc: denied { search } for pid=24885 comm="conmon" name="journal" dev="tmpfs" ino=1180 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068357.939:8875): avc: denied { read } for pid=24908 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068285.077:8480): avc: denied { search } for pid=46071 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c131,c293 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068056.630:7281): avc: denied { search } for pid=33907 comm="node_exporter" name="/" dev="tmpfs" ino=14361 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068005.478:7058): avc: denied { getattr } for pid=36781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068128.478:7698): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068226.629:8186): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=164527 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067915.479:6572): avc: denied { lock } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068218.787:8169): avc: denied { search } for pid=25279 comm="safe_timer" name="/" dev="overlay" ino=1443998 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067913.932:6559): avc: denied { search } for pid=50453 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970651 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c490,c885 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068152.431:7849): avc: denied { connect } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068126.629:7634): avc: denied { read } for pid=33907 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068216.630:8121): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=43728 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068214.786:8108): avc: denied { open } for pid=25279 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068350.257:8807): avc: denied { search } for pid=24885 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068056.204:7247): avc: denied { open } for pid=61313 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067936.582:6725): avc: denied { write } for pid=24885 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068284.764:8475): avc: denied { write } for pid=24908 comm="ms_dispatch" path="pipe:[124504]" dev="pipefs" ino=124504 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.234:7768): avc: denied { write } for pid=46071 comm="msgr-worker-1" laddr=172.21.15.144 lport=6806 faddr=172.21.15.152 fport=56426 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068269.480:8368): avc: denied { read } for pid=36781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067915.479:6574): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068056.478:7253): avc: denied { getattr } for pid=36781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067916.632:6612): avc: denied { search } for pid=33907 comm="node_exporter" name="fs" dev="proc" ino=160425 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068136.842:7750): avc: denied { getattr } for pid=92770 comm="pgrep" path="/proc/24885" dev="proc" ino=122266 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067942.430:6768): avc: denied { search } for pid=45496 comm="prometheus" name="/" dev="overlay" ino=1970584 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c629 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067988.598:6987): avc: denied { search } for pid=24885 comm="conmon" name="systemd" dev="tmpfs" ino=14370 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067996.630:7029): avc: denied { read } for pid=33907 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067986.630:6908): avc: denied { search } for pid=33907 comm="node_exporter" name="7" dev="proc" ino=159982 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068267.924:8323): avc: denied { search } for pid=24908 comm="safe_timer" name="mon.smithi144" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067914.816:6566): avc: denied { search } for pid=25279 comm="mgr-fin" name="etc" dev="sda1" ino=1444004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068284.479:8468): avc: denied { open } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="overlay" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068346.629:8778): avc: denied { read } for pid=33907 comm="node_exporter" name="addr_assign_type" dev="sysfs" ino=35397 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067986.596:6901): avc: denied { write } for pid=24885 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068138.752:7761): avc: denied { search } for pid=24885 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068206.631:8089): avc: denied { search } for pid=33907 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068286.629:8501): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068128.733:7707): avc: denied { search } for pid=24885 comm="conmon" name="journal" dev="tmpfs" ino=1180 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068271.065:8406): avc: denied { read } for pid=25279 comm="safe_timer" name="os-release" dev="overlay" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068226.631:8207): avc: denied { search } for pid=33907 comm="node_exporter" name="user" dev="tmpfs" ino=16432 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067985.179:6877): avc: denied { search } for pid=46071 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068126.274:7612): avc: denied { open } for pid=25279 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068226.631:8205): avc: denied { getattr } for pid=33907 comm="node_exporter" name="/" dev="tmpfs" ino=14362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067986.630:6916): avc: denied { read } for pid=33907 comm="node_exporter" name="addr_assign_type" dev="sysfs" ino=35397 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068346.629:8769): avc: denied { read } for pid=33907 comm="node_exporter" name="fd" dev="proc" ino=164528 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067992.431:7000): avc: denied { search } for pid=45496 comm="prometheus" name="etc" dev="sda1" ino=1970592 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c629 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068356.629:8849): avc: denied { read } for pid=33907 comm="node_exporter" name="fd" dev="proc" ino=164528 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068023.480:7134): avc: denied { search } for pid=36781 comm="grafana-server" name="etc" dev="sda1" ino=1968494 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068222.432:8183): avc: denied { read } for pid=45496 comm="prometheus" path="socket:[341884]" dev="sockfs" ino=341884 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067996.629:7016): avc: denied { read } for pid=33907 comm="node_exporter" name="stat" dev="proc" ino=164527 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068075.670:7412): avc: denied { read } for pid=24885 comm="conmon" path="pipe:[124477]" dev="pipefs" ino=124477 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067936.631:6753): avc: denied { search } for pid=33907 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068002.430:7046): avc: denied { getattr } for pid=45496 comm="prometheus" path="/etc/hosts" dev="tmpfs" ino=189966 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.630:7803): avc: denied { read } for pid=33907 comm="node_exporter" name="hwmon0" dev="sysfs" ino=35588 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068269.053:8361): avc: denied { search } for pid=25279 comm="safe_timer" name="usr" dev="sda1" ino=789157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067915.103:6567): avc: denied { open } for pid=25279 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067986.630:6916): avc: denied { open } for pid=33907 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/net/eno1/addr_assign_type" dev="sysfs" ino=35397 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068203.480:8065): avc: denied { read } for pid=36781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068082.431:7470): avc: denied { create } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.385:7782): avc: denied { read } for pid=25279 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068356.630:8856): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/sys/fs/xfs/stats/stats" dev="sysfs" ino=45563 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067913.932:6559): avc: denied { read } for pid=50453 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068126.629:7626): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=164528 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068058.891:7341): avc: denied { search } for pid=24885 comm="conmon" name="/" dev="tmpfs" ino=14361 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068221.538:8174): avc: denied { signal } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068284.479:8468): avc: denied { open } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="sda1" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067932.588:6687): avc: denied { use } for pid=24908 comm="fn_monstore" path="pipe:[124477]" dev="pipefs" ino=124477 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068126.631:7645): avc: denied { getattr } for pid=33907 comm="node_exporter" name="/" dev="tmpfs" ino=14362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068357.939:8874): avc: denied { search } for pid=24908 comm="safe_timer" name="var" dev="sda1" ino=1443990 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c138,c292 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068056.629:7261): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=164527 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068057.697:7309): avc: denied { search } for pid=24885 comm="conmon" name="journal" dev="tmpfs" ino=1180 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068286.632:8517): avc: denied { search } for pid=33907 comm="node_exporter" name="/" dev="tmpfs" ino=14361 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068276.631:8436): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068356.630:8858): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068076.629:7438): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068216.631:8127): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=160426 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068336.759:8667): avc: denied { write } for pid=78119 comm="safe_timer" path="pipe:[272184]" dev="pipefs" ino=272184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068226.630:8200): avc: denied { search } for pid=33907 comm="node_exporter" name="kernel" dev="proc" ino=160351 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067942.430:6775): avc: denied { read } for pid=45496 comm="prometheus" path="socket:[291284]" dev="sockfs" ino=291284 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068206.631:8084): avc: denied { open } for pid=33907 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=43916 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068286.629:8504): avc: denied { search } for pid=33907 comm="node_exporter" name="fs" dev="proc" ino=160425 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068216.630:8116): avc: denied { open } for pid=33907 comm="node_exporter" path="/sys/class/hwmon" dev="sysfs" ino=21483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068131.479:7729): avc: denied { read } for pid=36781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068152.431:7850): avc: denied { getattr } for pid=45496 comm="prometheus" laddr=172.21.15.144 lport=52242 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068218.242:8160): avc: denied { search } for pid=55839 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970670 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c421,c817 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067936.631:6742): avc: denied { read } for pid=33907 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067913.862:6552): avc: denied { write } for pid=24908 comm="fn_monstore" path="pipe:[124477]" dev="pipefs" ino=124477 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068081.538:7468): avc: denied { signal } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067986.630:6918): avc: denied { search } for pid=33907 comm="node_exporter" name="kernel" dev="proc" ino=160351 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067913.855:6551): avc: denied { write } for pid=24908 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi144/store.db/000012.log" dev="dm-4" ino=178 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068132.430:7735): avc: denied { getattr } for pid=45496 comm="prometheus" laddr=172.21.15.144 lport=57858 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068066.629:7375): avc: denied { read } for pid=33907 comm="node_exporter" name="entropy_avail" dev="proc" ino=159485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068269.479:8364): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/etc" dev="sda1" ino=1968494 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068075.670:7413): avc: denied { search } for pid=24885 comm="conmon" name="journal" dev="tmpfs" ino=1180 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068286.632:8519): avc: denied { search } for pid=33907 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616068146.763:7829): avc: denied { search } for pid=24885 comm="conmon" name="systemd" dev="tmpfs" ino=14370 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068126.629:7634): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068200.933:8039): avc: denied { search } for pid=24885 comm="conmon" name="journal" dev="tmpfs" ino=1180 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067936.630:6731): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068000.602:7043): avc: denied { sendto } for pid=24885 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067922.431:6667): avc: denied { getattr } for pid=45496 comm="prometheus" laddr=172.21.15.144 lport=40158 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068287.926:8526): avc: denied { read } for pid=24908 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068269.834:8392): avc: denied { read } for pid=25279 comm="mgr-fin" name="localtime" dev="overlay" ino=394696 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067986.596:6901): avc: denied { write } for pid=24885 comm="conmon" name="socket" dev="tmpfs" ino=1184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068286.072:8489): avc: denied { write } for pid=24885 comm="conmon" name="socket" dev="tmpfs" ino=1184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067915.480:6575): avc: denied { read } for pid=36781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068353.946:8835): avc: denied { write } for pid=24885 comm="conmon" name="socket" dev="tmpfs" ino=1184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067987.872:6960): avc: denied { search } for pid=24908 comm="safe_timer" name="var" dev="sda1" ino=1443990 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c138,c292 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068353.468:8819): avc: denied { read } for pid=25279 comm="msgr-worker-1" path="pipe:[143407]" dev="pipefs" ino=143407 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067985.447:6885): avc: denied { search } for pid=25279 comm="safe_timer" name="/" dev="overlay" ino=1443998 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068056.629:7259): avc: denied { search } for pid=33907 comm="node_exporter" name="/" dev="overlay" ino=1970467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c480,c863 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068126.730:7656): avc: denied { write } for pid=24885 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068338.238:8705): avc: denied { search } for pid=24885 comm="conmon" name="systemd" dev="tmpfs" ino=14370 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067986.630:6913): avc: denied { search } for pid=33907 comm="node_exporter" name="rpc" dev="proc" ino=4026532409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067985.459:6888): avc: denied { read } for pid=25279 comm="safe_timer" name="os-release" dev="sda1" ino=394714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068056.629:7262): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=164528 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067916.664:6621): avc: denied { search } for pid=46071 comm="safe_timer" name="/" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c131,c293 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068057.884:7322): avc: denied { getattr } for pid=24908 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi144/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068005.544:7067): avc: denied { search } for pid=25279 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068128.679:7706): avc: denied { read } for pid=25279 comm="msgr-worker-1" path="socket:[143595]" dev="sockfs" ino=143595 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067922.431:6663): avc: denied { search } for pid=45496 comm="prometheus" name="/" dev="overlay" ino=1970584 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c629 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068353.946:8833): avc: denied { use } for pid=24908 comm="fn_monstore" path="pipe:[124477]" dev="pipefs" ino=124477 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068198.701:7987): avc: denied { search } for pid=25279 comm="safe_timer" name="usr" dev="sda1" ino=789157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067987.313:6953): avc: denied { search } for pid=55839 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970670 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c421,c817 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068057.834:7314): avc: denied { read } for pid=25279 comm="safe_timer" name="meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067918.479:6647): avc: denied { search } for pid=36781 comm="grafana-server" name="etc" dev="sda1" ino=1968494 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068016.815:7128): avc: denied { getattr } for pid=86696 comm="pgrep" path="/proc/24908" dev="proc" ino=128204 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068217.170:8140): avc: denied { search } for pid=61313 comm="safe_timer" name="diff" dev="sda1" ino=1970689 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068126.629:7624): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc/7" dev="proc" ino=159982 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068200.480:8032): avc: denied { read } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068341.479:8750): avc: denied { read } for pid=36781 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068126.262:7610): avc: denied { read } for pid=25279 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068346.653:8792): avc: denied { search } for pid=55839 comm="safe_timer" name="/" dev="overlay" ino=1970670 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c421,c817 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068008.743:7115): avc: denied { search } for pid=50453 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970651 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c490,c885 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068353.468:8816): avc: denied { read } for pid=25279 comm="safe_timer" name="os-release" dev="overlay" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068197.911:7966): avc: denied { read } for pid=24908 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067936.631:6744): avc: denied { read } for pid=33907 comm="node_exporter" name="arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068357.939:8874): avc: denied { search } for pid=24908 comm="safe_timer" name="/" dev="overlay" ino=1443979 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c138,c292 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068284.478:8461): avc: denied { getattr } for pid=36781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068136.842:7751): avc: denied { open } for pid=92770 comm="pgrep" path="/proc/24885/status" dev="proc" ino=122270 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068284.479:8464): avc: denied { read } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067986.631:6926): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=160426 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068292.430:8529): avc: denied { search } for pid=45496 comm="prometheus" name="/" dev="overlay" ino=1970584 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c629 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068076.629:7437): avc: denied { open } for pid=33907 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=21498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067986.631:6930): avc: denied { search } for pid=33907 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068269.808:8390): avc: denied { getattr } for pid=45496 comm="prometheus" path="/prometheus/queries.active" dev="dm-4" ino=158 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c629 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068353.456:8813): avc: denied { search } for pid=25279 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068356.631:8869): avc: denied { search } for pid=33907 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068126.262:7610): avc: denied { search } for pid=25279 comm="safe_timer" name="libpod-007039c67f5fe93561bc11f5022aa1b83f7960612a98612f62b3f7d629d69d27.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067996.629:7022): avc: denied { open } for pid=33907 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=21498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067996.629:7020): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/7/net/sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067985.179:6877): avc: denied { search } for pid=46071 comm="safe_timer" name="diff" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068337.383:8676): avc: denied { search } for pid=25279 comm="safe_timer" name="diff" dev="sda1" ino=1443998 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068267.583:8319): avc: denied { read } for pid=61313 comm="msgr-worker-0" path="pipe:[231790]" dev="pipefs" ino=231790 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067932.592:6689): avc: denied { search } for pid=24908 comm="rstore_compact" name="diff" dev="sda1" ino=1443979 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068126.041:7601): avc: denied { search } for pid=61313 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068198.101:7980): avc: denied { search } for pid=61313 comm="safe_timer" name="/" dev="overlay" ino=1970689 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c431,c852 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068066.629:7376): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068005.478:7058): avc: denied { search } for pid=36781 comm="grafana-server" name="diff" dev="sda1" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068076.629:7431): avc: denied { read } for pid=33907 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068128.733:7707): avc: denied { write } for pid=24885 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068006.629:7090): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/sys/class/net/lo" dev="sysfs" ino=21524 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068217.000:8133): avc: denied { append } for pid=61313 comm="log" path="/var/log/ceph/ceph-osd.3.log" dev="sda1" ino=396212 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068091.669:7490): avc: denied { read } for pid=24908 comm="msgr-worker-2" path="pipe:[124504]" dev="pipefs" ino=124504 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068212.762:8101): avc: denied { open } for pid=25279 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068056.630:7283): avc: denied { search } for pid=33907 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616068071.362:7386): avc: denied { write } for pid=78119 comm="msgr-worker-2" laddr=172.21.15.144 lport=54718 faddr=172.21.15.152 fport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067916.632:6612): avc: denied { read } for pid=33907 comm="node_exporter" name="file-nr" dev="proc" ino=160426 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068006.170:7073): avc: denied { open } for pid=61313 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068138.336:7757): avc: denied { read } for pid=25279 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067936.630:6735): avc: denied { read } for pid=33907 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068128.479:7703): avc: denied { open } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068059.479:7352): avc: denied { open } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067986.630:6916): avc: denied { read } for pid=33907 comm="node_exporter" name="eno1" dev="sysfs" ino=35389 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068085.375:7477): avc: denied { create } for pid=36781 comm="grafana-server" name="grafana.db-journal" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068276.630:8431): avc: denied { read } for pid=33907 comm="node_exporter" name="hwmon0" dev="sysfs" ino=35588 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068197.926:7972): avc: denied { search } for pid=24885 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067992.873:7012): avc: denied { getattr } for pid=24908 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi144/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068075.954:7421): avc: denied { open } for pid=25279 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068076.629:7432): avc: denied { read } for pid=33907 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068077.478:7461): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/etc" dev="sda1" ino=1968494 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067917.855:6643): avc: denied { search } for pid=24908 comm="safe_timer" name="/" dev="overlay" ino=1443979 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c138,c292 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067936.631:6741): avc: denied { read } for pid=33907 comm="node_exporter" name="file-nr" dev="proc" ino=160426 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.480:7789): avc: denied { open } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-detail.json" dev="overlay" ino=1574984 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067916.633:6618): avc: denied { search } for pid=33907 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616067913.862:6554): avc: denied { write } for pid=24885 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068353.468:8816): avc: denied { search } for pid=25279 comm="safe_timer" name="usr" dev="sda1" ino=789157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067936.631:6750): avc: denied { open } for pid=33907 comm="node_exporter" path="/sys/fs/xfs/dm-4/stats/stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068268.074:8337): avc: denied { search } for pid=50453 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068336.759:8670): avc: denied { read } for pid=25279 comm="msgr-worker-1" path="socket:[276838]" dev="sockfs" ino=276838 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068356.630:8861): avc: denied { search } for pid=33907 comm="node_exporter" name="fs" dev="proc" ino=160425 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068056.204:7247): avc: denied { search } for pid=61313 comm="safe_timer" name="/" dev="overlay" ino=1970689 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c431,c852 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068286.072:8488): avc: denied { read } for pid=24885 comm="conmon" path="pipe:[124477]" dev="pipefs" ino=124477 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068346.630:8781): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068001.537:7044): avc: denied { signal } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067996.629:7017): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=164528 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068286.629:8500): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=21498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067998.599:7040): avc: denied { search } for pid=24885 comm="conmon" name="/" dev="tmpfs" ino=14361 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067935.213:6708): avc: denied { open } for pid=25279 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068056.629:7261): avc: denied { search } for pid=33907 comm="node_exporter" name="7" dev="proc" ino=159982 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067992.872:7011): avc: denied { search } for pid=24908 comm="safe_timer" name="mon.smithi144" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068216.630:8123): avc: denied { read } for pid=33907 comm="node_exporter" name="hwmon0" dev="sysfs" ino=35588 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067936.631:6743): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068056.204:7248): avc: denied { read } for pid=61313 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068337.383:8679): avc: denied { read } for pid=25279 comm="safe_timer" name="os-release" dev="sda1" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068126.757:7661): avc: denied { search } for pid=46071 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c131,c293 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068094.052:7498): avc: denied { getattr } for pid=25279 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067988.598:6987): avc: denied { search } for pid=24885 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067996.631:7036): avc: denied { search } for pid=33907 comm="node_exporter" name="/" dev="tmpfs" ino=14361 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067935.010:6699): avc: denied { read } for pid=75114 comm="msgr-worker-1" path="pipe:[270603]" dev="pipefs" ino=270603 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068130.741:7726): avc: denied { search } for pid=24885 comm="conmon" name="systemd" dev="tmpfs" ino=14370 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068075.942:7419): avc: denied { read } for pid=25279 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068126.274:7612): avc: denied { read } for pid=25279 comm="safe_timer" name="os-release" dev="overlay" ino=394714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068094.052:7497): avc: denied { open } for pid=25279 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.385:7782): avc: denied { open } for pid=25279 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068075.670:7413): avc: denied { search } for pid=24885 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068056.638:7286): avc: denied { append } for pid=45496 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c629 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068362.430:8882): avc: denied { connect } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068076.630:7444): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=159485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068269.762:8387): avc: denied { write } for pid=24908 comm="ms_dispatch" path="pipe:[124504]" dev="pipefs" ino=124504 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068198.689:7984): avc: denied { search } for pid=25279 comm="safe_timer" name="/" dev="overlay" ino=1443998 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068206.631:8086): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068218.480:8165): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068287.926:8526): avc: denied { open } for pid=24908 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi144/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068286.628:8494): avc: denied { signal } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068132.430:7734): avc: denied { connect } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067996.629:7024): avc: denied { read } for pid=33907 comm="node_exporter" name="ce_count" dev="sysfs" ino=43916 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068276.632:8447): avc: denied { search } for pid=33907 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068338.639:8717): avc: denied { search } for pid=50453 comm="safe_timer" name="/" dev="overlay" ino=1970651 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c490,c885 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068057.550:7305): avc: denied { search } for pid=61313 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970689 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c431,c852 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067917.312:6636): avc: denied { open } for pid=61313 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067916.630:6600): avc: denied { read } for pid=33907 comm="node_exporter" name="entropy_avail" dev="proc" ino=159485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068353.084:8809): avc: denied { search } for pid=50453 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068353.468:8816): avc: denied { read } for pid=25279 comm="safe_timer" name="os-release" dev="sda1" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068353.468:8816): avc: denied { read } for pid=25279 comm="safe_timer" name="os-release" dev="sda1" ino=394714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068206.630:8071): avc: denied { search } for pid=33907 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067996.631:7034): avc: denied { getattr } for pid=33907 comm="node_exporter" name="/" dev="tmpfs" ino=14362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068217.959:8154): avc: denied { search } for pid=24885 comm="conmon" name="systemd" dev="tmpfs" ino=14370 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068337.783:8681): avc: denied { search } for pid=61313 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970689 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c431,c852 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068085.443:7478): avc: denied { unlink } for pid=36781 comm="grafana-server" name="grafana.db-journal" dev="overlay" ino=1970615 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068337.935:8683): avc: denied { open } for pid=24908 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi144/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068142.034:7762): avc: denied { open } for pid=61313 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068200.480:8034): avc: denied { read open } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068341.478:8745): avc: denied { search } for pid=36781 comm="grafana-server" name="/" dev="overlay" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068152.431:7846): avc: denied { setopt } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068217.959:8154): avc: denied { write } for pid=24885 comm="conmon" name="socket" dev="tmpfs" ino=1184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068346.630:8780): avc: denied { read } for pid=33907 comm="node_exporter" name="mounts" dev="proc" ino=164950 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068353.456:8814): avc: denied { search } for pid=25279 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068005.479:7063): avc: denied { read } for pid=36781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068006.629:7085): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=164528 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067996.630:7029): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067986.630:6910): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068276.630:8429): avc: denied { read } for pid=33907 comm="node_exporter" name="hwmon" dev="sysfs" ino=21483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.632:7815): avc: denied { search } for pid=33907 comm="node_exporter" name="rpc" dev="proc" ino=4026532409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067986.309:6897): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067916.631:6606): avc: denied { open } for pid=33907 comm="node_exporter" path="/sys/class/net" dev="sysfs" ino=21519 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067936.479:6719): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068269.480:8366): avc: denied { read } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067989.460:6991): avc: denied { read } for pid=25279 comm="safe_timer" name="meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068197.911:7965): avc: denied { search } for pid=24908 comm="safe_timer" name="/" dev="overlay" ino=1443979 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c138,c292 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067913.862:6554): avc: denied { search } for pid=24885 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068209.808:8100): avc: denied { getattr } for pid=45496 comm="prometheus" path="/prometheus/wal" dev="dm-4" ino=16777360 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c629 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068126.629:7625): avc: denied { read } for pid=33907 comm="node_exporter" name="stat" dev="proc" ino=164527 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068138.336:7757): avc: denied { open } for pid=25279 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068273.651:8423): avc: denied { getattr } for pid=25279 comm="mgr-fin" path="/usr/lib64/python3.6" dev="overlay" ino=1050261 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068300.648:8539): avc: denied { name_connect } for pid=25279 comm="msgr-worker-2" dest=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unreserved_port_t:s0 tclass=tcp_socket permissive=1', 'type=AVC msg=audit(1616068198.243:7982): avc: denied { search } for pid=50453 comm="safe_timer" name="/" dev="overlay" ino=1970651 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c490,c885 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067916.632:6613): avc: denied { getattr } for pid=33907 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068071.664:7389): avc: denied { search } for pid=24885 comm="conmon" name="systemd" dev="tmpfs" ino=14370 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068059.479:7354): avc: denied { open } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/cephfs-overview.json" dev="sda1" ino=1574977 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067935.213:6708): avc: denied { read } for pid=25279 comm="safe_timer" name="os-release" dev="overlay" ino=394714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068271.053:8404): avc: denied { read } for pid=25279 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068276.631:8438): avc: denied { search } for pid=33907 comm="node_exporter" name="rpc" dev="proc" ino=4026532409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067996.629:7016): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=164527 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068057.846:7317): avc: denied { search } for pid=25279 comm="safe_timer" name="etc" dev="sda1" ino=1444004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068092.614:7493): avc: denied { getattr } for pid=25279 comm="mgr-fin" path="/usr/lib64/python3.6" dev="overlay" ino=1050261 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068300.648:8544): avc: denied { getattr } for pid=25279 comm="msgr-worker-2" laddr=172.21.15.144 lport=50572 faddr=172.21.15.144 fport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068197.926:7970): avc: denied { use } for pid=24908 comm="fn_monstore" path="pipe:[124477]" dev="pipefs" ino=124477 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068226.629:8193): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/hwmon/hwmon0" dev="sysfs" ino=35584 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067985.447:6887): avc: denied { getattr } for pid=25279 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068276.630:8424): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.640:7822): avc: denied { append } for pid=45496 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c629 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067922.856:6672): avc: denied { getattr } for pid=24908 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi144/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068272.431:8414): avc: denied { setopt } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068226.629:8190): avc: denied { search } for pid=33907 comm="node_exporter" name="fs" dev="proc" ino=160425 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068206.630:8074): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068076.629:7441): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=160426 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067916.631:6611): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/sys/devices/system/cpu/cpu0/topology/physical_package_id" dev="sysfs" ino=28908 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068353.946:8835): avc: denied { sendto } for pid=24885 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067987.872:6963): avc: denied { getattr } for pid=24908 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi144/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068058.248:7331): avc: denied { search } for pid=46071 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c131,c293 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068136.630:7744): avc: denied { search } for pid=33907 comm="node_exporter" name="/" dev="overlay" ino=1970467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c480,c863 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068346.629:8778): avc: denied { open } for pid=33907 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/net/eno1/addr_assign_type" dev="sysfs" ino=35397 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067916.630:6595): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=164527 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.308:7776): avc: denied { lock } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068267.924:8326): avc: denied { write } for pid=24908 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi144/store.db/000021.log" dev="dm-4" ino=178 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068292.430:8530): avc: denied { create } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068270.048:8396): avc: denied { read } for pid=55839 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068126.629:7623): avc: denied { search } for pid=33907 comm="node_exporter" name="/" dev="overlay" ino=1970467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c480,c863 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068016.815:7129): avc: denied { open } for pid=86696 comm="pgrep" path="/proc/24908/status" dev="proc" ino=128239 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068286.072:8489): avc: denied { write } for pid=24885 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068349.432:8803): avc: denied { open } for pid=25279 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068076.828:7459): avc: denied { read } for pid=89761 comm="pgrep" name="status" dev="proc" ino=128239 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068362.430:8880): avc: denied { create } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067932.588:6687): avc: denied { write } for pid=24908 comm="fn_monstore" path="pipe:[124477]" dev="pipefs" ino=124477 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067936.309:6717): avc: denied { read } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067985.179:6879): avc: denied { search } for pid=46071 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068006.600:7077): avc: denied { search } for pid=24885 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067932.606:6693): avc: denied { unlink } for pid=24908 comm="rocksdb:high0" name="000012.log" dev="dm-4" ino=178 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067936.632:6757): avc: denied { search } for pid=33907 comm="node_exporter" name="net" dev="proc" ino=159988 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068216.633:8130): avc: denied { search } for pid=33907 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068056.479:7257): avc: denied { read } for pid=36781 comm="grafana-server" name="pool-overview.json" dev="sda1" ino=1574983 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067916.630:6597): avc: denied { search } for pid=33907 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068284.456:8459): avc: denied { append } for pid=50453 comm="log" path="/var/log/ceph/ceph-osd.1.log" dev="sda1" ino=396206 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068055.834:7237): avc: denied { append } for pid=24908 comm="log" path="/var/log/ceph/ceph-mon.smithi144.log" dev="sda1" ino=396130 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068268.038:8331): avc: denied { read } for pid=24885 comm="conmon" path="pipe:[124477]" dev="pipefs" ino=124477 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068269.479:8365): avc: denied { lock } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068353.939:8832): avc: denied { write } for pid=24908 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi144/store.db/000021.log" dev="dm-4" ino=178 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068085.375:7477): avc: denied { write } for pid=36781 comm="grafana-server" name="grafana" dev="sda1" ino=1968502 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068286.631:8513): avc: denied { read } for pid=33907 comm="node_exporter" name="mounts" dev="proc" ino=164950 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067996.629:7019): avc: denied { search } for pid=33907 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068016.814:7126): avc: denied { getattr } for pid=86696 comm="pgrep" path="/proc/24885" dev="proc" ino=122266 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068136.630:7745): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068362.430:8885): avc: denied { read } for pid=45496 comm="prometheus" path="socket:[370114]" dev="sockfs" ino=370114 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068126.262:7610): avc: denied { open } for pid=25279 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068292.430:8531): avc: denied { setopt } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067913.862:6554): avc: denied { sendto } for pid=24885 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068056.629:7267): avc: denied { read } for pid=33907 comm="node_exporter" name="sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068202.431:8055): avc: denied { setopt } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068287.926:8526): avc: denied { search } for pid=24908 comm="safe_timer" name="mon.smithi144" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068216.631:8127): avc: denied { read } for pid=33907 comm="node_exporter" name="file-nr" dev="proc" ino=160426 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068006.630:7096): avc: denied { search } for pid=33907 comm="node_exporter" name="fs" dev="proc" ino=160425 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068152.432:7851): avc: denied { write } for pid=45496 comm="prometheus" path="socket:[332432]" dev="sockfs" ino=332432 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068353.479:8823): avc: denied { lock } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068226.629:8187): avc: denied { read } for pid=33907 comm="node_exporter" name="fd" dev="proc" ino=164528 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068066.629:7370): avc: denied { open } for pid=33907 comm="node_exporter" path="/sys/class/net" dev="sysfs" ino=21519 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068137.900:7755): avc: denied { search } for pid=24908 comm="safe_timer" name="var" dev="sda1" ino=1443990 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c138,c292 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068146.631:7809): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=164950 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068218.479:8162): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/etc" dev="sda1" ino=1968494 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068287.926:8525): avc: denied { search } for pid=24908 comm="safe_timer" name="/" dev="overlay" ino=1443979 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c138,c292 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068337.383:8679): avc: denied { read } for pid=25279 comm="safe_timer" name="os-release" dev="sda1" ino=394714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068146.385:7783): avc: denied { getattr } for pid=25279 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068356.630:8861): avc: denied { read } for pid=33907 comm="node_exporter" name="file-nr" dev="proc" ino=160426 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068216.631:8126): avc: denied { search } for pid=33907 comm="node_exporter" name="1" dev="proc" ino=157102 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068085.443:7478): avc: denied { remove_name } for pid=36781 comm="grafana-server" name="grafana.db-journal" dev="sda1" ino=1970615 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068056.629:7272): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/hwmon/hwmon0/uevent" dev="sysfs" ino=35585 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.632:7817): avc: denied { search } for pid=33907 comm="node_exporter" name="/" dev="tmpfs" ino=14361 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067997.507:7038): avc: denied { open } for pid=25279 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067930.480:6685): avc: denied { read } for pid=36781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067937.861:6766): avc: denied { getattr } for pid=24908 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi144/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068085.375:7477): avc: denied { add_name } for pid=36781 comm="grafana-server" name="grafana.db-journal" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068356.630:8861): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=160426 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068272.431:8416): avc: denied { connect } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068061.537:7355): avc: denied { signal } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067913.862:6554): avc: denied { write } for pid=24885 comm="conmon" name="socket" dev="tmpfs" ino=1184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068075.670:7413): avc: denied { write } for pid=24885 comm="conmon" name="socket" dev="tmpfs" ino=1184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068268.038:8332): avc: denied { search } for pid=24885 comm="conmon" name="journal" dev="tmpfs" ino=1180 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068338.479:8715): avc: denied { read open } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067986.595:6899): avc: denied { use } for pid=24908 comm="fn_monstore" path="pipe:[124477]" dev="pipefs" ino=124477 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068272.431:8415): avc: denied { connect } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067986.595:6899): avc: denied { write } for pid=24908 comm="fn_monstore" path="pipe:[124477]" dev="pipefs" ino=124477 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068075.099:7395): avc: denied { search } for pid=46071 comm="safe_timer" name="diff" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067922.431:6668): avc: denied { write } for pid=45496 comm="prometheus" path="socket:[287286]" dev="sockfs" ino=287286 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068353.946:8835): avc: denied { search } for pid=24885 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068285.077:8480): avc: denied { open } for pid=46071 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.362:7780): avc: denied { read } for pid=46071 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067936.633:6758): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=43728 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068056.308:7250): avc: denied { search } for pid=36781 comm="grafana-server" name="/" dev="overlay" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068285.069:8479): avc: denied { write } for pid=24908 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi144/store.db/000021.log" dev="dm-4" ino=178 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068136.842:7751): avc: denied { search } for pid=92770 comm="pgrep" name="24885" dev="proc" ino=122266 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068362.430:8879): avc: denied { create } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068056.629:7268): avc: denied { search } for pid=33907 comm="node_exporter" name="kernel" dev="proc" ino=160351 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068226.630:8197): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067935.201:6706): avc: denied { open } for pid=25279 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068285.741:8486): avc: denied { search } for pid=55839 comm="safe_timer" name="/" dev="overlay" ino=1970670 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c421,c817 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068338.479:8716): avc: denied { open } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/pool-detail.json" dev="overlay" ino=1574982 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.630:7795): avc: denied { search } for pid=33907 comm="node_exporter" name="7" dev="proc" ino=159982 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068077.887:7467): avc: denied { getattr } for pid=24908 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi144/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068212.762:8102): avc: denied { getattr } for pid=25279 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068056.629:7269): avc: denied { read } for pid=33907 comm="node_exporter" name="hwmon0" dev="sysfs" ino=35588 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067936.632:6756): avc: denied { read } for pid=33907 comm="node_exporter" name="cpufreq" dev="sysfs" ino=30758 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068128.752:7713): avc: denied { read } for pid=24908 comm="rocksdb:high0" name="000022.sst" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068126.274:7612): avc: denied { read } for pid=25279 comm="safe_timer" name="os-release" dev="sda1" ino=394714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067942.430:6768): avc: denied { search } for pid=45496 comm="prometheus" name="etc" dev="sda1" ino=1970592 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c629 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068202.431:8056): avc: denied { connect } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068075.942:7420): avc: denied { getattr } for pid=25279 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068006.629:7084): avc: denied { read } for pid=33907 comm="node_exporter" name="stat" dev="proc" ino=164527 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068126.041:7603): avc: denied { search } for pid=61313 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068276.630:8434): avc: denied { read } for pid=33907 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068362.430:8884): avc: denied { write } for pid=45496 comm="prometheus" path="socket:[367400]" dev="sockfs" ino=367400 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068077.479:7463): avc: denied { open } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/osd-device-details.json" dev="overlay" ino=1574980 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068272.431:8417): avc: denied { getattr } for pid=45496 comm="prometheus" laddr=172.21.15.144 lport=53997 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.630:7795): avc: denied { read } for pid=33907 comm="node_exporter" name="stat" dev="proc" ino=164527 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068200.480:8033): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067987.872:6962): avc: denied { getattr } for pid=24908 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi144/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067987.529:6959): avc: denied { write } for pid=46071 comm="msgr-worker-0" laddr=172.21.15.144 lport=6802 faddr=172.21.15.152 fport=48028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067989.460:6992): avc: denied { open } for pid=25279 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.630:7793): avc: denied { search } for pid=33907 comm="node_exporter" name="/" dev="overlay" ino=1970467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c480,c863 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068337.383:8677): avc: denied { open } for pid=25279 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.631:7809): avc: denied { search } for pid=33907 comm="node_exporter" name="1" dev="proc" ino=157102 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068209.808:8098): avc: denied { read } for pid=45496 comm="prometheus" name="data" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c629 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068267.924:8325): avc: denied { getattr } for pid=24908 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi144/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068286.629:8498): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=164528 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068286.629:8499): avc: denied { read } for pid=33907 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067926.631:6676): avc: denied { search } for pid=33907 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616068337.935:8682): avc: denied { search } for pid=24908 comm="safe_timer" name="var" dev="sda1" ino=1443990 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c138,c292 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068057.834:7315): avc: denied { search } for pid=25279 comm="safe_timer" name="libpod-007039c67f5fe93561bc11f5022aa1b83f7960612a98612f62b3f7d629d69d27.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068076.629:7436): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068126.629:7628): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068226.630:8201): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=159485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068059.479:7354): avc: denied { read } for pid=36781 comm="grafana-server" name="cephfs-overview.json" dev="sda1" ino=1574977 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068146.763:7827): avc: denied { use } for pid=24908 comm="fn_monstore" path="pipe:[124477]" dev="pipefs" ino=124477 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067935.201:6706): avc: denied { search } for pid=25279 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067985.179:6878): avc: denied { append } for pid=46071 comm="log" path="/var/log/ceph/ceph-osd.0.log" dev="sda1" ino=396203 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068336.760:8671): avc: denied { append } for pid=25279 comm="log" path="/var/log/ceph/ceph-mgr.smithi144.csetuh.log" dev="sda1" ino=396136 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068353.478:8821): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068269.480:8369): avc: denied { open } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/pool-overview.json" dev="overlay" ino=1574983 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068347.937:8799): avc: denied { search } for pid=24908 comm="safe_timer" name="mon.smithi144" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068076.629:7427): avc: denied { search } for pid=33907 comm="node_exporter" name="/" dev="overlay" ino=1970467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c480,c863 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067937.861:6764): avc: denied { open } for pid=24908 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi144/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068356.630:8863): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068075.233:7403): avc: denied { write } for pid=75566 comm="msgr-worker-1" laddr=172.21.15.144 lport=51788 faddr=172.21.15.144 fport=6802 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067985.179:6877): avc: denied { search } for pid=46071 comm="safe_timer" name="/" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c131,c293 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067986.596:6901): avc: denied { search } for pid=24885 comm="conmon" name="/" dev="tmpfs" ino=14361 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068127.897:7680): avc: denied { search } for pid=24908 comm="safe_timer" name="/" dev="overlay" ino=1443979 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c138,c292 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068016.815:7129): avc: denied { search } for pid=86696 comm="pgrep" name="24908" dev="proc" ino=128204 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068076.631:7451): avc: denied { search } for pid=33907 comm="node_exporter" name="user" dev="tmpfs" ino=16432 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067915.479:6573): avc: denied { read } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068353.250:8811): avc: denied { append } for pid=61313 comm="log" path="/var/log/ceph/ceph-osd.3.log" dev="sda1" ino=396212 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068076.308:7426): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068267.583:8318): avc: denied { write } for pid=61313 comm="tp_osd_tp" path="pipe:[231790]" dev="pipefs" ino=231790 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068267.583:8320): avc: denied { write } for pid=61313 comm="msgr-worker-0" laddr=172.21.15.144 lport=6826 faddr=172.21.15.152 fport=43052 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067935.213:6708): avc: denied { read } for pid=25279 comm="safe_timer" name="os-release" dev="overlay" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068082.431:7471): avc: denied { setopt } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.631:7810): avc: denied { getattr } for pid=33907 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068006.648:7109): avc: denied { append } for pid=45496 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c629 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068126.274:7612): avc: denied { read } for pid=25279 comm="safe_timer" name="os-release" dev="overlay" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068346.629:8770): avc: denied { search } for pid=33907 comm="node_exporter" name="net" dev="proc" ino=159988 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068341.479:8749): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068200.933:8039): avc: denied { write } for pid=24885 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067937.861:6764): avc: denied { search } for pid=24908 comm="safe_timer" name="mon.smithi144" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067985.459:6888): avc: denied { open } for pid=25279 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068137.067:7754): avc: denied { search } for pid=61313 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067935.590:6712): avc: denied { search } for pid=50453 comm="safe_timer" name="/" dev="overlay" ino=1970651 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c490,c885 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068197.911:7968): avc: denied { getattr } for pid=24908 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi144/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068136.630:7747): avc: denied { read } for pid=33907 comm="node_exporter" name="sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068346.630:8780): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=164950 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068006.629:7089): avc: denied { search } for pid=33907 comm="node_exporter" name="rpc" dev="proc" ino=4026532409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068076.828:7456): avc: denied { getattr } for pid=89761 comm="pgrep" path="/proc/24885" dev="proc" ino=122266 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068126.730:7656): avc: denied { search } for pid=24885 comm="conmon" name="systemd" dev="tmpfs" ino=14370 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068285.125:8481): avc: denied { read } for pid=25279 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068062.430:7360): avc: denied { getattr } for pid=45496 comm="prometheus" path="/etc/hosts" dev="tmpfs" ino=189966 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068006.631:7102): avc: denied { getattr } for pid=33907 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068132.430:7736): avc: denied { write } for pid=45496 comm="prometheus" path="socket:[328760]" dev="sockfs" ino=328760 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068353.456:8814): avc: denied { read } for pid=25279 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068338.238:8703): avc: denied { write } for pid=24908 comm="fn_monstore" path="pipe:[124477]" dev="pipefs" ino=124477 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067996.631:7037): avc: denied { search } for pid=33907 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616068200.480:8033): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068075.942:7419): avc: denied { open } for pid=25279 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067935.010:6698): avc: denied { write } for pid=75114 comm="ceph_timer" path="pipe:[270603]" dev="pipefs" ino=270603 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068217.959:8152): avc: denied { write } for pid=24908 comm="fn_monstore" path="pipe:[124477]" dev="pipefs" ino=124477 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068269.479:8363): avc: denied { search } for pid=36781 comm="grafana-server" name="etc" dev="sda1" ino=1968494 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068126.730:7654): avc: denied { use } for pid=24908 comm="fn_monstore" path="pipe:[124477]" dev="pipefs" ino=124477 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068287.926:8527): avc: denied { getattr } for pid=24908 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi144/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067986.650:6934): avc: denied { append } for pid=45496 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c629 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068056.629:7263): avc: denied { read } for pid=33907 comm="node_exporter" name="net" dev="sysfs" ino=21519 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068286.629:8495): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068127.562:7679): avc: denied { open } for pid=55839 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068353.468:8816): avc: denied { open } for pid=25279 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068126.630:7638): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=43728 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068082.431:7472): avc: denied { connect } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068082.431:7475): avc: denied { read } for pid=45496 comm="prometheus" path="socket:[313303]" dev="sockfs" ino=313303 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068270.041:8393): avc: denied { use } for pid=24908 comm="fn_monstore" path="pipe:[124477]" dev="pipefs" ino=124477 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067936.630:6731): avc: denied { search } for pid=33907 comm="node_exporter" name="/" dev="overlay" ino=1970467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c480,c863 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068272.924:8420): avc: denied { search } for pid=24908 comm="safe_timer" name="var" dev="sda1" ino=1443990 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c138,c292 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067913.679:6546): avc: denied { read } for pid=77122 comm="msgr-worker-1" path="pipe:[274888]" dev="pipefs" ino=274888 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068354.186:8840): avc: denied { search } for pid=46071 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c131,c293 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068222.431:8178): avc: denied { create } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068353.468:8816): avc: denied { search } for pid=25279 comm="safe_timer" name="etc" dev="sda1" ino=1444004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068353.479:8826): avc: denied { read } for pid=36781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067922.856:6671): avc: denied { search } for pid=24908 comm="safe_timer" name="mon.smithi144" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067916.633:6614): avc: denied { getattr } for pid=33907 comm="node_exporter" name="/" dev="tmpfs" ino=14362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067936.631:6741): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=160426 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068214.570:8106): avc: denied { search } for pid=46071 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068006.629:7086): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/7/net/arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067932.588:6688): avc: denied { read } for pid=24885 comm="conmon" path="pipe:[124477]" dev="pipefs" ino=124477 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068337.935:8682): avc: denied { search } for pid=24908 comm="safe_timer" name="/" dev="overlay" ino=1443979 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c138,c292 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067915.115:6569): avc: denied { open } for pid=25279 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068206.630:8069): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=164527 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068058.885:7340): avc: denied { write } for pid=24908 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi144/store.db/000018.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068126.629:7625): avc: denied { search } for pid=33907 comm="node_exporter" name="7" dev="proc" ino=159982 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068007.874:7110): avc: denied { search } for pid=24908 comm="safe_timer" name="/" dev="overlay" ino=1443979 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c138,c292 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068337.935:8682): avc: denied { dac_read_search } for pid=24908 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068146.631:7806): avc: denied { search } for pid=33907 comm="node_exporter" name="kernel" dev="proc" ino=160351 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068338.478:8710): avc: denied { search } for pid=36781 comm="grafana-server" name="/" dev="overlay" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068094.052:7497): avc: denied { read } for pid=25279 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067936.630:6733): avc: denied { read } for pid=33907 comm="node_exporter" name="stat" dev="proc" ino=164527 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067986.596:6901): avc: denied { search } for pid=24885 comm="conmon" name="journal" dev="tmpfs" ino=1180 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067916.630:6598): avc: denied { read } for pid=33907 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068271.540:8408): avc: denied { append } for pid=45496 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c629 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068126.274:7612): avc: denied { search } for pid=25279 comm="safe_timer" name="usr" dev="sda1" ino=789157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068152.431:7843): avc: denied { search } for pid=45496 comm="prometheus" name="etc" dev="sda1" ino=1970592 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c629 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068348.254:8801): avc: denied { write } for pid=24908 comm="fn_monstore" path="pipe:[124477]" dev="pipefs" ino=124477 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068126.729:7653): avc: denied { write } for pid=24908 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi144/store.db/000018.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.235:7773): avc: denied { append } for pid=61313 comm="log" path="/var/log/ceph/ceph-osd.3.log" dev="sda1" ino=396212 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068353.468:8820): avc: denied { write } for pid=25279 comm="msgr-worker-1" laddr=172.21.15.144 lport=43072 faddr=172.21.15.144 fport=3300 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067992.431:7001): avc: denied { create } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067986.631:6927): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067935.579:6711): avc: denied { write } for pid=24908 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi144/store.db/000018.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068336.668:8661): avc: denied { search } for pid=33907 comm="node_exporter" name="/" dev="tmpfs" ino=14361 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067932.592:6691): avc: denied { getattr } for pid=24908 comm="rstore_compact" path="/sys/devices/virtual/block/dm-4/queue/logical_block_size" dev="sysfs" ino=45217 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068276.630:8434): avc: denied { read } for pid=33907 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068276.632:8446): avc: denied { search } for pid=33907 comm="node_exporter" name="user" dev="tmpfs" ino=16432 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067987.872:6960): avc: denied { dac_read_search } for pid=24908 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068197.749:7960): avc: denied { write } for pid=24908 comm="msgr-worker-2" laddr=172.21.15.144 lport=3300 faddr=172.21.15.152 fport=49234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068126.041:7603): avc: denied { open } for pid=61313 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068353.478:8821): avc: denied { search } for pid=36781 comm="grafana-server" name="etc" dev="sda1" ino=1968494 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068202.039:8051): avc: denied { search } for pid=55839 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970670 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c421,c817 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068286.072:8489): avc: denied { search } for pid=24885 comm="conmon" name="/" dev="tmpfs" ino=14361 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068005.544:7067): avc: denied { search } for pid=25279 comm="safe_timer" name="libpod-007039c67f5fe93561bc11f5022aa1b83f7960612a98612f62b3f7d629d69d27.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068202.912:8063): avc: denied { getattr } for pid=24908 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi144/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068005.544:7068): avc: denied { getattr } for pid=25279 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068202.431:8059): avc: denied { write } for pid=45496 comm="prometheus" path="socket:[341336]" dev="sockfs" ino=341336 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068076.308:7425): avc: denied { read } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068217.170:8140): avc: denied { open } for pid=61313 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068128.679:7705): avc: denied { write } for pid=24908 comm="msgr-worker-2" laddr=172.21.15.144 lport=3300 faddr=172.21.15.144 fport=43072 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068075.197:7400): avc: denied { read } for pid=25279 comm="msgr-worker-2" path="socket:[236258]" dev="sockfs" ino=236258 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068138.348:7759): avc: denied { read } for pid=25279 comm="safe_timer" name="os-release" dev="overlay" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068197.750:7962): avc: denied { write } for pid=24908 comm="ms_dispatch" path="pipe:[124504]" dev="pipefs" ino=124504 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068269.480:8367): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068146.309:7778): avc: denied { read } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068217.914:8148): avc: denied { open } for pid=24908 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi144/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068214.786:8109): avc: denied { getattr } for pid=25279 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068006.630:7093): avc: denied { read } for pid=33907 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068285.125:8481): avc: denied { search } for pid=25279 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068126.629:7630): avc: denied { open } for pid=33907 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=21498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068075.233:7401): avc: denied { write } for pid=75566 comm="ceph_timer" path="pipe:[270851]" dev="pipefs" ino=270851 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068126.629:7629): avc: denied { read } for pid=33907 comm="node_exporter" name="entropy_avail" dev="proc" ino=159485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068346.631:8786): avc: denied { search } for pid=33907 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067988.204:6984): avc: denied { read } for pid=75566 comm="msgr-worker-2" path="pipe:[270852]" dev="pipefs" ino=270852 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068077.887:7464): avc: denied { search } for pid=24908 comm="safe_timer" name="/" dev="overlay" ino=1443979 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c138,c292 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.630:7804): avc: denied { read } for pid=33907 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068202.431:8060): avc: denied { read } for pid=45496 comm="prometheus" path="socket:[343253]" dev="sockfs" ino=343253 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067996.629:7021): avc: denied { search } for pid=33907 comm="node_exporter" name="fs" dev="proc" ino=160425 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068056.204:7247): avc: denied { search } for pid=61313 comm="safe_timer" name="diff" dev="sda1" ino=1970689 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068056.630:7276): avc: denied { getattr } for pid=33907 comm="node_exporter" name="/" dev="tmpfs" ino=14362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068198.701:7987): avc: denied { read } for pid=25279 comm="safe_timer" name="os-release" dev="sda1" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068056.629:7267): avc: denied { read } for pid=33907 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068059.478:7350): avc: denied { read } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067987.480:6956): avc: denied { read } for pid=36781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068336.668:8662): avc: denied { search } for pid=33907 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068062.430:7360): avc: denied { search } for pid=45496 comm="prometheus" name="/" dev="overlay" ino=1970584 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c629 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067986.630:6918): avc: denied { read } for pid=33907 comm="node_exporter" name="entropy_avail" dev="proc" ino=159485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068138.336:7758): avc: denied { getattr } for pid=25279 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068198.452:7983): avc: denied { search } for pid=55839 comm="safe_timer" name="/" dev="overlay" ino=1970670 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c421,c817 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067985.593:6893): avc: denied { write } for pid=24908 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi144/store.db/000018.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068269.480:8368): avc: denied { read open } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068197.926:7972): avc: denied { search } for pid=24885 comm="conmon" name="systemd" dev="tmpfs" ino=14370 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068132.430:7731): avc: denied { create } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067922.431:6665): avc: denied { setopt } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.385:7782): avc: denied { search } for pid=25279 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068066.630:7377): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=164950 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068006.629:7092): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068056.308:7249): avc: denied { lock } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067993.642:7013): avc: denied { search } for pid=50453 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970651 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c490,c885 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068056.629:7265): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/sys/class/net/lo" dev="sysfs" ino=21524 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068353.456:8814): avc: denied { search } for pid=25279 comm="safe_timer" name="libpod-007039c67f5fe93561bc11f5022aa1b83f7960612a98612f62b3f7d629d69d27.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068072.430:7390): avc: denied { search } for pid=45496 comm="prometheus" name="/" dev="overlay" ino=1970584 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c629 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068075.942:7419): avc: denied { search } for pid=25279 comm="safe_timer" name="libpod-007039c67f5fe93561bc11f5022aa1b83f7960612a98612f62b3f7d629d69d27.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067986.630:6912): avc: denied { read } for pid=33907 comm="node_exporter" name="xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068336.668:8663): avc: denied { search } for pid=33907 comm="node_exporter" name="host" dev="sda1" ino=1970476 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c480,c863 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068006.631:7103): avc: denied { getattr } for pid=33907 comm="node_exporter" name="/" dev="tmpfs" ino=14362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068276.630:8429): avc: denied { open } for pid=33907 comm="node_exporter" path="/sys/class/hwmon" dev="sysfs" ino=21483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068126.041:7601): avc: denied { search } for pid=61313 comm="safe_timer" name="diff" dev="sda1" ino=1970689 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068216.630:8124): avc: denied { open } for pid=33907 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=43916 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068346.629:8768): avc: denied { search } for pid=33907 comm="node_exporter" name="7" dev="proc" ino=159982 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.309:7779): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067918.480:6652): avc: denied { read } for pid=36781 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067992.872:7010): avc: denied { dac_read_search } for pid=24908 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067996.629:7018): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=21498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068152.431:7844): avc: denied { create } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.763:7829): avc: denied { sendto } for pid=24885 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068126.681:7652): avc: denied { search } for pid=50453 comm="safe_timer" name="/" dev="overlay" ino=1970651 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c490,c885 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068056.204:7247): avc: denied { read } for pid=61313 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.632:7820): avc: denied { search } for pid=33907 comm="node_exporter" name="host" dev="sda1" ino=1970476 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c480,c863 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068285.472:8485): avc: denied { search } for pid=50453 comm="safe_timer" name="/" dev="overlay" ino=1970651 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c490,c885 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067936.631:6740): avc: denied { search } for pid=33907 comm="node_exporter" name="rpc" dev="proc" ino=4026532409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067916.633:6617): avc: denied { search } for pid=33907 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068016.814:7127): avc: denied { read } for pid=86696 comm="pgrep" name="status" dev="proc" ino=122270 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068338.478:8714): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068337.935:8682): avc: denied { getattr } for pid=24908 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068216.630:8116): avc: denied { search } for pid=33907 comm="node_exporter" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068006.629:7082): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068284.479:8466): avc: denied { read } for pid=36781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068352.938:8808): avc: denied { search } for pid=24908 comm="safe_timer" name="var" dev="sda1" ino=1443990 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c138,c292 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068338.478:8713): avc: denied { read } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068197.911:7965): avc: denied { getattr } for pid=24908 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068126.628:7622): avc: denied { signal } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068076.629:7432): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/7/net/sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068206.631:8082): avc: denied { read } for pid=33907 comm="node_exporter" name="cpufreq" dev="sysfs" ino=30758 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.234:7767): avc: denied { read } for pid=50453 comm="msgr-worker-2" path="socket:[236223]" dev="sockfs" ino=236223 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068226.629:8188): avc: denied { open } for pid=33907 comm="node_exporter" path="/sys/class/hwmon" dev="sysfs" ino=21483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068126.041:7602): avc: denied { append } for pid=61313 comm="log" path="/var/log/ceph/ceph-osd.3.log" dev="sda1" ino=396212 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068218.787:8170): avc: denied { search } for pid=25279 comm="safe_timer" name="libpod-007039c67f5fe93561bc11f5022aa1b83f7960612a98612f62b3f7d629d69d27.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068056.630:7277): avc: denied { read } for pid=33907 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067986.630:6909): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=164528 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068353.946:8835): avc: denied { search } for pid=24885 comm="conmon" name="/" dev="tmpfs" ino=14361 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068006.629:7086): avc: denied { read } for pid=33907 comm="node_exporter" name="arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067936.631:6753): avc: denied { search } for pid=33907 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068347.431:8795): avc: denied { search } for pid=25279 comm="safe_timer" name="usr" dev="sda1" ino=789157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068094.079:7499): avc: denied { read } for pid=25279 comm="safe_timer" name="os-release" dev="overlay" ino=394714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068200.479:8030): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/etc" dev="sda1" ino=1968494 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068276.633:8449): avc: denied { search } for pid=33907 comm="node_exporter" name="host" dev="sda1" ino=1970476 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c480,c863 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068006.600:7077): avc: denied { write } for pid=24885 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068126.522:7621): avc: denied { search } for pid=55839 comm="safe_timer" name="/" dev="overlay" ino=1970670 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c421,c817 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067935.201:6707): avc: denied { getattr } for pid=25279 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067936.631:6750): avc: denied { read } for pid=33907 comm="node_exporter" name="stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067986.631:6929): avc: denied { search } for pid=33907 comm="node_exporter" name="/" dev="tmpfs" ino=14361 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068276.630:8426): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=164527 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068300.648:8545): avc: denied { getattr } for pid=25279 comm="msgr-worker-0" laddr=172.21.15.144 lport=6800 faddr=172.21.15.144 fport=50572 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068089.805:7487): avc: denied { getattr } for pid=45496 comm="prometheus" path="/prometheus/queries.active" dev="dm-4" ino=158 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c629 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068337.935:8683): avc: denied { search } for pid=24908 comm="safe_timer" name="mon.smithi144" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067915.479:6574): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067917.855:6645): avc: denied { getattr } for pid=24908 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi144/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068347.582:8798): avc: denied { search } for pid=50453 comm="safe_timer" name="/" dev="overlay" ino=1970651 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c490,c885 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.630:7795): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=164527 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068005.022:7054): avc: denied { read } for pid=46071 comm="msgr-worker-2" path="socket:[265094]" dev="sockfs" ino=265094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067987.872:6960): avc: denied { search } for pid=24908 comm="safe_timer" name="/" dev="overlay" ino=1443979 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c138,c292 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068023.480:7135): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/etc" dev="sda1" ino=1968494 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068146.631:7809): avc: denied { read } for pid=33907 comm="node_exporter" name="mounts" dev="proc" ino=164950 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068126.629:7625): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=164527 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068006.630:7098): avc: denied { search } for pid=33907 comm="node_exporter" name="kernel" dev="proc" ino=160351 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068057.884:7319): avc: denied { search } for pid=24908 comm="safe_timer" name="/" dev="overlay" ino=1443979 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c138,c292 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067936.582:6724): avc: denied { read } for pid=24885 comm="conmon" path="pipe:[124477]" dev="pipefs" ino=124477 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067986.631:6928): avc: denied { search } for pid=33907 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068217.170:8140): avc: denied { search } for pid=61313 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068062.430:7366): avc: denied { read } for pid=45496 comm="prometheus" path="socket:[317003]" dev="sockfs" ino=317003 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067917.855:6646): avc: denied { getattr } for pid=24908 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi144/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067916.650:6620): avc: denied { append } for pid=45496 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c629 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068346.629:8776): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/hwmon/hwmon0" dev="sysfs" ino=35584 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068226.629:8192): avc: denied { search } for pid=33907 comm="node_exporter" name="rpc" dev="proc" ino=4026532409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068006.631:7103): avc: denied { search } for pid=33907 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068286.633:8521): avc: denied { search } for pid=33907 comm="node_exporter" name="kernel" dev="proc" ino=160351 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068127.897:7680): avc: denied { search } for pid=24908 comm="safe_timer" name="var" dev="sda1" ino=1443990 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c138,c292 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068356.631:8871): avc: denied { search } for pid=33907 comm="node_exporter" name="host" dev="sda1" ino=1970476 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c480,c863 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067987.872:6961): avc: denied { search } for pid=24908 comm="safe_timer" name="mon.smithi144" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068126.630:7639): avc: denied { search } for pid=33907 comm="node_exporter" name="net" dev="proc" ino=159988 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068206.630:8067): avc: denied { search } for pid=33907 comm="node_exporter" name="/" dev="overlay" ino=1970467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c480,c863 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068216.633:8131): avc: denied { search } for pid=33907 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068356.630:8859): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=164950 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068006.629:7084): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=164527 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068226.630:8196): avc: denied { open } for pid=33907 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/hwmon/hwmon0/temp1_crit" dev="sysfs" ino=35593 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068206.630:8076): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=164950 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067936.630:6734): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=164528 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068226.631:8208): avc: denied { search } for pid=33907 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068336.668:8662): avc: denied { search } for pid=33907 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.397:7784): avc: denied { search } for pid=25279 comm="safe_timer" name="usr" dev="sda1" ino=789157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069160.695:8986): avc: denied { write } for pid=25279 comm="msgr-worker-1" laddr=172.21.15.144 lport=50576 faddr=172.21.15.144 fport=6800 scontext=system_u:system_r:spc_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1', 'type=AVC msg=audit(1616068012.430:7118): avc: denied { create } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068075.233:7402): avc: denied { read } for pid=75566 comm="msgr-worker-1" path="pipe:[270851]" dev="pipefs" ino=270851 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068057.922:7323): avc: denied { search } for pid=55839 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970670 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c421,c817 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068344.479:8765): avc: denied { read open } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068347.937:8799): avc: denied { read } for pid=24908 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067915.480:6575): avc: denied { open } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068272.431:8411): avc: denied { search } for pid=45496 comm="prometheus" name="etc" dev="sda1" ino=1970592 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c629 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068268.313:8339): avc: denied { open } for pid=61313 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068268.038:8332): avc: denied { search } for pid=24885 comm="conmon" name="/" dev="tmpfs" ino=14361 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068276.630:8427): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=164528 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068276.631:8441): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=159485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067989.472:6994): avc: denied { read } for pid=25279 comm="safe_timer" name="os-release" dev="sda1" ino=394714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068056.479:7256): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="sda1" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068338.238:8703): avc: denied { use } for pid=24908 comm="fn_monstore" path="pipe:[124477]" dev="pipefs" ino=124477 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067985.179:6877): avc: denied { open } for pid=46071 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068008.042:7114): avc: denied { search } for pid=46071 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c131,c293 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068128.478:7698): avc: denied { search } for pid=36781 comm="grafana-server" name="etc" dev="sda1" ino=1968494 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068146.397:7784): avc: denied { read } for pid=25279 comm="safe_timer" name="os-release" dev="overlay" ino=394714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067985.459:6888): avc: denied { read } for pid=25279 comm="safe_timer" name="os-release" dev="overlay" ino=394714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068285.125:8481): avc: denied { open } for pid=25279 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067989.472:6994): avc: denied { search } for pid=25279 comm="safe_timer" name="usr" dev="sda1" ino=789157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068357.184:8873): avc: denied { search } for pid=50453 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970651 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c490,c885 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067915.479:6570): avc: denied { search } for pid=36781 comm="grafana-server" name="/" dev="overlay" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068315.651:8653): avc: denied { write } for pid=25279 comm="msgr-worker-1" laddr=172.21.15.144 lport=50576 faddr=172.21.15.144 fport=6800 scontext=system_u:system_r:spc_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1', 'type=AVC msg=audit(1616067996.631:7034): avc: denied { search } for pid=33907 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.630:7797): avc: denied { read } for pid=33907 comm="node_exporter" name="hwmon" dev="sysfs" ino=21483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068126.632:7649): avc: denied { search } for pid=33907 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616068276.632:8444): avc: denied { search } for pid=33907 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068062.430:7360): avc: denied { search } for pid=45496 comm="prometheus" name="etc" dev="sda1" ino=1970592 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c629 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068138.336:7756): avc: denied { search } for pid=25279 comm="safe_timer" name="/" dev="overlay" ino=1443998 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068198.701:7987): avc: denied { getattr } for pid=25279 comm="safe_timer" name="os-release" dev="sda1" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068056.629:7271): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=159485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068126.632:7648): avc: denied { search } for pid=33907 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068076.629:7428): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc/7" dev="proc" ino=159982 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068337.935:8683): avc: denied { read } for pid=24908 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067918.479:6649): avc: denied { lock } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068285.137:8483): avc: denied { open } for pid=25279 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068076.631:7449): avc: denied { getattr } for pid=33907 comm="node_exporter" name="/" dev="tmpfs" ino=14362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068199.929:8007): avc: denied { sendto } for pid=24885 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068226.629:8186): avc: denied { search } for pid=33907 comm="node_exporter" name="7" dev="proc" ino=159982 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068136.842:7751): avc: denied { read } for pid=92770 comm="pgrep" name="status" dev="proc" ino=122270 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068206.630:8079): avc: denied { read } for pid=33907 comm="node_exporter" name="file-nr" dev="proc" ino=160426 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068062.430:7361): avc: denied { create } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068059.478:7349): avc: denied { lock } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068346.685:8794): avc: denied { read } for pid=46071 comm="msgr-worker-0" path="pipe:[195661]" dev="pipefs" ino=195661 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067913.862:6554): avc: denied { search } for pid=24885 comm="conmon" name="/" dev="tmpfs" ino=14361 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068005.479:7063): avc: denied { read open } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068056.479:7257): avc: denied { open } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/pool-overview.json" dev="sda1" ino=1574983 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067935.201:6706): avc: denied { read } for pid=25279 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068075.100:7397): avc: denied { read } for pid=46071 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068082.431:7469): avc: denied { search } for pid=45496 comm="prometheus" name="/" dev="overlay" ino=1970584 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c629 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067935.135:6704): avc: denied { read } for pid=46071 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068020.474:7130): avc: denied { search } for pid=33092 comm="ceph-crash" name="/" dev="overlay" ino=1574833 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c102,c550 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068128.738:7712): avc: denied { create } for pid=24908 comm="rstore_compact" name="000021.log" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.631:7813): avc: denied { search } for pid=33907 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068272.044:8409): avc: denied { search } for pid=24885 comm="conmon" name="/" dev="tmpfs" ino=14361 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068337.383:8680): avc: denied { getattr } for pid=25279 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067937.861:6763): avc: denied { search } for pid=24908 comm="safe_timer" name="/" dev="overlay" ino=1443979 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c138,c292 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068128.478:7699): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/etc" dev="sda1" ino=1968494 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067989.460:6993): avc: denied { getattr } for pid=25279 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068284.758:8474): avc: denied { write } for pid=50453 comm="msgr-worker-2" laddr=172.21.15.144 lport=6814 faddr=172.21.15.152 fport=45592 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067987.872:6961): avc: denied { open } for pid=24908 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi144/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068057.697:7309): avc: denied { sendto } for pid=24885 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068337.383:8679): avc: denied { read } for pid=25279 comm="safe_timer" name="os-release" dev="overlay" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068356.629:8851): avc: denied { read } for pid=33907 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068136.630:7747): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/7/net/sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068271.065:8406): avc: denied { open } for pid=25279 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068012.430:7124): avc: denied { write } for pid=45496 comm="prometheus" path="socket:[309899]" dev="sockfs" ino=309899 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068057.697:7307): avc: denied { use } for pid=24908 comm="fn_monstore" path="pipe:[124477]" dev="pipefs" ino=124477 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068284.479:8468): avc: denied { read } for pid=36781 comm="grafana-server" name="ceph-cluster.json" dev="sda1" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067942.430:6774): avc: denied { write } for pid=45496 comm="prometheus" path="socket:[296996]" dev="sockfs" ino=296996 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068356.631:8865): avc: denied { search } for pid=33907 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068218.480:8166): avc: denied { read open } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068005.544:7067): avc: denied { read } for pid=25279 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067922.431:6663): avc: denied { search } for pid=45496 comm="prometheus" name="etc" dev="sda1" ino=1970592 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c629 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068085.616:7483): avc: denied { getattr } for pid=36781 comm="grafana-server" laddr=172.21.15.144 lport=44814 faddr=35.241.23.245 fport=443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068136.842:7753): avc: denied { search } for pid=92770 comm="pgrep" name="24908" dev="proc" ino=128204 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068091.670:7491): avc: denied { read } for pid=24885 comm="conmon" path="pipe:[124477]" dev="pipefs" ino=124477 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068082.431:7474): avc: denied { write } for pid=45496 comm="prometheus" path="socket:[315120]" dev="sockfs" ino=315120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068226.629:8185): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc/7" dev="proc" ino=159982 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068284.478:8462): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/etc" dev="sda1" ino=1968494 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068336.684:8664): avc: denied { append } for pid=45496 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c629 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068085.375:7477): avc: denied { write } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db-journal" dev="overlay" ino=1970615 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068346.631:8785): avc: denied { search } for pid=33907 comm="node_exporter" name="user" dev="tmpfs" ino=16432 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067990.480:6998): avc: denied { read } for pid=36781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068005.022:7053): avc: denied { write } for pid=75114 comm="msgr-worker-1" laddr=172.21.15.144 lport=51760 faddr=172.21.15.144 fport=6802 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068149.806:7841): avc: denied { getattr } for pid=45496 comm="prometheus" path="/prometheus/wal" dev="dm-4" ino=16777360 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c629 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068292.430:8534): avc: denied { write } for pid=45496 comm="prometheus" path="socket:[358419]" dev="sockfs" ino=358419 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068012.430:7122): avc: denied { connect } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068226.630:8204): avc: denied { read } for pid=33907 comm="node_exporter" name="sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068076.308:7424): avc: denied { search } for pid=36781 comm="grafana-server" name="/" dev="overlay" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068007.874:7112): avc: denied { getattr } for pid=24908 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi144/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068126.629:7627): avc: denied { read } for pid=33907 comm="node_exporter" name="sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068356.629:8855): avc: denied { read } for pid=33907 comm="node_exporter" name="eno1" dev="sysfs" ino=35389 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068128.738:7712): avc: denied { open } for pid=24908 comm="rstore_compact" path="/var/lib/ceph/mon/ceph-smithi144/store.db/000021.log" dev="dm-4" ino=178 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068085.375:7477): avc: denied { create } for pid=36781 comm="grafana-server" name="grafana.db-journal" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068356.629:8851): avc: denied { read } for pid=33907 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067915.480:6575): avc: denied { read } for pid=36781 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068076.828:7457): avc: denied { search } for pid=89761 comm="pgrep" name="24885" dev="proc" ino=122266 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068149.806:7839): avc: denied { open } for pid=45496 comm="prometheus" path="/prometheus" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c629 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068269.762:8388): avc: denied { read } for pid=24908 comm="msgr-worker-2" path="pipe:[124504]" dev="pipefs" ino=124504 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068276.630:8433): avc: denied { read } for pid=33907 comm="node_exporter" name="stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068198.825:7989): avc: denied { search } for pid=46071 comm="safe_timer" name="/" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c131,c293 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067986.309:6896): avc: denied { read } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067988.598:6987): avc: denied { search } for pid=24885 comm="conmon" name="journal" dev="tmpfs" ino=1180 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068076.629:7433): avc: denied { search } for pid=33907 comm="node_exporter" name="rpc" dev="proc" ino=4026532409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068269.808:8389): avc: denied { read } for pid=45496 comm="prometheus" name="data" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c629 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068128.479:7703): avc: denied { read } for pid=36781 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068300.648:8542): avc: denied { setopt } for pid=25279 comm="msgr-worker-0" laddr=172.21.15.144 lport=6800 faddr=172.21.15.144 fport=50572 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067930.207:6682): avc: denied { read } for pid=75566 comm="msgr-worker-1" path="pipe:[270851]" dev="pipefs" ino=270851 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068056.630:7284): avc: denied { search } for pid=33907 comm="node_exporter" name="host" dev="sda1" ino=1970476 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c480,c863 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067936.631:6739): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=159485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068198.701:7987): avc: denied { read } for pid=25279 comm="safe_timer" name="os-release" dev="overlay" ino=394714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067936.480:6721): avc: denied { read } for pid=36781 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.631:7806): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=159485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068300.648:8540): avc: denied { accept } for pid=25279 comm="msgr-worker-0" lport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068218.479:8161): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068350.257:8806): avc: denied { use } for pid=24908 comm="fn_monstore" path="pipe:[124477]" dev="pipefs" ino=124477 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068353.084:8809): avc: denied { open } for pid=50453 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068136.632:7749): avc: denied { search } for pid=33907 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616068218.479:8161): avc: denied { search } for pid=36781 comm="grafana-server" name="/" dev="overlay" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068300.648:8541): avc: denied { write } for pid=25279 comm="msgr-worker-2" laddr=172.21.15.144 lport=50572 faddr=172.21.15.144 fport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068300.648:8536): avc: denied { shutdown } for pid=25279 comm="msgr-worker-0" laddr=172.21.15.144 lport=6800 faddr=172.21.15.144 fport=49312 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068226.631:8207): avc: denied { search } for pid=33907 comm="node_exporter" name="/" dev="tmpfs" ino=14361 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067914.816:6566): avc: denied { search } for pid=25279 comm="mgr-fin" name="usr" dev="sda1" ino=789157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068130.741:7726): avc: denied { write } for pid=24885 comm="conmon" name="socket" dev="tmpfs" ino=1184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068006.630:7096): avc: denied { read } for pid=33907 comm="node_exporter" name="file-nr" dev="proc" ino=160426 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068276.631:8440): avc: denied { search } for pid=33907 comm="node_exporter" name="1" dev="proc" ino=157102 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068286.629:8507): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/7/net/arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068269.053:8361): avc: denied { search } for pid=25279 comm="safe_timer" name="etc" dev="sda1" ino=1444004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068281.478:8454): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/etc" dev="sda1" ino=1968494 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068201.266:8044): avc: denied { search } for pid=50453 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970651 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c490,c885 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068206.630:8076): avc: denied { read } for pid=33907 comm="node_exporter" name="mounts" dev="proc" ino=164950 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068057.884:7320): avc: denied { open } for pid=24908 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi144/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068085.608:7481): avc: denied { name_connect } for pid=36781 comm="grafana-server" dest=443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:http_port_t:s0 tclass=tcp_socket permissive=1', 'type=AVC msg=audit(1616067926.630:6673): avc: denied { read } for pid=33907 comm="node_exporter" name="sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.631:7807): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/hwmon/hwmon0/uevent" dev="sysfs" ino=35585 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067936.582:6723): avc: denied { use } for pid=24908 comm="fn_monstore" path="pipe:[124477]" dev="pipefs" ino=124477 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068075.670:7413): avc: denied { search } for pid=24885 comm="conmon" name="/" dev="tmpfs" ino=14361 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068057.846:7318): avc: denied { getattr } for pid=25279 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.515:7791): avc: denied { search } for pid=50453 comm="safe_timer" name="/" dev="overlay" ino=1970651 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c490,c885 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068147.902:7836): avc: denied { search } for pid=24908 comm="safe_timer" name="mon.smithi144" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068217.914:8149): avc: denied { getattr } for pid=24908 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi144/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067913.862:6553): avc: denied { read } for pid=24885 comm="conmon" path="pipe:[124477]" dev="pipefs" ino=124477 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068353.251:8812): avc: denied { read } for pid=25279 comm="msgr-worker-0" path="socket:[181295]" dev="sockfs" ino=181295 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068216.630:8115): avc: denied { read } for pid=33907 comm="node_exporter" name="fd" dev="proc" ino=164528 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068342.430:8761): avc: denied { read } for pid=45496 comm="prometheus" path="socket:[366101]" dev="sockfs" ino=366101 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068286.631:8513): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=164950 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068146.362:7780): avc: denied { search } for pid=46071 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c131,c293 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067918.480:6651): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068076.629:7441): avc: denied { search } for pid=33907 comm="node_exporter" name="fs" dev="proc" ino=160425 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067986.596:6901): avc: denied { sendto } for pid=24885 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068292.430:8533): avc: denied { getattr } for pid=45496 comm="prometheus" laddr=172.21.15.144 lport=41922 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068218.480:8166): avc: denied { read } for pid=36781 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067985.179:6877): avc: denied { read } for pid=46071 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068056.308:7252): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.309:7777): avc: denied { search } for pid=36781 comm="grafana-server" name="diff" dev="sda1" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068126.730:7656): avc: denied { sendto } for pid=24885 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067936.630:6738): avc: denied { search } for pid=33907 comm="node_exporter" name="1" dev="proc" ino=157102 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067989.460:6991): avc: denied { search } for pid=25279 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068059.478:7347): avc: denied { search } for pid=36781 comm="grafana-server" name="/" dev="overlay" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068286.629:8505): avc: denied { read } for pid=33907 comm="node_exporter" name="ce_count" dev="sysfs" ino=43916 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.234:7770): avc: denied { write } for pid=50453 comm="msgr-worker-0" laddr=172.21.15.144 lport=6814 faddr=172.21.15.152 fport=45776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068085.608:7480): avc: denied { setopt } for pid=36781 comm="grafana-server" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068284.479:8466): avc: denied { open } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068357.939:8874): avc: denied { dac_read_search } for pid=24908 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068126.629:7627): avc: denied { read } for pid=33907 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067914.235:6564): avc: denied { read } for pid=55839 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068202.431:8052): avc: denied { search } for pid=45496 comm="prometheus" name="etc" dev="sda1" ino=1970592 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c629 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067996.629:7017): avc: denied { read } for pid=33907 comm="node_exporter" name="fd" dev="proc" ino=164528 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068075.954:7421): avc: denied { read } for pid=25279 comm="safe_timer" name="os-release" dev="overlay" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068206.631:8091): avc: denied { search } for pid=33907 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068198.101:7981): avc: denied { read } for pid=61313 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067917.833:6642): avc: denied { search } for pid=46071 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c131,c293 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067932.592:6689): avc: denied { create } for pid=24908 comm="rstore_compact" name="000015.log" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067931.189:6686): avc: denied { read } for pid=25279 comm="safe_timer" name="os-release" dev="sda1" ino=394714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068284.478:8461): avc: denied { search } for pid=36781 comm="grafana-server" name="etc" dev="sda1" ino=1968494 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067936.630:6733): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=164527 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067922.431:6670): avc: denied { read } for pid=45496 comm="prometheus" path="socket:[287286]" dev="sockfs" ino=287286 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068056.479:7255): avc: denied { read open } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068267.923:8322): avc: denied { search } for pid=24908 comm="safe_timer" name="diff" dev="sda1" ino=1443979 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068082.431:7469): avc: denied { search } for pid=45496 comm="prometheus" name="etc" dev="sda1" ino=1970592 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c629 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068146.362:7780): avc: denied { open } for pid=46071 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068126.041:7601): avc: denied { read } for pid=61313 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068353.456:8814): avc: denied { open } for pid=25279 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068218.787:8170): avc: denied { read } for pid=25279 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068005.022:7056): avc: denied { append } for pid=46071 comm="log" path="/var/log/ceph/ceph-osd.0.log" dev="sda1" ino=396203 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068126.629:7635): avc: denied { read } for pid=33907 comm="node_exporter" name="ce_count" dev="sysfs" ino=43916 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068336.630:8658): avc: denied { search } for pid=33907 comm="node_exporter" name="/" dev="overlay" ino=1970467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c480,c863 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067990.143:6996): avc: denied { search } for pid=61313 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970689 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c431,c852 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.385:7781): avc: denied { search } for pid=25279 comm="safe_timer" name="/" dev="overlay" ino=1443998 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068281.330:8452): avc: denied { read } for pid=61313 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068217.170:8140): avc: denied { read } for pid=61313 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067986.631:6922): avc: denied { getattr } for pid=33907 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067988.142:6970): avc: denied { search } for pid=46071 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c131,c293 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068285.077:8480): avc: denied { read } for pid=46071 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067916.630:6596): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=164528 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068206.630:8070): avc: denied { read } for pid=33907 comm="node_exporter" name="fd" dev="proc" ino=164528 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068284.478:8461): avc: denied { search } for pid=36781 comm="grafana-server" name="dashboards" dev="sda1" ino=1574974 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068271.065:8406): avc: denied { open } for pid=25279 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068356.629:8848): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=164527 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068142.035:7763): avc: denied { search } for pid=61313 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068075.670:7413): avc: denied { write } for pid=24885 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067989.460:6992): avc: denied { read } for pid=25279 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067916.630:6599): avc: denied { search } for pid=33907 comm="node_exporter" name="rpc" dev="proc" ino=4026532409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068272.924:8421): avc: denied { search } for pid=24908 comm="safe_timer" name="mon.smithi144" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.479:7786): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068270.074:8397): avc: denied { search } for pid=61313 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970689 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c431,c852 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067992.872:7011): avc: denied { read } for pid=24908 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068132.898:7741): avc: denied { open } for pid=24908 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi144/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068353.479:8827): avc: denied { open } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/pool-overview.json" dev="overlay" ino=1574983 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067985.459:6888): avc: denied { read } for pid=25279 comm="safe_timer" name="os-release" dev="sda1" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068226.631:8206): avc: denied { search } for pid=33907 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067936.631:6747): avc: denied { open } for pid=33907 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068056.630:7276): avc: denied { search } for pid=33907 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068055.848:7241): avc: denied { write } for pid=24908 comm="safe_timer" path="pipe:[124504]" dev="pipefs" ino=124504 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067932.592:6690): avc: denied { read } for pid=24908 comm="rstore_compact" name="logical_block_size" dev="sysfs" ino=45217 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068006.632:7105): avc: denied { search } for pid=33907 comm="node_exporter" name="user" dev="tmpfs" ino=16432 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067936.632:6755): avc: denied { search } for pid=33907 comm="node_exporter" name="host" dev="sda1" ino=1970476 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c480,c863 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067918.479:6647): avc: denied { search } for pid=36781 comm="grafana-server" name="/" dev="overlay" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067914.235:6564): avc: denied { search } for pid=55839 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068059.175:7346): avc: denied { open } for pid=61313 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067986.309:6895): avc: denied { search } for pid=36781 comm="grafana-server" name="var" dev="sda1" ino=1968497 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068353.468:8817): avc: denied { getattr } for pid=25279 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068375.654:8893): avc: denied { write } for pid=25279 comm="msgr-worker-1" laddr=172.21.15.144 lport=50576 faddr=172.21.15.144 fport=6800 scontext=system_u:system_r:spc_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1', 'type=AVC msg=audit(1616068270.041:8394): avc: denied { read } for pid=24885 comm="conmon" path="pipe:[124477]" dev="pipefs" ino=124477 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068347.937:8799): avc: denied { open } for pid=24908 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi144/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068342.430:8754): avc: denied { search } for pid=45496 comm="prometheus" name="/" dev="overlay" ino=1970584 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c629 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067913.679:6547): avc: denied { write } for pid=77122 comm="msgr-worker-1" laddr=172.21.15.144 lport=44000 faddr=172.21.15.144 fport=3300 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068357.939:8876): avc: denied { getattr } for pid=24908 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi144/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067986.630:6911): avc: denied { search } for pid=33907 comm="node_exporter" name="rpc" dev="proc" ino=4026532409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067917.693:6641): avc: denied { write } for pid=24908 comm="msgr-worker-2" laddr=172.21.15.144 lport=3300 faddr=172.21.15.152 fport=49234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067996.630:7031): avc: denied { search } for pid=33907 comm="node_exporter" name="1" dev="proc" ino=157102 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068006.630:7101): avc: denied { search } for pid=33907 comm="node_exporter" name="1" dev="proc" ino=157102 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068286.072:8489): avc: denied { search } for pid=24885 comm="conmon" name="journal" dev="tmpfs" ino=1180 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068006.629:7091): avc: denied { read } for pid=33907 comm="node_exporter" name="eno1" dev="sysfs" ino=35389 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068356.630:8860): avc: denied { read } for pid=33907 comm="node_exporter" name="entropy_avail" dev="proc" ino=159485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068076.632:7452): avc: denied { search } for pid=33907 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067935.213:6708): avc: denied { getattr } for pid=25279 comm="safe_timer" name="os-release" dev="sda1" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068270.048:8396): avc: denied { open } for pid=55839 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068136.842:7753): avc: denied { open } for pid=92770 comm="pgrep" path="/proc/24908/status" dev="proc" ino=128239 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068226.629:8189): avc: denied { read } for pid=33907 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068269.479:8363): avc: denied { getattr } for pid=36781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067985.203:6882): avc: denied { write } for pid=50453 comm="msgr-worker-1" laddr=172.21.15.144 lport=6816 faddr=172.21.15.152 fport=43550 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068206.631:8084): avc: denied { read } for pid=33907 comm="node_exporter" name="ce_count" dev="sysfs" ino=43916 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068218.480:8168): avc: denied { read } for pid=36781 comm="grafana-server" name="ceph-cluster.json" dev="sda1" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068206.631:8087): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068284.504:8469): avc: denied { read } for pid=25279 comm="msgr-worker-0" path="socket:[276867]" dev="sockfs" ino=276867 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067942.430:6769): avc: denied { create } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068066.629:7368): avc: denied { search } for pid=33907 comm="node_exporter" name="/" dev="overlay" ino=1970467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c480,c863 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067915.115:6569): avc: denied { read } for pid=25279 comm="safe_timer" name="os-release" dev="overlay" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.397:7785): avc: denied { getattr } for pid=25279 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068349.444:8805): avc: denied { read } for pid=25279 comm="safe_timer" name="os-release" dev="overlay" ino=394714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067992.431:7002): avc: denied { create } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068005.022:7055): avc: denied { append } for pid=61313 comm="log" path="/var/log/ceph/ceph-osd.3.log" dev="sda1" ino=396212 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.235:7771): avc: denied { append } for pid=50453 comm="log" path="/var/log/ceph/ceph-osd.1.log" dev="sda1" ino=396206 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068076.629:7429): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=164527 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067916.630:6602): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=164950 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067992.431:7003): avc: denied { setopt } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068007.874:7110): avc: denied { dac_read_search } for pid=24908 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068092.052:7492): avc: denied { read } for pid=25279 comm="safe_timer" name="os-release" dev="sda1" ino=394714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068272.431:8411): avc: denied { getattr } for pid=45496 comm="prometheus" path="/etc/hosts" dev="tmpfs" ino=189966 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068272.431:8413): avc: denied { create } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068286.632:8514): avc: denied { getattr } for pid=33907 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068203.939:8066): avc: denied { read } for pid=24885 comm="conmon" path="pipe:[124477]" dev="pipefs" ino=124477 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068126.629:7637): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=43916 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068340.651:8744): avc: denied { write } for pid=25279 comm="msgr-worker-1" laddr=172.21.15.144 lport=50576 faddr=172.21.15.144 fport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068057.647:7306): avc: denied { search } for pid=50453 comm="safe_timer" name="/" dev="overlay" ino=1970651 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c490,c885 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068058.234:7330): avc: denied { append } for pid=25279 comm="log" path="/var/log/ceph/ceph-mgr.smithi144.csetuh.log" dev="sda1" ino=396136 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068216.630:8124): avc: denied { read } for pid=33907 comm="node_exporter" name="ce_count" dev="sysfs" ino=43916 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068056.629:7260): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc/7" dev="proc" ino=159982 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068217.914:8147): avc: denied { search } for pid=24908 comm="safe_timer" name="var" dev="sda1" ino=1443990 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c138,c292 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068268.313:8339): avc: denied { search } for pid=61313 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068197.926:7972): avc: denied { search } for pid=24885 comm="conmon" name="/" dev="tmpfs" ino=14361 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068218.799:8172): avc: denied { read } for pid=25279 comm="safe_timer" name="os-release" dev="overlay" ino=394714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068875.680:8950): avc: denied { write } for pid=25279 comm="msgr-worker-1" laddr=172.21.15.144 lport=50576 faddr=172.21.15.144 fport=6800 scontext=system_u:system_r:spc_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1', 'type=AVC msg=audit(1616067990.480:6998): avc: denied { read open } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068268.038:8332): avc: denied { write } for pid=24885 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067996.630:7031): avc: denied { read } for pid=33907 comm="node_exporter" name="mounts" dev="proc" ino=164950 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068006.630:7099): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=159485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068271.053:8404): avc: denied { open } for pid=25279 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068267.923:8322): avc: denied { getattr } for pid=24908 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068011.537:7116): avc: denied { signal } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068206.630:8072): avc: denied { read } for pid=33907 comm="node_exporter" name="entropy_avail" dev="proc" ino=159485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068076.308:7424): avc: denied { search } for pid=36781 comm="grafana-server" name="var" dev="sda1" ino=1968497 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068287.926:8525): avc: denied { dac_read_search } for pid=24908 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068128.478:7698): avc: denied { getattr } for pid=36781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068085.375:7477): avc: denied { write } for pid=36781 comm="grafana-server" name="grafana" dev="overlay" ino=1968334 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068128.738:7712): avc: denied { add_name } for pid=24908 comm="rstore_compact" name="000021.log" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067935.213:6708): avc: denied { read } for pid=25279 comm="safe_timer" name="os-release" dev="sda1" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068226.629:8194): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/hwmon/hwmon0/uevent" dev="sysfs" ino=35585 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068056.630:7278): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=160426 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068077.887:7464): avc: denied { search } for pid=24908 comm="safe_timer" name="var" dev="sda1" ino=1443990 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c138,c292 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068092.675:7495): avc: denied { search } for pid=24885 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068268.038:8332): avc: denied { sendto } for pid=24885 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068129.456:7721): avc: denied { search } for pid=50453 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970651 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c490,c885 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068149.806:7839): avc: denied { search } for pid=45496 comm="prometheus" name="/" dev="overlay" ino=1970584 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c629 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068284.834:8477): avc: denied { search } for pid=25279 comm="mgr-fin" name="etc" dev="sda1" ino=1444004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068126.630:7642): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=159485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067987.479:6954): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068337.383:8679): avc: denied { open } for pid=25279 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068338.478:8710): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068198.701:7988): avc: denied { getattr } for pid=25279 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067996.629:7019): avc: denied { search } for pid=33907 comm="node_exporter" name="kernel" dev="proc" ino=160351 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068216.631:8126): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=164950 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068356.631:8866): avc: denied { search } for pid=33907 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067930.207:6681): avc: denied { write } for pid=75566 comm="ceph_timer" path="pipe:[270851]" dev="pipefs" ino=270851 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068197.926:7971): avc: denied { read } for pid=24885 comm="conmon" path="pipe:[124477]" dev="pipefs" ino=124477 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068202.431:8058): avc: denied { getattr } for pid=45496 comm="prometheus" laddr=172.21.15.144 lport=54833 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068076.828:7457): avc: denied { read } for pid=89761 comm="pgrep" name="status" dev="proc" ino=122270 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068268.038:8330): avc: denied { use } for pid=24908 comm="fn_monstore" path="pipe:[124477]" dev="pipefs" ino=124477 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068066.630:7377): avc: denied { read } for pid=33907 comm="node_exporter" name="mounts" dev="proc" ino=164950 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068206.630:8073): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=159485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068006.170:7073): avc: denied { read } for pid=61313 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067988.598:6986): avc: denied { read } for pid=24885 comm="conmon" path="pipe:[124477]" dev="pipefs" ino=124477 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068267.923:8322): avc: denied { search } for pid=24908 comm="safe_timer" name="var" dev="sda1" ino=1443990 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c138,c292 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068146.631:7813): avc: denied { getattr } for pid=33907 comm="node_exporter" name="/" dev="tmpfs" ino=14362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068346.629:8777): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=160426 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068056.630:7281): avc: denied { search } for pid=33907 comm="node_exporter" name="user" dev="tmpfs" ino=16432 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068126.082:7605): avc: denied { write } for pid=77122 comm="safe_timer" path="pipe:[274887]" dev="pipefs" ino=274887 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068267.924:8324): avc: denied { getattr } for pid=24908 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi144/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068340.240:8740): avc: denied { write } for pid=24885 comm="conmon" name="socket" dev="tmpfs" ino=1184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068089.805:7486): avc: denied { read } for pid=45496 comm="prometheus" name="data" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c629 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067916.630:6600): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=159485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068200.480:8034): avc: denied { read } for pid=36781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067937.861:6763): avc: denied { dac_read_search } for pid=24908 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068132.898:7741): avc: denied { read } for pid=24908 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068202.725:8061): avc: denied { search } for pid=25279 comm="safe_timer" name="usr" dev="sda1" ino=789157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068075.670:7411): avc: denied { write } for pid=24908 comm="fn_monstore" path="pipe:[124477]" dev="pipefs" ino=124477 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068216.631:8126): avc: denied { read } for pid=33907 comm="node_exporter" name="mounts" dev="proc" ino=164950 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068356.629:8854): avc: denied { search } for pid=33907 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068057.697:7309): avc: denied { write } for pid=24885 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068127.897:7680): avc: denied { dac_read_search } for pid=24908 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068138.348:7759): avc: denied { read } for pid=25279 comm="safe_timer" name="os-release" dev="overlay" ino=394714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067985.459:6888): avc: denied { read } for pid=25279 comm="safe_timer" name="os-release" dev="overlay" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067915.479:6570): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067987.528:6958): avc: denied { read } for pid=46071 comm="msgr-worker-0" path="socket:[265099]" dev="sockfs" ino=265099 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068212.762:8101): avc: denied { read } for pid=25279 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.763:7829): avc: denied { search } for pid=24885 comm="conmon" name="/" dev="tmpfs" ino=14361 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067997.507:7038): avc: denied { read } for pid=25279 comm="safe_timer" name="os-release" dev="sda1" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068126.308:7616): avc: denied { read } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067996.629:7014): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068076.629:7429): avc: denied { search } for pid=33907 comm="node_exporter" name="7" dev="proc" ino=159982 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068276.632:8444): avc: denied { getattr } for pid=33907 comm="node_exporter" name="/" dev="tmpfs" ino=14362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068218.479:8161): avc: denied { search } for pid=36781 comm="grafana-server" name="etc" dev="sda1" ino=1968494 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069200.648:8987): avc: denied { shutdown } for pid=25279 comm="msgr-worker-2" laddr=172.21.15.144 lport=50572 faddr=172.21.15.144 fport=6800 scontext=system_u:system_r:spc_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1', 'type=AVC msg=audit(1616068200.479:8029): avc: denied { search } for pid=36781 comm="grafana-server" name="/" dev="overlay" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068076.630:7443): avc: denied { search } for pid=33907 comm="node_exporter" name="kernel" dev="proc" ino=160351 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067935.213:6709): avc: denied { getattr } for pid=25279 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068131.478:7728): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068356.630:8857): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068075.100:7397): avc: denied { open } for pid=46071 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068197.911:7966): avc: denied { open } for pid=24908 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi144/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068285.192:8484): avc: denied { open } for pid=46071 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068056.204:7248): avc: denied { open } for pid=61313 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068085.443:7478): avc: denied { unlink } for pid=36781 comm="grafana-server" name="grafana.db-journal" dev="sda1" ino=1970615 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068126.629:7635): avc: denied { open } for pid=33907 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=43916 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068284.764:8476): avc: denied { read } for pid=24908 comm="msgr-worker-2" path="pipe:[124504]" dev="pipefs" ino=124504 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068137.900:7755): avc: denied { dac_read_search } for pid=24908 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068276.631:8440): avc: denied { read } for pid=33907 comm="node_exporter" name="mounts" dev="proc" ino=164950 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068126.630:7640): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=160426 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068066.629:7369): avc: denied { read } for pid=33907 comm="node_exporter" name="stat" dev="proc" ino=164527 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068006.630:7093): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068271.065:8406): avc: denied { read } for pid=25279 comm="safe_timer" name="os-release" dev="sda1" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068005.478:7058): avc: denied { search } for pid=36781 comm="grafana-server" name="etc" dev="sda1" ino=1968494 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068197.926:7972): avc: denied { sendto } for pid=24885 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067986.630:6915): avc: denied { search } for pid=33907 comm="node_exporter" name="1" dev="proc" ino=157102 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068286.632:8518): avc: denied { search } for pid=33907 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067922.856:6671): avc: denied { open } for pid=24908 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi144/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068216.630:8111): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068353.456:8813): avc: denied { read } for pid=25279 comm="safe_timer" name="meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068056.629:7264): avc: denied { search } for pid=33907 comm="node_exporter" name="1" dev="proc" ino=157102 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068353.479:8826): avc: denied { read } for pid=36781 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068126.629:7631): avc: denied { read } for pid=33907 comm="node_exporter" name="dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068284.479:8466): avc: denied { read open } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067936.582:6725): avc: denied { search } for pid=24885 comm="conmon" name="/" dev="tmpfs" ino=14361 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068056.630:7277): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068062.430:7364): avc: denied { getattr } for pid=45496 comm="prometheus" laddr=172.21.15.144 lport=40681 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068216.630:8119): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068338.479:8715): avc: denied { open } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068126.630:7641): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=164950 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067936.649:6759): avc: denied { append } for pid=45496 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c629 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068353.479:8824): avc: denied { read } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067915.480:6576): avc: denied { open } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/host-details.json" dev="overlay" ino=1574978 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068346.629:8773): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068126.631:7646): avc: denied { search } for pid=33907 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068206.630:8068): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc/7" dev="proc" ino=159982 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068342.430:8755): avc: denied { create } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068267.573:8315): avc: denied { append } for pid=50453 comm="log" path="/var/log/ceph/ceph-osd.1.log" dev="sda1" ino=396206 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.397:7784): avc: denied { read } for pid=25279 comm="safe_timer" name="os-release" dev="overlay" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068338.639:8718): avc: denied { open } for pid=50453 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067986.630:6911): avc: denied { read } for pid=33907 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068281.330:8452): avc: denied { open } for pid=61313 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067992.872:7010): avc: denied { search } for pid=24908 comm="safe_timer" name="var" dev="sda1" ino=1443990 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c138,c292 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068201.538:8045): avc: denied { signal } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068006.629:7086): avc: denied { read } for pid=33907 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068075.954:7421): avc: denied { getattr } for pid=25279 comm="safe_timer" name="os-release" dev="sda1" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068216.632:8129): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=159485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068201.750:8048): avc: denied { read } for pid=24908 comm="msgr-worker-2" path="pipe:[124504]" dev="pipefs" ino=124504 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068206.630:8075): avc: denied { read } for pid=33907 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067913.679:6548): avc: denied { read } for pid=24908 comm="msgr-worker-1" path="socket:[271186]" dev="sockfs" ino=271186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068175.659:7896): avc: denied { write } for pid=36781 comm="grafana-server" path="socket:[319756]" dev="sockfs" ino=319756 scontext=system_u:system_r:spc_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1', 'type=AVC msg=audit(1616067934.817:6695): avc: denied { search } for pid=25279 comm="mgr-fin" name="/" dev="overlay" ino=1443998 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067915.479:6570): avc: denied { getattr } for pid=36781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068200.933:8039): avc: denied { search } for pid=24885 comm="conmon" name="systemd" dev="tmpfs" ino=14370 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068287.926:8525): avc: denied { search } for pid=24908 comm="safe_timer" name="var" dev="sda1" ino=1443990 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c138,c292 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068152.431:7845): avc: denied { create } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068076.629:7441): avc: denied { search } for pid=33907 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068346.632:8790): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067936.479:6720): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/etc" dev="sda1" ino=1968494 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068006.632:7107): avc: denied { search } for pid=33907 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616068346.629:8767): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc/7" dev="proc" ino=159982 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068076.629:7433): avc: denied { read } for pid=33907 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068347.478:8796): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068005.479:7065): avc: denied { open } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-overview.json" dev="sda1" ino=1574985 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068286.629:8495): avc: denied { search } for pid=33907 comm="node_exporter" name="/" dev="overlay" ino=1970467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c480,c863 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067936.582:6725): avc: denied { search } for pid=24885 comm="conmon" name="systemd" dev="tmpfs" ino=14370 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068055.848:7242): avc: denied { read } for pid=24908 comm="msgr-worker-2" path="pipe:[124504]" dev="pipefs" ino=124504 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068226.631:8210): avc: denied { search } for pid=33907 comm="node_exporter" name="host" dev="sda1" ino=1970476 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c480,c863 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068276.630:8435): avc: denied { read } for pid=33907 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068356.648:8872): avc: denied { append } for pid=45496 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c629 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068268.074:8337): avc: denied { read } for pid=50453 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067936.631:6748): avc: denied { getattr } for pid=33907 comm="node_exporter" name="/" dev="tmpfs" ino=14362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068276.631:8437): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=160426 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068216.630:8113): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=164527 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068300.648:8543): avc: denied { read } for pid=25279 comm="msgr-worker-2" path="socket:[356538]" dev="sockfs" ino=356538 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067986.631:6923): avc: denied { read } for pid=33907 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068202.912:8062): avc: denied { search } for pid=24908 comm="safe_timer" name="mon.smithi144" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068076.630:7445): avc: denied { read } for pid=33907 comm="node_exporter" name="cpufreq" dev="sysfs" ino=30758 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068126.082:7606): avc: denied { read } for pid=77122 comm="msgr-worker-0" path="pipe:[274887]" dev="pipefs" ino=274887 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068216.630:8114): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/stat" dev="proc" ino=4026532033 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067926.631:6677): avc: denied { read } for pid=33907 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068147.902:7835): avc: denied { search } for pid=24908 comm="safe_timer" name="var" dev="sda1" ino=1443990 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c138,c292 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068077.479:7462): avc: denied { open } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067914.235:6563): avc: denied { search } for pid=55839 comm="safe_timer" name="/" dev="overlay" ino=1970670 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c421,c817 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068269.808:8389): avc: denied { search } for pid=45496 comm="prometheus" name="diff" dev="sda1" ino=1970584 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067986.630:6907): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc/7" dev="proc" ino=159982 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067935.010:6703): avc: denied { read } for pid=46071 comm="msgr-worker-2" path="socket:[265094]" dev="sockfs" ino=265094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068061.539:7356): avc: denied { append } for pid=45496 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c629 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068067.673:7385): avc: denied { search } for pid=24885 comm="conmon" name="journal" dev="tmpfs" ino=1180 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068222.431:8179): avc: denied { setopt } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067989.472:6994): avc: denied { read } for pid=25279 comm="safe_timer" name="os-release" dev="overlay" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067936.582:6725): avc: denied { search } for pid=24885 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068347.937:8800): avc: denied { getattr } for pid=24908 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi144/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068149.806:7839): avc: denied { read } for pid=45496 comm="prometheus" name="data" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c629 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067916.630:6598): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068216.630:8120): avc: denied { read } for pid=33907 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068198.101:7980): avc: denied { open } for pid=61313 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068825.677:8931): avc: denied { write } for pid=25279 comm="msgr-worker-1" laddr=172.21.15.144 lport=50576 faddr=172.21.15.144 fport=6800 scontext=system_u:system_r:spc_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1', 'type=AVC msg=audit(1616068147.902:7835): avc: denied { dac_read_search } for pid=24908 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068269.041:8359): avc: denied { open } for pid=25279 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068126.730:7656): avc: denied { search } for pid=24885 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068126.730:7656): avc: denied { search } for pid=24885 comm="conmon" name="/" dev="tmpfs" ino=14361 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068012.430:7119): avc: denied { create } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068226.630:8202): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067992.872:7010): avc: denied { search } for pid=24908 comm="safe_timer" name="/" dev="overlay" ino=1443979 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c138,c292 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.763:7829): avc: denied { write } for pid=24885 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067915.479:6571): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/etc" dev="sda1" ino=1968494 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068005.478:7060): avc: denied { lock } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067985.459:6889): avc: denied { getattr } for pid=25279 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067914.816:6566): avc: denied { read } for pid=25279 comm="mgr-fin" name="localtime" dev="overlay" ino=394696 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067986.631:6930): avc: denied { search } for pid=33907 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067936.309:6718): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068268.038:8332): avc: denied { search } for pid=24885 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068269.480:8366): avc: denied { read } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068076.630:7443): avc: denied { read } for pid=33907 comm="node_exporter" name="entropy_avail" dev="proc" ino=159485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067992.431:7006): avc: denied { connect } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067936.631:6749): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/sys/fs/xfs/stats/stats" dev="sysfs" ino=45563 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068272.431:8412): avc: denied { create } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068276.630:8428): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068286.072:8489): avc: denied { search } for pid=24885 comm="conmon" name="systemd" dev="tmpfs" ino=14370 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067996.629:7027): avc: denied { read } for pid=33907 comm="node_exporter" name="eno1" dev="sysfs" ino=35389 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068226.630:8203): avc: denied { read } for pid=33907 comm="node_exporter" name="mounts" dev="proc" ino=164950 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068269.834:8392): avc: denied { search } for pid=25279 comm="mgr-fin" name="/" dev="overlay" ino=1443998 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068056.630:7278): avc: denied { search } for pid=33907 comm="node_exporter" name="fs" dev="proc" ino=160425 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068075.670:7411): avc: denied { use } for pid=24908 comm="fn_monstore" path="pipe:[124477]" dev="pipefs" ino=124477 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068268.038:8332): avc: denied { search } for pid=24885 comm="conmon" name="systemd" dev="tmpfs" ino=14370 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068076.828:7459): avc: denied { search } for pid=89761 comm="pgrep" name="24908" dev="proc" ino=128204 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067917.855:6643): avc: denied { search } for pid=24908 comm="safe_timer" name="var" dev="sda1" ino=1443990 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c138,c292 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068945.684:8954): avc: denied { write } for pid=25279 comm="msgr-worker-1" laddr=172.21.15.144 lport=50576 faddr=172.21.15.144 fport=6800 scontext=system_u:system_r:spc_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1', 'type=AVC msg=audit(1616068284.478:8461): avc: denied { search } for pid=36781 comm="grafana-server" name="/" dev="overlay" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068137.900:7755): avc: denied { search } for pid=24908 comm="safe_timer" name="/" dev="overlay" ino=1443979 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c138,c292 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068056.630:7280): avc: denied { search } for pid=33907 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068197.911:7965): avc: denied { search } for pid=24908 comm="safe_timer" name="var" dev="sda1" ino=1443990 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c138,c292 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068006.599:7075): avc: denied { write } for pid=24908 comm="fn_monstore" path="pipe:[124477]" dev="pipefs" ino=124477 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068217.914:8147): avc: denied { search } for pid=24908 comm="safe_timer" name="/" dev="overlay" ino=1443979 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c138,c292 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068346.632:8789): avc: denied { read } for pid=33907 comm="node_exporter" name="entropy_avail" dev="proc" ino=159485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067986.630:6909): avc: denied { read } for pid=33907 comm="node_exporter" name="fd" dev="proc" ino=164528 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068286.633:8521): avc: denied { read } for pid=33907 comm="node_exporter" name="entropy_avail" dev="proc" ino=159485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068268.313:8338): avc: denied { search } for pid=61313 comm="safe_timer" name="/" dev="overlay" ino=1970689 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c431,c852 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068338.238:8705): avc: denied { write } for pid=24885 comm="conmon" name="socket" dev="tmpfs" ino=1184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068059.479:7354): avc: denied { open } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/cephfs-overview.json" dev="overlay" ino=1574977 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068286.629:8502): avc: denied { read } for pid=33907 comm="node_exporter" name="xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068057.697:7307): avc: denied { write } for pid=24908 comm="fn_monstore" path="pipe:[124477]" dev="pipefs" ino=124477 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068216.630:8122): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067915.115:6569): avc: denied { read } for pid=25279 comm="safe_timer" name="os-release" dev="sda1" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068270.877:8403): avc: denied { write } for pid=24908 comm="ms_dispatch" path="/var/lib/ceph/mon/ceph-smithi144/store.db/000021.log" dev="dm-4" ino=178 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.630:7804): avc: denied { read } for pid=33907 comm="node_exporter" name="dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067936.582:6725): avc: denied { write } for pid=24885 comm="conmon" name="socket" dev="tmpfs" ino=1184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068206.631:8090): avc: denied { search } for pid=33907 comm="node_exporter" name="/" dev="tmpfs" ino=14361 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067988.598:6985): avc: denied { use } for pid=24908 comm="fn_monstore" path="pipe:[124477]" dev="pipefs" ino=124477 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067916.631:6603): avc: denied { read } for pid=33907 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068006.629:7087): avc: denied { open } for pid=33907 comm="node_exporter" path="/sys/class/net" dev="sysfs" ino=21519 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068206.630:8072): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=159485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068085.375:7477): avc: denied { write open } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db-journal" dev="sda1" ino=1970615 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068346.629:8766): avc: denied { search } for pid=33907 comm="node_exporter" name="/" dev="overlay" ino=1970467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c480,c863 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068197.926:7972): avc: denied { search } for pid=24885 comm="conmon" name="journal" dev="tmpfs" ino=1180 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068057.834:7315): avc: denied { search } for pid=25279 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068226.629:8184): avc: denied { search } for pid=33907 comm="node_exporter" name="/" dev="overlay" ino=1970467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c480,c863 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068339.356:8733): avc: denied { search } for pid=55839 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970670 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c421,c817 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068056.629:7270): avc: denied { open } for pid=33907 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/net/eno1/addr_assign_type" dev="sysfs" ino=35397 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.630:7793): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068268.313:8339): avc: denied { read } for pid=61313 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068292.430:8532): avc: denied { connect } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068206.631:8091): avc: denied { search } for pid=33907 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067990.479:6997): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068005.479:7065): avc: denied { open } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-overview.json" dev="overlay" ino=1574985 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067991.538:6999): avc: denied { signal } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067987.479:6955): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/etc" dev="sda1" ino=1968494 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067915.103:6568): avc: denied { getattr } for pid=25279 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068059.478:7347): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067986.630:6906): avc: denied { search } for pid=33907 comm="node_exporter" name="/" dev="overlay" ino=1970467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c480,c863 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068218.799:8172): avc: denied { open } for pid=25279 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068203.479:8064): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068056.630:7274): avc: denied { search } for pid=33907 comm="node_exporter" name="rpc" dev="proc" ino=4026532409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068197.749:7959): avc: denied { read } for pid=24908 comm="msgr-worker-2" path="socket:[175679]" dev="sockfs" ino=175679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068226.630:8203): avc: denied { search } for pid=33907 comm="node_exporter" name="1" dev="proc" ino=157102 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068272.924:8422): avc: denied { getattr } for pid=24908 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi144/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068357.939:8877): avc: denied { getattr } for pid=24908 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi144/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067936.479:6719): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068057.834:7314): avc: denied { search } for pid=25279 comm="safe_timer" name="/" dev="overlay" ino=1443998 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068356.630:8860): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=159485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067929.177:6679): avc: denied { search } for pid=25279 comm="safe_timer" name="usr" dev="sda1" ino=789157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068056.629:7268): avc: denied { search } for pid=33907 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068005.479:7062): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067936.631:6744): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/7/net/arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068269.053:8361): avc: denied { read } for pid=25279 comm="safe_timer" name="os-release" dev="sda1" ino=394714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068056.630:7275): avc: denied { getattr } for pid=33907 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068076.632:7453): avc: denied { search } for pid=33907 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616067934.437:6694): avc: denied { search } for pid=61313 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068285.192:8484): avc: denied { read } for pid=46071 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067986.631:6924): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068012.430:7121): avc: denied { setopt } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068076.629:7439): avc: denied { read } for pid=33907 comm="node_exporter" name="ce_count" dev="sysfs" ino=43916 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068269.053:8361): avc: denied { open } for pid=25279 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067917.692:6640): avc: denied { read } for pid=24908 comm="msgr-worker-2" path="socket:[175679]" dev="sockfs" ino=175679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068006.600:7077): avc: denied { search } for pid=24885 comm="conmon" name="/" dev="tmpfs" ino=14361 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067996.629:7020): avc: denied { read } for pid=33907 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067989.460:6991): avc: denied { open } for pid=25279 comm="safe_timer" path="/proc/meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.932:7834): avc: denied { search } for pid=61313 comm="safe_timer" name="/" dev="overlay" ino=1970689 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c431,c852 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068286.631:8509): avc: denied { read } for pid=33907 comm="node_exporter" name="cpufreq" dev="sysfs" ino=30758 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068276.631:8437): avc: denied { search } for pid=33907 comm="node_exporter" name="fs" dev="proc" ino=160425 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068005.556:7069): avc: denied { read } for pid=25279 comm="safe_timer" name="os-release" dev="sda1" ino=394714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068357.939:8875): avc: denied { search } for pid=24908 comm="safe_timer" name="mon.smithi144" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068059.478:7348): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/etc" dev="sda1" ino=1968494 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068338.478:8714): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068075.954:7421): avc: denied { search } for pid=25279 comm="safe_timer" name="usr" dev="sda1" ino=789157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068146.762:7826): avc: denied { write } for pid=24908 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi144/store.db/000021.log" dev="dm-4" ino=178 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068226.631:8205): avc: denied { search } for pid=33907 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068217.968:8159): avc: denied { search } for pid=50453 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970651 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c490,c885 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.763:7828): avc: denied { read } for pid=24885 comm="conmon" path="pipe:[124477]" dev="pipefs" ino=124477 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068057.834:7314): avc: denied { open } for pid=25279 comm="safe_timer" path="/proc/meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068271.065:8407): avc: denied { getattr } for pid=25279 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068006.600:7077): avc: denied { write } for pid=24885 comm="conmon" name="socket" dev="tmpfs" ino=1184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068007.874:7111): avc: denied { read } for pid=24908 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067989.460:6992): avc: denied { search } for pid=25279 comm="safe_timer" name="libpod-007039c67f5fe93561bc11f5022aa1b83f7960612a98612f62b3f7d629d69d27.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068056.629:7269): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/hwmon/hwmon0" dev="sysfs" ino=35584 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.309:7779): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068353.456:8815): avc: denied { getattr } for pid=25279 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068336.759:8669): avc: denied { write } for pid=78119 comm="msgr-worker-0" laddr=172.21.15.144 lport=50306 faddr=172.21.15.144 fport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067935.591:6713): avc: denied { read } for pid=50453 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067986.631:6932): avc: denied { search } for pid=33907 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616068216.632:8128): avc: denied { read } for pid=33907 comm="node_exporter" name="entropy_avail" dev="proc" ino=159485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068269.808:8389): avc: denied { open } for pid=45496 comm="prometheus" path="/prometheus" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c629 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068076.308:7426): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068353.468:8816): avc: denied { getattr } for pid=25279 comm="safe_timer" name="os-release" dev="sda1" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068126.631:7645): avc: denied { search } for pid=33907 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068128.738:7712): avc: denied { write } for pid=24908 comm="rstore_compact" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068126.082:7608): avc: denied { read } for pid=25279 comm="msgr-worker-0" path="socket:[276731]" dev="sockfs" ino=276731 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068077.478:7460): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067936.582:6723): avc: denied { write } for pid=24908 comm="fn_monstore" path="pipe:[124477]" dev="pipefs" ino=124477 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067914.816:6566): avc: denied { read } for pid=25279 comm="mgr-fin" name="localtime" dev="sda1" ino=394696 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068338.478:8710): avc: denied { getattr } for pid=36781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068286.629:8507): avc: denied { read } for pid=33907 comm="node_exporter" name="arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067932.592:6689): avc: denied { add_name } for pid=24908 comm="rstore_compact" name="000015.log" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068217.000:8135): avc: denied { read } for pid=61313 comm="msgr-worker-1" path="pipe:[231791]" dev="pipefs" ino=231791 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067986.309:6894): avc: denied { lock } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068005.478:7059): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/etc" dev="sda1" ino=1968494 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067936.630:6733): avc: denied { search } for pid=33907 comm="node_exporter" name="7" dev="proc" ino=159982 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068217.914:8147): avc: denied { dac_read_search } for pid=24908 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068286.072:8489): avc: denied { search } for pid=24885 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068203.480:8065): avc: denied { read open } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068127.897:7682): avc: denied { getattr } for pid=24908 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi144/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068217.170:8141): avc: denied { search } for pid=61313 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067916.631:6606): avc: denied { read } for pid=33907 comm="node_exporter" name="net" dev="sysfs" ino=21519 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068272.431:8410): avc: denied { signal } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.632:7818): avc: denied { search } for pid=33907 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068285.125:8481): avc: denied { search } for pid=25279 comm="safe_timer" name="libpod-007039c67f5fe93561bc11f5022aa1b83f7960612a98612f62b3f7d629d69d27.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068127.562:7679): avc: denied { read } for pid=55839 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068284.834:8477): avc: denied { search } for pid=25279 comm="mgr-fin" name="/" dev="overlay" ino=1443998 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067996.629:7025): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=43916 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068071.362:7388): avc: denied { read } for pid=46071 comm="msgr-worker-2" path="socket:[277521]" dev="sockfs" ino=277521 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068006.630:7097): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068075.099:7395): avc: denied { open } for pid=46071 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067921.538:6662): avc: denied { signal } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068217.959:8154): avc: denied { search } for pid=24885 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067985.459:6888): avc: denied { search } for pid=25279 comm="safe_timer" name="etc" dev="sda1" ino=1444004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068353.946:8833): avc: denied { write } for pid=24908 comm="fn_monstore" path="pipe:[124477]" dev="pipefs" ino=124477 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068126.630:7643): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068127.897:7681): avc: denied { search } for pid=24908 comm="safe_timer" name="mon.smithi144" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068066.631:7382): avc: denied { search } for pid=33907 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068222.432:8181): avc: denied { getattr } for pid=45496 comm="prometheus" laddr=172.21.15.144 lport=59651 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068126.630:7640): avc: denied { search } for pid=33907 comm="node_exporter" name="fs" dev="proc" ino=160425 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068005.478:7058): avc: denied { search } for pid=36781 comm="grafana-server" name="dashboards" dev="sda1" ino=1574974 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067996.629:7016): avc: denied { search } for pid=33907 comm="node_exporter" name="7" dev="proc" ino=159982 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067942.430:6770): avc: denied { create } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068056.479:7257): avc: denied { open } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/pool-overview.json" dev="overlay" ino=1574983 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068337.383:8679): avc: denied { read } for pid=25279 comm="safe_timer" name="os-release" dev="overlay" ino=394714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067936.630:6737): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=159485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068339.356:8734): avc: denied { write } for pid=55839 comm="msgr-worker-2" laddr=172.21.15.144 lport=45938 faddr=172.21.15.144 fport=6808 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068353.456:8813): avc: denied { search } for pid=25279 comm="safe_timer" name="diff" dev="sda1" ino=1443998 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067932.605:6692): avc: denied { read } for pid=24908 comm="rocksdb:high0" name="000016.sst" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068226.630:8203): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=164950 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068076.632:7452): avc: denied { search } for pid=33907 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068012.430:7117): avc: denied { search } for pid=45496 comm="prometheus" name="/" dev="overlay" ino=1970584 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c629 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068006.632:7106): avc: denied { search } for pid=33907 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068055.834:7236): avc: denied { read } for pid=24908 comm="msgr-worker-2" path="socket:[139138]" dev="sockfs" ino=139138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067985.447:6886): avc: denied { search } for pid=25279 comm="safe_timer" name="libpod-007039c67f5fe93561bc11f5022aa1b83f7960612a98612f62b3f7d629d69d27.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068126.274:7612): avc: denied { getattr } for pid=25279 comm="safe_timer" name="os-release" dev="sda1" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067913.862:6552): avc: denied { use } for pid=24908 comm="fn_monstore" path="pipe:[124477]" dev="pipefs" ino=124477 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067932.592:6689): avc: denied { open } for pid=24908 comm="rstore_compact" path="/var/lib/ceph/mon/ceph-smithi144/store.db/000015.log" dev="dm-4" ino=186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067932.606:6693): avc: denied { remove_name } for pid=24908 comm="rocksdb:high0" name="000012.log" dev="dm-4" ino=178 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068059.479:7352): avc: denied { read } for pid=36781 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067988.199:6982): avc: denied { search } for pid=55839 comm="safe_timer" name="diff" dev="sda1" ino=1970670 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068005.479:7063): avc: denied { read } for pid=36781 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067936.309:6716): avc: denied { search } for pid=36781 comm="grafana-server" name="/" dev="overlay" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068353.946:8835): avc: denied { search } for pid=24885 comm="conmon" name="systemd" dev="tmpfs" ino=14370 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067926.631:6675): avc: denied { search } for pid=33907 comm="node_exporter" name="user" dev="tmpfs" ino=16432 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068085.374:7476): avc: denied { read } for pid=36781 comm="grafana-server" name="png" dev="sda1" ino=1968635 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068269.479:8363): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068356.631:8865): avc: denied { getattr } for pid=33907 comm="node_exporter" name="/" dev="tmpfs" ino=14362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067916.633:6619): avc: denied { search } for pid=33907 comm="node_exporter" name="host" dev="sda1" ino=1970476 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c480,c863 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068126.274:7612): avc: denied { read } for pid=25279 comm="safe_timer" name="os-release" dev="sda1" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068006.630:7100): avc: denied { search } for pid=33907 comm="node_exporter" name="net" dev="proc" ino=159988 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067985.217:6884): avc: denied { read } for pid=75566 comm="msgr-worker-1" path="pipe:[270851]" dev="pipefs" ino=270851 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068201.540:8046): avc: denied { append } for pid=45496 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c629 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068126.262:7609): avc: denied { search } for pid=25279 comm="safe_timer" name="/" dev="overlay" ino=1443998 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068338.478:8711): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/etc" dev="sda1" ino=1968494 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067918.479:6647): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068300.648:8539): avc: denied { connect } for pid=25279 comm="msgr-worker-2" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068136.630:7745): avc: denied { read } for pid=33907 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068267.582:8316): avc: denied { read } for pid=46071 comm="msgr-worker-0" path="socket:[265099]" dev="sockfs" ino=265099 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067986.630:6918): avc: denied { search } for pid=33907 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068076.629:7439): avc: denied { open } for pid=33907 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=43916 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.480:7788): avc: denied { read open } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068136.630:7746): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068059.479:7353): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="sda1" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068206.630:8069): avc: denied { read } for pid=33907 comm="node_exporter" name="stat" dev="proc" ino=164527 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068292.430:8535): avc: denied { read } for pid=45496 comm="prometheus" path="socket:[357528]" dev="sockfs" ino=357528 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068126.629:7632): avc: denied { search } for pid=33907 comm="node_exporter" name="rpc" dev="proc" ino=4026532409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067986.630:6917): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/sys/fs/xfs/stats/stats" dev="sysfs" ino=45563 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068152.432:7852): avc: denied { read } for pid=45496 comm="prometheus" path="socket:[330994]" dev="sockfs" ino=330994 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067986.596:6901): avc: denied { search } for pid=24885 comm="conmon" name="systemd" dev="tmpfs" ino=14370 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068056.630:7282): avc: denied { search } for pid=33907 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068151.538:7842): avc: denied { signal } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068218.480:8164): avc: denied { read } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068286.629:8496): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc/7" dev="proc" ino=159982 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068006.632:7105): avc: denied { search } for pid=33907 comm="node_exporter" name="/" dev="tmpfs" ino=14361 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068206.630:8075): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068128.479:7702): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067918.480:6651): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068218.787:8171): avc: denied { getattr } for pid=25279 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067996.629:7026): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/sys/class/net/lo" dev="sysfs" ino=21524 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068269.480:8367): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068056.630:7279): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068075.954:7421): avc: denied { open } for pid=25279 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068057.846:7317): avc: denied { read } for pid=25279 comm="safe_timer" name="os-release" dev="overlay" ino=394714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068006.630:7098): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=159485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068092.675:7494): avc: denied { write } for pid=24908 comm="fn_monstore" path="pipe:[124477]" dev="pipefs" ino=124477 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068146.309:7777): avc: denied { search } for pid=36781 comm="grafana-server" name="var" dev="sda1" ino=1968497 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067936.630:6738): avc: denied { read } for pid=33907 comm="node_exporter" name="mounts" dev="proc" ino=164950 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068268.074:8337): avc: denied { search } for pid=50453 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970651 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c490,c885 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068085.608:7479): avc: denied { create } for pid=36781 comm="grafana-server" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068269.808:8389): avc: denied { search } for pid=45496 comm="prometheus" name="/" dev="overlay" ino=1970584 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c629 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068354.459:8841): avc: denied { search } for pid=61313 comm="safe_timer" name="/" dev="overlay" ino=1970689 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c431,c852 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068147.902:7836): avc: denied { read } for pid=24908 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068126.632:7650): avc: denied { search } for pid=33907 comm="node_exporter" name="host" dev="sda1" ino=1970476 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c480,c863 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068076.307:7423): avc: denied { lock } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068286.633:8522): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=159485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068222.431:8180): avc: denied { connect } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068057.846:7317): avc: denied { open } for pid=25279 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068007.874:7110): avc: denied { search } for pid=24908 comm="safe_timer" name="var" dev="sda1" ino=1443990 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c138,c292 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068056.629:7268): avc: denied { read } for pid=33907 comm="node_exporter" name="entropy_avail" dev="proc" ino=159485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068353.084:8809): avc: denied { read } for pid=50453 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068197.750:7963): avc: denied { read } for pid=24908 comm="msgr-worker-2" path="pipe:[124504]" dev="pipefs" ino=124504 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067987.480:6956): avc: denied { read } for pid=36781 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067985.179:6879): avc: denied { read } for pid=46071 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068272.431:8419): avc: denied { read } for pid=45496 comm="prometheus" path="socket:[354574]" dev="sockfs" ino=354574 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068349.432:8803): avc: denied { read } for pid=25279 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068057.834:7316): avc: denied { getattr } for pid=25279 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067918.480:6650): avc: denied { read } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068206.630:8079): avc: denied { search } for pid=33907 comm="node_exporter" name="fs" dev="proc" ino=160425 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067996.629:7022): avc: denied { read } for pid=33907 comm="node_exporter" name="mc" dev="sysfs" ino=21498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068126.041:7603): avc: denied { read } for pid=61313 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068057.697:7309): avc: denied { write } for pid=24885 comm="conmon" name="socket" dev="tmpfs" ino=1184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068077.479:7462): avc: denied { read } for pid=36781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068338.238:8705): avc: denied { search } for pid=24885 comm="conmon" name="/" dev="tmpfs" ino=14361 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068356.630:8862): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=159485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067916.630:6596): avc: denied { read } for pid=33907 comm="node_exporter" name="fd" dev="proc" ino=164528 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068005.556:7069): avc: denied { read } for pid=25279 comm="safe_timer" name="os-release" dev="overlay" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068005.556:7069): avc: denied { search } for pid=25279 comm="safe_timer" name="etc" dev="sda1" ino=1444004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068201.750:8047): avc: denied { write } for pid=24908 comm="ms_dispatch" path="pipe:[124504]" dev="pipefs" ino=124504 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068271.053:8404): avc: denied { search } for pid=25279 comm="safe_timer" name="libpod-007039c67f5fe93561bc11f5022aa1b83f7960612a98612f62b3f7d629d69d27.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068276.632:8447): avc: denied { search } for pid=33907 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068286.650:8523): avc: denied { append } for pid=45496 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c629 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068206.631:8085): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=43916 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068076.828:7458): avc: denied { getattr } for pid=89761 comm="pgrep" path="/proc/24908" dev="proc" ino=128204 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068126.629:7623): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067936.631:6741): avc: denied { search } for pid=33907 comm="node_exporter" name="fs" dev="proc" ino=160425 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067917.855:6644): avc: denied { open } for pid=24908 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi144/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068057.884:7319): avc: denied { search } for pid=24908 comm="safe_timer" name="var" dev="sda1" ino=1443990 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c138,c292 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068136.631:7748): avc: denied { search } for pid=33907 comm="node_exporter" name="user" dev="tmpfs" ino=16432 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068128.479:7701): avc: denied { read } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068342.430:8759): avc: denied { getattr } for pid=45496 comm="prometheus" laddr=172.21.15.144 lport=59848 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068127.897:7681): avc: denied { read } for pid=24908 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067916.631:6609): avc: denied { read } for pid=33907 comm="node_exporter" name="physical_package_id" dev="sysfs" ino=28908 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068216.630:8112): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc/7" dev="proc" ino=159982 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068217.000:8134): avc: denied { write } for pid=61313 comm="tp_osd_tp" path="pipe:[231791]" dev="pipefs" ino=231791 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068356.631:8868): avc: denied { search } for pid=33907 comm="node_exporter" name="rpc" dev="proc" ino=4026532409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068286.630:8508): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068206.631:8086): avc: denied { read } for pid=33907 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067922.856:6671): avc: denied { read } for pid=24908 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068012.430:7123): avc: denied { getattr } for pid=45496 comm="prometheus" laddr=172.21.15.144 lport=44133 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067936.630:6736): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068132.430:7738): avc: denied { read } for pid=45496 comm="prometheus" path="socket:[328760]" dev="sockfs" ino=328760 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067996.630:7028): avc: denied { search } for pid=33907 comm="node_exporter" name="net" dev="proc" ino=159988 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068057.884:7320): avc: denied { search } for pid=24908 comm="safe_timer" name="mon.smithi144" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067996.629:7019): avc: denied { read } for pid=33907 comm="node_exporter" name="entropy_avail" dev="proc" ino=159485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068216.630:8116): avc: denied { read } for pid=33907 comm="node_exporter" name="hwmon" dev="sysfs" ino=21483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068218.480:8168): avc: denied { open } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="overlay" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068006.630:7094): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068286.631:8511): avc: denied { search } for pid=33907 comm="node_exporter" name="net" dev="proc" ino=159988 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067916.631:6604): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068341.479:8747): avc: denied { lock } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068222.432:8182): avc: denied { write } for pid=45496 comm="prometheus" path="socket:[339689]" dev="sockfs" ino=339689 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068006.629:7091): avc: denied { read } for pid=33907 comm="node_exporter" name="addr_assign_type" dev="sysfs" ino=35397 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068132.743:7739): avc: denied { use } for pid=24908 comm="fn_monstore" path="pipe:[124477]" dev="pipefs" ino=124477 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068269.041:8360): avc: denied { getattr } for pid=25279 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067916.633:6616): avc: denied { search } for pid=33907 comm="node_exporter" name="user" dev="tmpfs" ino=16432 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067986.631:6931): avc: denied { search } for pid=33907 comm="node_exporter" name="net" dev="proc" ino=159988 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067914.816:6566): avc: denied { getattr } for pid=25279 comm="mgr-fin" path="/usr/share/zoneinfo/UTC" dev="overlay" ino=1312328 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068198.689:7985): avc: denied { open } for pid=25279 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068217.914:8147): avc: denied { getattr } for pid=24908 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068216.630:8118): avc: denied { search } for pid=33907 comm="node_exporter" name="net" dev="proc" ino=159988 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068341.479:8749): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068341.479:8751): avc: denied { open } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-detail.json" dev="overlay" ino=1574984 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067996.630:7031): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=164950 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068129.456:7723): avc: denied { read } for pid=50453 comm="msgr-worker-1" path="pipe:[203202]" dev="pipefs" ino=203202 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068076.828:7459): avc: denied { open } for pid=89761 comm="pgrep" path="/proc/24908/status" dev="proc" ino=128239 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068272.924:8420): avc: denied { dac_read_search } for pid=24908 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068077.887:7465): avc: denied { open } for pid=24908 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi144/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.630:7796): avc: denied { read } for pid=33907 comm="node_exporter" name="fd" dev="proc" ino=164528 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068284.758:8473): avc: denied { write } for pid=46071 comm="msgr-worker-0" laddr=172.21.15.144 lport=6806 faddr=172.21.15.152 fport=56260 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067986.509:6898): avc: denied { search } for pid=50453 comm="safe_timer" name="/" dev="overlay" ino=1970651 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c490,c885 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.763:7829): avc: denied { write } for pid=24885 comm="conmon" name="socket" dev="tmpfs" ino=1184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068075.954:7421): avc: denied { read } for pid=25279 comm="safe_timer" name="os-release" dev="overlay" ino=394714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.631:7806): avc: denied { read } for pid=33907 comm="node_exporter" name="entropy_avail" dev="proc" ino=159485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067936.229:6714): avc: denied { search } for pid=61313 comm="safe_timer" name="/" dev="overlay" ino=1970689 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c431,c852 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.763:7829): avc: denied { search } for pid=24885 comm="conmon" name="journal" dev="tmpfs" ino=1180 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068006.632:7108): avc: denied { search } for pid=33907 comm="node_exporter" name="host" dev="sda1" ino=1970476 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c480,c863 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068056.629:7264): avc: denied { read } for pid=33907 comm="node_exporter" name="mounts" dev="proc" ino=164950 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068145.564:7765): avc: denied { append } for pid=46071 comm="log" path="/var/log/ceph/ceph-osd.0.log" dev="sda1" ino=396203 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067913.932:6559): avc: denied { open } for pid=50453 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068269.834:8392): avc: denied { read } for pid=25279 comm="mgr-fin" name="localtime" dev="sda1" ino=394696 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068076.629:7435): avc: denied { search } for pid=33907 comm="node_exporter" name="1" dev="proc" ino=157102 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067916.630:6602): avc: denied { read } for pid=33907 comm="node_exporter" name="mounts" dev="proc" ino=164950 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068217.914:8151): avc: denied { write } for pid=24908 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi144/store.db/000021.log" dev="dm-4" ino=178 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068217.959:8154): avc: denied { write } for pid=24885 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068217.959:8154): avc: denied { search } for pid=24885 comm="conmon" name="/" dev="tmpfs" ino=14361 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068226.629:8187): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=164528 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067935.010:6700): avc: denied { write } for pid=75114 comm="msgr-worker-1" laddr=172.21.15.144 lport=51760 faddr=172.21.15.144 fport=6802 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068206.630:8079): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=160426 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068216.632:8128): avc: denied { search } for pid=33907 comm="node_exporter" name="kernel" dev="proc" ino=160351 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.630:7799): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068226.631:8208): avc: denied { search } for pid=33907 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067942.430:6773): avc: denied { getattr } for pid=45496 comm="prometheus" laddr=172.21.15.144 lport=55786 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068206.630:8069): avc: denied { search } for pid=33907 comm="node_exporter" name="7" dev="proc" ino=159982 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068056.630:7278): avc: denied { read } for pid=33907 comm="node_exporter" name="file-nr" dev="proc" ino=160426 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068085.375:7477): avc: denied { dac_override } for pid=36781 comm="grafana-server" capability=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067988.598:6987): avc: denied { write } for pid=24885 comm="conmon" name="socket" dev="tmpfs" ino=1184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068356.631:8870): avc: denied { search } for pid=33907 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616068076.629:7434): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=21498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068126.274:7613): avc: denied { getattr } for pid=25279 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.630:7801): avc: denied { search } for pid=33907 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068341.478:8745): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068218.479:8161): avc: denied { getattr } for pid=36781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068267.924:8323): avc: denied { open } for pid=24908 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi144/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068062.430:7365): avc: denied { write } for pid=45496 comm="prometheus" path="socket:[316111]" dev="sockfs" ino=316111 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068126.308:7616): avc: denied { read } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068128.479:7703): avc: denied { read open } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067989.472:6994): avc: denied { open } for pid=25279 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068005.479:7064): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="sda1" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068005.479:7065): avc: denied { read } for pid=36781 comm="grafana-server" name="radosgw-overview.json" dev="sda1" ino=1574985 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068337.383:8676): avc: denied { read } for pid=25279 comm="safe_timer" name="meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068128.479:7702): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068216.630:8118): avc: denied { search } for pid=33907 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068269.041:8359): avc: denied { read } for pid=25279 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068206.630:8077): avc: denied { read } for pid=33907 comm="node_exporter" name="hwmon" dev="sysfs" ino=21483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068270.580:8402): avc: denied { search } for pid=50453 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068005.479:7061): avc: denied { read } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068130.800:7727): avc: denied { search } for pid=46071 comm="safe_timer" name="/" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c131,c293 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068380.654:8895): avc: denied { write } for pid=25279 comm="msgr-worker-1" laddr=172.21.15.144 lport=50576 faddr=172.21.15.144 fport=6800 scontext=system_u:system_r:spc_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1', 'type=AVC msg=audit(1616067942.430:6772): avc: denied { connect } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068056.478:7253): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067985.179:6879): avc: denied { open } for pid=46071 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067986.596:6901): avc: denied { search } for pid=24885 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068217.000:8136): avc: denied { write } for pid=61313 comm="msgr-worker-2" laddr=172.21.15.144 lport=6828 faddr=172.21.15.152 fport=49718 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068006.630:7096): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=160426 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068217.865:8146): avc: denied { search } for pid=46071 comm="safe_timer" name="/" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c131,c293 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068346.629:8769): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=164528 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068200.479:8029): avc: denied { getattr } for pid=36781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067913.932:6559): avc: denied { search } for pid=50453 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068056.630:7282): avc: denied { search } for pid=33907 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068346.685:8793): avc: denied { write } for pid=46071 comm="osd_srv_heartbt" path="pipe:[195661]" dev="pipefs" ino=195661 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067916.630:6595): avc: denied { read } for pid=33907 comm="node_exporter" name="stat" dev="proc" ino=164527 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068356.629:8850): avc: denied { read } for pid=33907 comm="node_exporter" name="net" dev="sysfs" ino=21519 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068149.806:7840): avc: denied { getattr } for pid=45496 comm="prometheus" path="/prometheus/queries.active" dev="dm-4" ino=158 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c629 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067986.631:6923): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068006.599:7075): avc: denied { use } for pid=24908 comm="fn_monstore" path="pipe:[124477]" dev="pipefs" ino=124477 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067936.480:6721): avc: denied { read } for pid=36781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068092.675:7494): avc: denied { use } for pid=24908 comm="fn_monstore" path="pipe:[124477]" dev="pipefs" ino=124477 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068276.630:8427): avc: denied { read } for pid=33907 comm="node_exporter" name="fd" dev="proc" ino=164528 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067930.479:6684): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068006.630:7096): avc: denied { search } for pid=33907 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068076.631:7449): avc: denied { search } for pid=33907 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068284.478:8461): avc: denied { search } for pid=36781 comm="grafana-server" name="diff" dev="sda1" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068284.834:8477): avc: denied { read } for pid=25279 comm="mgr-fin" name="localtime" dev="overlay" ino=394696 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067936.631:6746): avc: denied { getattr } for pid=33907 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068056.629:7259): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068341.539:8753): avc: denied { append } for pid=45496 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c629 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068197.926:7972): avc: denied { write } for pid=24885 comm="conmon" name="socket" dev="tmpfs" ino=1184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068146.630:7801): avc: denied { search } for pid=33907 comm="node_exporter" name="net" dev="proc" ino=159988 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068356.629:8850): avc: denied { open } for pid=33907 comm="node_exporter" path="/sys/class/net" dev="sysfs" ino=21519 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067935.213:6708): avc: denied { search } for pid=25279 comm="safe_timer" name="usr" dev="sda1" ino=789157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068270.048:8396): avc: denied { search } for pid=55839 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970670 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c421,c817 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068346.629:8768): avc: denied { read } for pid=33907 comm="node_exporter" name="stat" dev="proc" ino=164527 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068075.149:7399): avc: denied { search } for pid=61313 comm="safe_timer" name="/" dev="overlay" ino=1970689 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c431,c852 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068126.629:7626): avc: denied { read } for pid=33907 comm="node_exporter" name="fd" dev="proc" ino=164528 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068226.629:8190): avc: denied { search } for pid=33907 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068356.629:8851): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068016.814:7127): avc: denied { search } for pid=86696 comm="pgrep" name="24885" dev="proc" ino=122266 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068269.003:8357): avc: denied { search } for pid=46071 comm="safe_timer" name="/" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c131,c293 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068338.478:8710): avc: denied { search } for pid=36781 comm="grafana-server" name="etc" dev="sda1" ino=1968494 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068197.926:7970): avc: denied { write } for pid=24908 comm="fn_monstore" path="pipe:[124477]" dev="pipefs" ino=124477 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068066.629:7370): avc: denied { read } for pid=33907 comm="node_exporter" name="net" dev="sysfs" ino=21519 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067935.213:6708): avc: denied { read } for pid=25279 comm="safe_timer" name="os-release" dev="sda1" ino=394714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067914.235:6564): avc: denied { open } for pid=55839 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068284.834:8477): avc: denied { read } for pid=25279 comm="mgr-fin" name="localtime" dev="sda1" ino=394696 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068006.170:7072): avc: denied { search } for pid=61313 comm="safe_timer" name="/" dev="overlay" ino=1970689 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c431,c852 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068285.125:8482): avc: denied { getattr } for pid=25279 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068346.629:8766): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068269.053:8361): avc: denied { read } for pid=25279 comm="safe_timer" name="os-release" dev="overlay" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068346.631:8787): avc: denied { search } for pid=33907 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616068005.478:7058): avc: denied { search } for pid=36781 comm="grafana-server" name="/" dev="overlay" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068356.631:8864): avc: denied { getattr } for pid=33907 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067936.630:6737): avc: denied { read } for pid=33907 comm="node_exporter" name="entropy_avail" dev="proc" ino=159485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068073.133:7391): avc: denied { search } for pid=46071 comm="safe_timer" name="/" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c131,c293 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068137.067:7754): avc: denied { search } for pid=61313 comm="safe_timer" name="diff" dev="sda1" ino=1970689 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067936.629:6730): avc: denied { signal } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.632:7816): avc: denied { search } for pid=33907 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067936.631:6745): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.630:7796): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=164528 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067996.631:7035): avc: denied { search } for pid=33907 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067913.692:6550): avc: denied { append } for pid=24908 comm="log" path="/var/log/ceph/ceph-mon.smithi144.log" dev="sda1" ino=396130 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068197.926:7972): avc: denied { write } for pid=24885 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067936.630:6732): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc/7" dev="proc" ino=159982 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067985.459:6888): avc: denied { search } for pid=25279 comm="safe_timer" name="usr" dev="sda1" ino=789157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067992.431:7000): avc: denied { search } for pid=45496 comm="prometheus" name="/" dev="overlay" ino=1970584 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c629 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068138.348:7760): avc: denied { getattr } for pid=25279 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.397:7784): avc: denied { open } for pid=25279 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068353.479:8826): avc: denied { open } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068056.478:7253): avc: denied { search } for pid=36781 comm="grafana-server" name="dashboards" dev="sda1" ino=1574974 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068146.630:7798): avc: denied { open } for pid=33907 comm="node_exporter" path="/sys/class/net" dev="sysfs" ino=21519 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068062.885:7367): avc: denied { getattr } for pid=24908 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.397:7784): avc: denied { read } for pid=25279 comm="safe_timer" name="os-release" dev="sda1" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067937.861:6765): avc: denied { getattr } for pid=24908 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi144/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068278.061:8451): avc: denied { write } for pid=24885 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068346.629:8770): avc: denied { search } for pid=33907 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068075.954:7421): avc: denied { read } for pid=25279 comm="safe_timer" name="os-release" dev="sda1" ino=394714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068056.631:7285): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067916.631:6607): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068286.632:8518): avc: denied { search } for pid=33907 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068337.935:8684): avc: denied { getattr } for pid=24908 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi144/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068016.814:7127): avc: denied { open } for pid=86696 comm="pgrep" path="/proc/24885/status" dev="proc" ino=122270 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068126.730:7654): avc: denied { write } for pid=24908 comm="fn_monstore" path="pipe:[124477]" dev="pipefs" ino=124477 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068206.630:8072): avc: denied { search } for pid=33907 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068286.629:8497): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=164527 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067916.633:6617): avc: denied { search } for pid=33907 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068269.480:8368): avc: denied { read } for pid=36781 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068217.914:8148): avc: denied { read } for pid=24908 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068353.456:8813): avc: denied { open } for pid=25279 comm="safe_timer" path="/proc/meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068059.479:7351): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067917.855:6644): avc: denied { read } for pid=24908 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068132.898:7741): avc: denied { search } for pid=24908 comm="safe_timer" name="mon.smithi144" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068006.629:7087): avc: denied { read } for pid=33907 comm="node_exporter" name="net" dev="sysfs" ino=21519 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068012.431:7125): avc: denied { read } for pid=45496 comm="prometheus" path="socket:[303882]" dev="sockfs" ino=303882 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068200.058:8025): avc: denied { read } for pid=46071 comm="msgr-worker-2" path="socket:[265094]" dev="sockfs" ino=265094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068269.480:8368): avc: denied { open } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068284.479:8465): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068128.479:7703): avc: denied { read } for pid=36781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068142.361:7764): avc: denied { search } for pid=25279 comm="safe_timer" name="libpod-007039c67f5fe93561bc11f5022aa1b83f7960612a98612f62b3f7d629d69d27.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068076.828:7457): avc: denied { open } for pid=89761 comm="pgrep" path="/proc/24885/status" dev="proc" ino=122270 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067986.309:6897): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068128.478:7698): avc: denied { search } for pid=36781 comm="grafana-server" name="/" dev="overlay" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068356.630:8859): avc: denied { read } for pid=33907 comm="node_exporter" name="mounts" dev="proc" ino=164950 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068005.597:7071): avc: denied { write } for pid=24908 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi144/store.db/000018.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067992.431:7005): avc: denied { connect } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067996.630:7032): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067985.459:6888): avc: denied { getattr } for pid=25279 comm="safe_timer" name="os-release" dev="sda1" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068200.933:8039): avc: denied { write } for pid=24885 comm="conmon" name="socket" dev="tmpfs" ino=1184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067985.447:6886): avc: denied { open } for pid=25279 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068284.479:8465): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068057.884:7320): avc: denied { read } for pid=24908 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068226.630:8198): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068356.629:8855): avc: denied { read } for pid=33907 comm="node_exporter" name="addr_assign_type" dev="sysfs" ino=35397 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068126.629:7629): avc: denied { search } for pid=33907 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068346.632:8789): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=159485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068152.884:7853): avc: denied { getattr } for pid=25279 comm="mgr-fin" path="/usr/lib64/python3.6" dev="overlay" ino=1050261 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068226.629:8191): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=43728 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067996.629:7024): avc: denied { open } for pid=33907 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=43916 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067986.630:6918): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=159485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067992.872:7011): avc: denied { open } for pid=24908 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi144/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068076.639:7455): avc: denied { append } for pid=45496 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c629 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068218.787:8170): avc: denied { open } for pid=25279 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068058.891:7341): avc: denied { sendto } for pid=24885 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068056.204:7247): avc: denied { search } for pid=61313 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068056.629:7264): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=164950 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068357.939:8875): avc: denied { open } for pid=24908 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi144/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068226.630:8197): avc: denied { read } for pid=33907 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068221.540:8175): avc: denied { append } for pid=45496 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c629 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068272.924:8421): avc: denied { open } for pid=24908 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi144/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068305.650:8553): avc: denied { write } for pid=25279 comm="msgr-worker-1" laddr=172.21.15.144 lport=50576 faddr=172.21.15.144 fport=6800 scontext=system_u:system_r:spc_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1', 'type=AVC msg=audit(1616068222.431:8177): avc: denied { create } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068320.651:8657): avc: denied { write } for pid=25279 comm="msgr-worker-1" laddr=172.21.15.144 lport=50576 faddr=172.21.15.144 fport=6800 scontext=system_u:system_r:spc_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1', 'type=AVC msg=audit(1616068006.629:7084): avc: denied { search } for pid=33907 comm="node_exporter" name="7" dev="proc" ino=159982 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068337.383:8678): avc: denied { getattr } for pid=25279 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068356.629:8852): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.479:7787): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/etc" dev="sda1" ino=1968494 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068206.737:8095): avc: denied { read } for pid=25279 comm="safe_timer" name="os-release" dev="sda1" ino=394714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068353.478:8821): avc: denied { getattr } for pid=36781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068267.923:8322): avc: denied { dac_read_search } for pid=24908 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067936.582:6725): avc: denied { sendto } for pid=24885 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068217.959:8152): avc: denied { use } for pid=24908 comm="fn_monstore" path="pipe:[124477]" dev="pipefs" ino=124477 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068126.629:7633): avc: denied { read } for pid=33907 comm="node_exporter" name="cpufreq" dev="sysfs" ino=30758 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068356.629:8846): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068346.630:8783): avc: denied { getattr } for pid=33907 comm="node_exporter" name="/" dev="tmpfs" ino=14362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067988.204:6983): avc: denied { write } for pid=75566 comm="safe_timer" path="pipe:[270852]" dev="pipefs" ino=270852 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067918.480:6650): avc: denied { read } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068337.383:8679): avc: denied { open } for pid=25279 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068336.759:8668): avc: denied { read } for pid=78119 comm="msgr-worker-0" path="pipe:[272184]" dev="pipefs" ino=272184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068339.356:8735): avc: denied { read } for pid=50453 comm="msgr-worker-0" path="socket:[224433]" dev="sockfs" ino=224433 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068356.630:8860): avc: denied { search } for pid=33907 comm="node_exporter" name="kernel" dev="proc" ino=160351 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068206.631:8080): avc: denied { open } for pid=33907 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068089.805:7486): avc: denied { open } for pid=45496 comm="prometheus" path="/prometheus" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c629 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068284.479:8464): avc: denied { read } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068300.648:8537): avc: denied { create } for pid=25279 comm="msgr-worker-2" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068216.631:8125): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=43916 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068341.479:8748): avc: denied { read } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068341.479:8748): avc: denied { read } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068076.631:7450): avc: denied { search } for pid=33907 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068286.629:8504): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=160426 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067987.480:6956): avc: denied { open } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068006.630:7101): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=164950 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068353.946:8835): avc: denied { write } for pid=24885 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068146.632:7817): avc: denied { search } for pid=33907 comm="node_exporter" name="user" dev="tmpfs" ino=16432 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068200.480:8034): avc: denied { open } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068056.628:7258): avc: denied { signal } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068091.669:7489): avc: denied { write } for pid=24908 comm="safe_timer" path="pipe:[124504]" dev="pipefs" ino=124504 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068007.874:7113): avc: denied { getattr } for pid=24908 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi144/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068346.629:8774): avc: denied { search } for pid=33907 comm="node_exporter" name="rpc" dev="proc" ino=4026532409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068346.630:8784): avc: denied { search } for pid=33907 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068272.044:8409): avc: denied { sendto } for pid=24885 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068126.630:7641): avc: denied { read } for pid=33907 comm="node_exporter" name="mounts" dev="proc" ino=164950 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068129.826:7725): avc: denied { search } for pid=25279 comm="mgr-fin" name="usr" dev="sda1" ino=789157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068276.633:8448): avc: denied { search } for pid=33907 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616068076.629:7437): avc: denied { read } for pid=33907 comm="node_exporter" name="mc" dev="sysfs" ino=21498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068353.946:8834): avc: denied { read } for pid=24885 comm="conmon" path="pipe:[124477]" dev="pipefs" ino=124477 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068226.629:8190): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=160426 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068356.629:8854): avc: denied { search } for pid=33907 comm="node_exporter" name="net" dev="proc" ino=159988 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068023.480:7136): avc: denied { open } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068075.954:7421): avc: denied { read } for pid=25279 comm="safe_timer" name="os-release" dev="sda1" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068356.629:8847): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc/7" dev="proc" ino=159982 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067918.579:6654): avc: denied { write } for pid=24885 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068226.630:8200): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=159485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068269.834:8392): avc: denied { getattr } for pid=25279 comm="mgr-fin" path="/usr/share/zoneinfo/UTC" dev="overlay" ino=1312328 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068005.556:7069): avc: denied { read } for pid=25279 comm="safe_timer" name="os-release" dev="overlay" ino=394714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068200.479:8031): avc: denied { lock } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068201.818:8050): avc: denied { read } for pid=46071 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067986.309:6895): avc: denied { search } for pid=36781 comm="grafana-server" name="/" dev="overlay" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068136.842:7753): avc: denied { read } for pid=92770 comm="pgrep" name="status" dev="proc" ino=128239 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068276.630:8430): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=43728 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068356.629:8848): avc: denied { read } for pid=33907 comm="node_exporter" name="stat" dev="proc" ino=164527 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067985.217:6883): avc: denied { write } for pid=75566 comm="ceph_timer" path="pipe:[270851]" dev="pipefs" ino=270851 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068338.479:8715): avc: denied { read } for pid=36781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067996.629:7023): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=159485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068346.629:8771): avc: denied { read } for pid=33907 comm="node_exporter" name="hwmon" dev="sysfs" ino=21483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.631:7805): avc: denied { open } for pid=33907 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/net/eno1/addr_assign_type" dev="sysfs" ino=35397 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068284.834:8477): avc: denied { getattr } for pid=25279 comm="mgr-fin" path="/usr/share/zoneinfo/UTC" dev="overlay" ino=1312328 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068056.629:7263): avc: denied { open } for pid=33907 comm="node_exporter" path="/sys/class/net" dev="sysfs" ino=21519 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068341.537:8752): avc: denied { signal } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068270.337:8401): avc: denied { append } for pid=46071 comm="log" path="/var/log/ceph/ceph-osd.0.log" dev="sda1" ino=396203 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068338.478:8713): avc: denied { read } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068202.431:8053): avc: denied { create } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067918.480:6653): avc: denied { open } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/host-details.json" dev="overlay" ino=1574978 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068005.544:7066): avc: denied { search } for pid=25279 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068356.631:8867): avc: denied { search } for pid=33907 comm="node_exporter" name="user" dev="tmpfs" ino=16432 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067986.631:6926): avc: denied { read } for pid=33907 comm="node_exporter" name="file-nr" dev="proc" ino=160426 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068286.629:8506): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=43916 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068023.480:7134): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068076.630:7442): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068214.774:8107): avc: denied { search } for pid=25279 comm="safe_timer" name="/" dev="overlay" ino=1443998 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068286.676:8524): avc: denied { search } for pid=61313 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970689 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c431,c852 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068200.058:8024): avc: denied { write } for pid=75114 comm="msgr-worker-1" laddr=172.21.15.144 lport=51760 faddr=172.21.15.144 fport=6802 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067938.705:6767): avc: denied { search } for pid=55839 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970670 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c421,c817 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068006.630:7098): avc: denied { read } for pid=33907 comm="node_exporter" name="entropy_avail" dev="proc" ino=159485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068202.912:8062): avc: denied { open } for pid=24908 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi144/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068269.479:8363): avc: denied { search } for pid=36781 comm="grafana-server" name="dashboards" dev="sda1" ino=1574974 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068353.468:8818): avc: denied { write } for pid=25279 comm="safe_timer" path="pipe:[143407]" dev="pipefs" ino=143407 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067998.599:7041): avc: denied { append } for pid=24908 comm="log" path="/var/log/ceph/ceph-mon.smithi144.log" dev="sda1" ino=396130 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067935.135:6704): avc: denied { search } for pid=46071 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c131,c293 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.763:7827): avc: denied { write } for pid=24908 comm="fn_monstore" path="pipe:[124477]" dev="pipefs" ino=124477 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068342.430:8758): avc: denied { connect } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068134.323:7743): avc: denied { read } for pid=25279 comm="safe_timer" name="os-release" dev="sda1" ino=394714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068202.912:8062): avc: denied { read } for pid=24908 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068272.924:8420): avc: denied { search } for pid=24908 comm="safe_timer" name="/" dev="overlay" ino=1443979 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c138,c292 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068147.902:7835): avc: denied { search } for pid=24908 comm="safe_timer" name="/" dev="overlay" ino=1443979 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c138,c292 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067992.431:7009): avc: denied { read } for pid=45496 comm="prometheus" path="socket:[299992]" dev="sockfs" ino=299992 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068056.479:7255): avc: denied { read } for pid=36781 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068057.884:7321): avc: denied { getattr } for pid=24908 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi144/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068338.479:8715): avc: denied { read } for pid=36781 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068217.170:8141): avc: denied { read } for pid=61313 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067916.630:6601): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=159485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067936.631:6747): avc: denied { read } for pid=33907 comm="node_exporter" name="xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068353.479:8825): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067915.103:6567): avc: denied { search } for pid=25279 comm="safe_timer" name="libpod-007039c67f5fe93561bc11f5022aa1b83f7960612a98612f62b3f7d629d69d27.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068006.630:7095): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/sys/fs/xfs/stats/stats" dev="sysfs" ino=45563 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068337.383:8676): avc: denied { search } for pid=25279 comm="safe_timer" name="/" dev="overlay" ino=1443998 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067936.309:6716): avc: denied { search } for pid=36781 comm="grafana-server" name="var" dev="sda1" ino=1968497 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068146.297:7775): avc: denied { read } for pid=46071 comm="msgr-worker-1" path="pipe:[195662]" dev="pipefs" ino=195662 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067917.855:6643): avc: denied { dac_read_search } for pid=24908 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068206.631:8081): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/sys/class/net/lo" dev="sysfs" ino=21524 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068346.629:8777): avc: denied { search } for pid=33907 comm="node_exporter" name="fs" dev="proc" ino=160425 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068356.629:8853): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/sys/class/net/lo" dev="sysfs" ino=21524 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068218.799:8173): avc: denied { getattr } for pid=25279 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.631:7811): avc: denied { read } for pid=33907 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068218.480:8166): avc: denied { read } for pid=36781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068066.631:7383): avc: denied { search } for pid=33907 comm="node_exporter" name="host" dev="sda1" ino=1970476 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c480,c863 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068056.479:7255): avc: denied { open } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067918.479:6648): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/etc" dev="sda1" ino=1968494 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068207.945:8096): avc: denied { write } for pid=24908 comm="fn_monstore" path="pipe:[124477]" dev="pipefs" ino=124477 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068216.633:8130): avc: denied { getattr } for pid=33907 comm="node_exporter" name="/" dev="tmpfs" ino=14362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068076.631:7447): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/sys/class/net/lo" dev="sysfs" ino=21524 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067936.631:6752): avc: denied { search } for pid=33907 comm="node_exporter" name="user" dev="tmpfs" ino=16432 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068218.799:8172): avc: denied { read } for pid=25279 comm="safe_timer" name="os-release" dev="sda1" ino=394714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068075.099:7395): avc: denied { search } for pid=46071 comm="safe_timer" name="/" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c131,c293 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067942.430:6771): avc: denied { setopt } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068085.616:7485): avc: denied { read } for pid=36781 comm="grafana-server" path="socket:[319756]" dev="sockfs" ino=319756 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068126.274:7612): avc: denied { open } for pid=25279 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068269.041:8358): avc: denied { search } for pid=25279 comm="safe_timer" name="/" dev="overlay" ino=1443998 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068284.479:8467): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="sda1" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068226.629:8190): avc: denied { read } for pid=33907 comm="node_exporter" name="file-nr" dev="proc" ino=160426 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068353.479:8826): avc: denied { read open } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068147.902:7838): avc: denied { getattr } for pid=24908 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi144/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067936.631:6754): avc: denied { search } for pid=33907 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616068346.629:8773): avc: denied { read } for pid=33907 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068076.629:7432): avc: denied { read } for pid=33907 comm="node_exporter" name="sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068206.632:8094): avc: denied { search } for pid=33907 comm="node_exporter" name="7" dev="proc" ino=159982 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067916.630:6598): avc: denied { read } for pid=33907 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068006.632:7106): avc: denied { search } for pid=33907 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068217.914:8150): avc: denied { getattr } for pid=24908 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi144/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068353.478:8821): avc: denied { search } for pid=36781 comm="grafana-server" name="/" dev="overlay" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068066.629:7372): avc: denied { search } for pid=33907 comm="node_exporter" name="net" dev="proc" ino=159988 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.632:7819): avc: denied { search } for pid=33907 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616068276.631:8440): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=164950 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067986.631:6920): avc: denied { read } for pid=33907 comm="node_exporter" name="arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068126.308:7615): avc: denied { search } for pid=36781 comm="grafana-server" name="var" dev="sda1" ino=1968497 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068056.479:7255): avc: denied { read } for pid=36781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068076.629:7430): avc: denied { read } for pid=33907 comm="node_exporter" name="fd" dev="proc" ino=164528 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068137.067:7754): avc: denied { search } for pid=61313 comm="safe_timer" name="/" dev="overlay" ino=1970689 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c431,c852 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068206.630:8075): avc: denied { read } for pid=33907 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068200.480:8035): avc: denied { open } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/rbd-details.json" dev="overlay" ino=1574987 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067986.630:6912): avc: denied { open } for pid=33907 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068085.616:7484): avc: denied { write } for pid=36781 comm="grafana-server" path="socket:[319756]" dev="sockfs" ino=319756 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068346.630:8782): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068066.630:7381): avc: denied { search } for pid=33907 comm="node_exporter" name="/" dev="tmpfs" ino=14361 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067985.447:6886): avc: denied { read } for pid=25279 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068217.000:8138): avc: denied { read } for pid=61313 comm="msgr-worker-1" path="socket:[238377]" dev="sockfs" ino=238377 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068337.383:8677): avc: denied { search } for pid=25279 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068207.945:8096): avc: denied { use } for pid=24908 comm="fn_monstore" path="pipe:[124477]" dev="pipefs" ino=124477 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068128.755:7714): avc: denied { unlink } for pid=24908 comm="rocksdb:high0" name="000018.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067986.631:6933): avc: denied { search } for pid=33907 comm="node_exporter" name="host" dev="sda1" ino=1970476 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c480,c863 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068005.544:7066): avc: denied { open } for pid=25279 comm="safe_timer" path="/proc/meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068012.430:7120): avc: denied { setopt } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068057.834:7315): avc: denied { open } for pid=25279 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068082.431:7473): avc: denied { getattr } for pid=45496 comm="prometheus" laddr=172.21.15.144 lport=59687 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068198.689:7986): avc: denied { getattr } for pid=25279 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067935.135:6704): avc: denied { search } for pid=46071 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067989.472:6994): avc: denied { read } for pid=25279 comm="safe_timer" name="os-release" dev="overlay" ino=394714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068126.630:7640): avc: denied { read } for pid=33907 comm="node_exporter" name="file-nr" dev="proc" ino=160426 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068057.846:7317): avc: denied { read } for pid=25279 comm="safe_timer" name="os-release" dev="overlay" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068059.478:7350): avc: denied { read } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068337.935:8685): avc: denied { getattr } for pid=24908 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi144/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068338.238:8705): avc: denied { search } for pid=24885 comm="conmon" name="journal" dev="tmpfs" ino=1180 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068213.327:8105): avc: denied { search } for pid=25256 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068346.631:8788): avc: denied { search } for pid=33907 comm="node_exporter" name="host" dev="sda1" ino=1970476 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c480,c863 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068337.383:8676): avc: denied { open } for pid=25279 comm="safe_timer" path="/proc/meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068200.479:8029): avc: denied { search } for pid=36781 comm="grafana-server" name="etc" dev="sda1" ino=1968494 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068200.479:8029): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068076.629:7429): avc: denied { read } for pid=33907 comm="node_exporter" name="stat" dev="proc" ino=164527 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068056.308:7251): avc: denied { read } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068076.629:7435): avc: denied { read } for pid=33907 comm="node_exporter" name="mounts" dev="proc" ino=164950 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068218.479:8161): avc: denied { search } for pid=36781 comm="grafana-server" name="dashboards" dev="sda1" ino=1574974 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067936.630:6737): avc: denied { search } for pid=33907 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068132.430:7730): avc: denied { search } for pid=45496 comm="prometheus" name="etc" dev="sda1" ino=1970592 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c629 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068217.959:8154): avc: denied { search } for pid=24885 comm="conmon" name="journal" dev="tmpfs" ino=1180 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068198.101:7981): avc: denied { open } for pid=61313 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068126.041:7601): avc: denied { open } for pid=61313 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068142.034:7762): avc: denied { read } for pid=61313 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068270.041:8395): avc: denied { search } for pid=24885 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067986.630:6908): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=164527 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068285.077:8480): avc: denied { search } for pid=46071 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067935.010:6702): avc: denied { write } for pid=75114 comm="msgr-worker-2" laddr=172.21.15.144 lport=54558 faddr=172.21.15.152 fport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068132.430:7737): avc: denied { read } for pid=45496 comm="prometheus" path="socket:[327216]" dev="sockfs" ino=327216 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068342.430:8757): avc: denied { setopt } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067932.592:6689): avc: denied { write } for pid=24908 comm="rstore_compact" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068057.697:7309): avc: denied { search } for pid=24885 comm="conmon" name="/" dev="tmpfs" ino=14361 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068076.631:7446): avc: denied { search } for pid=33907 comm="node_exporter" name="net" dev="proc" ino=159988 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.297:7774): avc: denied { write } for pid=46071 comm="tp_osd_tp" path="pipe:[195662]" dev="pipefs" ino=195662 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.631:7814): avc: denied { search } for pid=33907 comm="node_exporter" name="fs" dev="proc" ino=160425 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068276.631:8439): avc: denied { search } for pid=33907 comm="node_exporter" name="net" dev="proc" ino=159988 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068059.175:7346): avc: denied { read } for pid=61313 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068206.630:8072): avc: denied { search } for pid=33907 comm="node_exporter" name="kernel" dev="proc" ino=160351 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068362.430:8883): avc: denied { getattr } for pid=45496 comm="prometheus" laddr=172.21.15.144 lport=39663 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068201.818:8050): avc: denied { open } for pid=46071 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068076.629:7436): avc: denied { read } for pid=33907 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068276.631:8437): avc: denied { read } for pid=33907 comm="node_exporter" name="file-nr" dev="proc" ino=160426 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068269.053:8361): avc: denied { read } for pid=25279 comm="safe_timer" name="os-release" dev="sda1" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068286.629:8502): avc: denied { open } for pid=33907 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.632:7818): avc: denied { search } for pid=33907 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068362.430:8878): avc: denied { search } for pid=45496 comm="prometheus" name="/" dev="overlay" ino=1970584 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c629 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068269.834:8392): avc: denied { search } for pid=25279 comm="mgr-fin" name="etc" dev="sda1" ino=1444004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067988.598:6985): avc: denied { write } for pid=24908 comm="fn_monstore" path="pipe:[124477]" dev="pipefs" ino=124477 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068056.629:7268): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=159485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068057.834:7315): avc: denied { read } for pid=25279 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068075.954:7421): avc: denied { search } for pid=25279 comm="safe_timer" name="etc" dev="sda1" ino=1444004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067916.630:6595): avc: denied { search } for pid=33907 comm="node_exporter" name="7" dev="proc" ino=159982 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068126.308:7615): avc: denied { search } for pid=36781 comm="grafana-server" name="/" dev="overlay" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068016.815:7129): avc: denied { read } for pid=86696 comm="pgrep" name="status" dev="proc" ino=128239 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068076.629:7441): avc: denied { read } for pid=33907 comm="node_exporter" name="file-nr" dev="proc" ino=160426 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068006.600:7076): avc: denied { read } for pid=24885 comm="conmon" path="pipe:[124477]" dev="pipefs" ino=124477 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068346.630:8781): avc: denied { read } for pid=33907 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068276.631:8442): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=159485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068076.631:7451): avc: denied { search } for pid=33907 comm="node_exporter" name="/" dev="tmpfs" ino=14361 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068272.431:8418): avc: denied { write } for pid=45496 comm="prometheus" path="socket:[351895]" dev="sockfs" ino=351895 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068341.479:8750): avc: denied { open } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068012.430:7117): avc: denied { search } for pid=45496 comm="prometheus" name="etc" dev="sda1" ino=1970592 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c629 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068057.697:7309): avc: denied { search } for pid=24885 comm="conmon" name="systemd" dev="tmpfs" ino=14370 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068066.629:7373): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/sys/class/net/lo" dev="sysfs" ino=21524 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067992.431:7008): avc: denied { write } for pid=45496 comm="prometheus" path="socket:[303485]" dev="sockfs" ino=303485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068056.629:7262): avc: denied { read } for pid=33907 comm="node_exporter" name="fd" dev="proc" ino=164528 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068198.101:7980): avc: denied { search } for pid=61313 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068062.430:7362): avc: denied { setopt } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067936.630:6738): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=164950 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067936.309:6718): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068353.946:8835): avc: denied { search } for pid=24885 comm="conmon" name="journal" dev="tmpfs" ino=1180 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068198.701:7987): avc: denied { read } for pid=25279 comm="safe_timer" name="os-release" dev="sda1" ino=394714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068338.238:8704): avc: denied { read } for pid=24885 comm="conmon" path="pipe:[124477]" dev="pipefs" ino=124477 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068217.914:8148): avc: denied { search } for pid=24908 comm="safe_timer" name="mon.smithi144" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068077.887:7466): avc: denied { getattr } for pid=24908 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi144/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068005.022:7052): avc: denied { read } for pid=75114 comm="msgr-worker-1" path="pipe:[270603]" dev="pipefs" ino=270603 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068222.431:8176): avc: denied { search } for pid=45496 comm="prometheus" name="etc" dev="sda1" ino=1970592 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c629 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067926.630:6674): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068127.897:7681): avc: denied { open } for pid=24908 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi144/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068202.431:8057): avc: denied { connect } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068128.755:7714): avc: denied { remove_name } for pid=24908 comm="rocksdb:high0" name="000018.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068020.474:7130): avc: denied { search } for pid=33092 comm="ceph-crash" name="var" dev="sda1" ino=1574839 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c102,c550 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068202.431:8054): avc: denied { create } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068356.631:8869): avc: denied { search } for pid=33907 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068023.480:7136): avc: denied { read } for pid=36781 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068057.884:7319): avc: denied { dac_read_search } for pid=24908 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068146.636:7821): avc: denied { search } for pid=55839 comm="safe_timer" name="/" dev="overlay" ino=1970670 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c421,c817 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068217.959:8153): avc: denied { read } for pid=24885 comm="conmon" path="pipe:[124477]" dev="pipefs" ino=124477 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067936.480:6721): avc: denied { open } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068126.041:7601): avc: denied { search } for pid=61313 comm="safe_timer" name="/" dev="overlay" ino=1970689 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c431,c852 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068066.630:7380): avc: denied { search } for pid=33907 comm="node_exporter" name="rpc" dev="proc" ino=4026532409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068286.629:8497): avc: denied { read } for pid=33907 comm="node_exporter" name="stat" dev="proc" ino=164527 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068085.443:7478): avc: denied { remove_name } for pid=36781 comm="grafana-server" name="grafana.db-journal" dev="overlay" ino=1970615 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068128.478:7700): avc: denied { lock } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.385:7782): avc: denied { search } for pid=25279 comm="safe_timer" name="libpod-007039c67f5fe93561bc11f5022aa1b83f7960612a98612f62b3f7d629d69d27.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067915.479:6570): avc: denied { search } for pid=36781 comm="grafana-server" name="etc" dev="sda1" ino=1968494 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068286.631:8513): avc: denied { search } for pid=33907 comm="node_exporter" name="1" dev="proc" ino=157102 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068066.629:7371): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=21498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068337.383:8677): avc: denied { search } for pid=25279 comm="safe_timer" name="libpod-007039c67f5fe93561bc11f5022aa1b83f7960612a98612f62b3f7d629d69d27.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068215.127:8110): avc: denied { search } for pid=61313 comm="safe_timer" name="/" dev="overlay" ino=1970689 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c431,c852 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068337.383:8677): avc: denied { read } for pid=25279 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068276.630:8424): avc: denied { search } for pid=33907 comm="node_exporter" name="/" dev="overlay" ino=1970467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c480,c863 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068286.631:8510): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068347.479:8797): avc: denied { read } for pid=36781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068337.383:8679): avc: denied { getattr } for pid=25279 comm="safe_timer" name="os-release" dev="sda1" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067986.631:6921): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/7/net/sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067987.872:6961): avc: denied { read } for pid=24908 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067935.010:6701): avc: denied { write } for pid=75114 comm="msgr-worker-0" laddr=172.21.15.144 lport=41436 faddr=172.21.15.152 fport=6808 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068066.630:7378): avc: denied { search } for pid=33907 comm="node_exporter" name="fs" dev="proc" ino=160425 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068077.887:7464): avc: denied { dac_read_search } for pid=24908 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068077.887:7465): avc: denied { read } for pid=24908 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068346.629:8772): avc: denied { open } for pid=33907 comm="node_exporter" path="/sys/class/net" dev="sysfs" ino=21519 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068066.629:7369): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=164527 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068200.480:8032): avc: denied { read } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068059.478:7347): avc: denied { search } for pid=36781 comm="grafana-server" name="etc" dev="sda1" ino=1968494 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616067916.630:6602): avc: denied { search } for pid=33907 comm="node_exporter" name="1" dev="proc" ino=157102 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068198.701:7987): avc: denied { open } for pid=25279 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068146.763:7829): avc: denied { search } for pid=24885 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068284.478:8461): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.234:7769): avc: denied { write } for pid=55839 comm="msgr-worker-0" laddr=172.21.15.144 lport=6824 faddr=172.21.15.152 fport=52276 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068152.431:7847): avc: denied { setopt } for pid=45496 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068208.241:8097): avc: denied { search } for pid=55839 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1970670 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068346.631:8786): avc: denied { search } for pid=33907 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067932.592:6690): avc: denied { open } for pid=24908 comm="rstore_compact" path="/sys/devices/virtual/block/dm-4/queue/logical_block_size" dev="sysfs" ino=45217 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068020.474:7130): avc: denied { dac_override } for pid=33092 comm="ceph-crash" capability=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068126.274:7612): avc: denied { search } for pid=25279 comm="safe_timer" name="etc" dev="sda1" ino=1444004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068076.631:7448): avc: denied { getattr } for pid=33907 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068286.630:8508): avc: denied { read } for pid=33907 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068217.170:8140): avc: denied { search } for pid=61313 comm="safe_timer" name="/" dev="overlay" ino=1970689 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c431,c852 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068055.848:7243): avc: denied { write } for pid=24908 comm="msgr-worker-2" laddr=172.21.15.144 lport=3300 faddr=172.21.15.152 fport=49234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067986.630:6906): avc: denied { getattr } for pid=33907 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068126.629:7630): avc: denied { read } for pid=33907 comm="node_exporter" name="mc" dev="sysfs" ino=21498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068338.478:8712): avc: denied { lock } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067914.816:6566): avc: denied { getattr } for pid=25279 comm="mgr-fin" name="UTC" dev="sda1" ino=1312328 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068218.480:8165): avc: denied { getattr } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068276.630:8434): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067935.213:6708): avc: denied { search } for pid=25279 comm="safe_timer" name="etc" dev="sda1" ino=1444004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068272.924:8421): avc: denied { read } for pid=24908 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.397:7784): avc: denied { open } for pid=25279 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068075.099:7395): avc: denied { search } for pid=46071 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067913.862:6554): avc: denied { search } for pid=24885 comm="conmon" name="journal" dev="tmpfs" ino=1180 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068356.631:8867): avc: denied { search } for pid=33907 comm="node_exporter" name="/" dev="tmpfs" ino=14361 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067916.633:6616): avc: denied { search } for pid=33907 comm="node_exporter" name="/" dev="tmpfs" ino=14361 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067936.309:6717): avc: denied { read } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068281.478:8453): avc: denied { search } for pid=36781 comm="grafana-server" name="etc" dev="sda1" ino=1968494 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068126.262:7611): avc: denied { getattr } for pid=25279 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068385.654:8925): avc: denied { write } for pid=25279 comm="msgr-worker-1" laddr=172.21.15.144 lport=50576 faddr=172.21.15.144 fport=6800 scontext=system_u:system_r:spc_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1', 'type=AVC msg=audit(1616067917.855:6644): avc: denied { search } for pid=24908 comm="safe_timer" name="mon.smithi144" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067913.932:6559): avc: denied { search } for pid=50453 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1970651 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068076.308:7425): avc: denied { read } for pid=36781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968503 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c327,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067999.599:7042): avc: denied { write } for pid=24908 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi144/store.db/000018.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068354.459:8842): avc: denied { open } for pid=61313 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068198.101:7981): avc: denied { search } for pid=61313 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068076.629:7430): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=164528 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067986.631:6925): avc: denied { search } for pid=33907 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068267.924:8323): avc: denied { read } for pid=24908 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068197.911:7966): avc: denied { search } for pid=24908 comm="safe_timer" name="mon.smithi144" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067987.242:6952): avc: denied { search } for pid=61313 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970689 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c431,c852 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068146.630:7804): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/7/net/dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068056.629:7261): avc: denied { read } for pid=33907 comm="node_exporter" name="stat" dev="proc" ino=164527 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067918.579:6654): avc: denied { search } for pid=24885 comm="conmon" name="systemd" dev="tmpfs" ino=14370 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068226.629:8188): avc: denied { read } for pid=33907 comm="node_exporter" name="hwmon" dev="sysfs" ino=21483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068132.743:7740): avc: denied { read } for pid=24885 comm="conmon" path="pipe:[124477]" dev="pipefs" ino=124477 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068269.053:8361): avc: denied { getattr } for pid=25279 comm="safe_timer" name="os-release" dev="sda1" ino=396110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068337.383:8679): avc: denied { search } for pid=25279 comm="safe_timer" name="etc" dev="sda1" ino=1444004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c495,c625 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068226.629:8186): avc: denied { read } for pid=33907 comm="node_exporter" name="stat" dev="proc" ino=164527 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068270.041:8393): avc: denied { write } for pid=24908 comm="fn_monstore" path="pipe:[124477]" dev="pipefs" ino=124477 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068146.631:7814): avc: denied { open } for pid=33907 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=160426 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616067935.135:6704): avc: denied { open } for pid=46071 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"']

pass 5976775 2021-03-18 10:16:24 2021-03-18 11:21:01 2021-03-18 11:49:36 0:28:35 0:17:26 0:11:09 smithi master ubuntu 18.04 rados/singleton/{all/thrash-rados/{thrash-rados thrashosds-health} mon_election/classic msgr-failures/many msgr/async-v2only objectstore/filestore-xfs rados supported-random-distro$/{ubuntu_latest}} 2
pass 5976776 2021-03-18 10:16:25 2021-03-18 11:22:11 2021-03-18 11:40:46 0:18:35 0:09:05 0:09:30 smithi master centos 8.3 rados/singleton-nomsgr/{all/cache-fs-trunc mon_election/classic rados supported-random-distro$/{centos_8}} 1
pass 5976777 2021-03-18 10:16:26 2021-03-18 11:22:11 2021-03-18 11:54:21 0:32:10 0:21:22 0:10:48 smithi master centos 8.3 rados/cephadm/upgrade/{1-start-distro/1-start-centos_8.3-octopus 2-repo_digest/defaut 3-start-upgrade 4-wait mon_election/classic} 2
pass 5976778 2021-03-18 10:16:27 2021-03-18 11:23:02 2021-03-18 11:54:16 0:31:14 0:24:51 0:06:23 smithi master rhel 8.3 rados/thrash/{0-size-min-size-overrides/2-size-2-min-size 1-pg-log-overrides/normal_pg_log 2-recovery-overrides/{default} backoff/peering_and_degraded ceph clusters/{fixed-2 openstack} crc-failures/bad_map_crc_failure d-balancer/crush-compat mon_election/classic msgr-failures/few msgr/async-v1only objectstore/bluestore-comp-lz4 rados supported-random-distro$/{rhel_8} thrashers/morepggrow thrashosds-health workloads/small-objects-balanced} 2
pass 5976779 2021-03-18 10:16:28 2021-03-18 11:23:12 2021-03-18 11:40:10 0:16:58 0:10:44 0:06:14 smithi master rhel 8.3 rados/multimon/{clusters/21 mon_election/classic msgr-failures/many msgr/async no_pools objectstore/bluestore-low-osd-mem-target rados supported-random-distro$/{rhel_8} tasks/mon_clock_with_skews} 3
pass 5976780 2021-03-18 10:16:28 2021-03-18 11:23:32 2021-03-18 12:26:49 1:03:17 0:52:22 0:10:55 smithi master centos 8.2 rados/cephadm/thrash/{0-distro/centos_8.2_kubic_stable 1-start 2-thrash 3-tasks/small-objects fixed-2 msgr/async root} 2
pass 5976781 2021-03-18 10:16:29 2021-03-18 11:23:43 2021-03-18 12:13:02 0:49:19 0:40:34 0:08:45 smithi master centos 8.3 rados/standalone/{mon_election/connectivity supported-random-distro$/{centos_8} workloads/erasure-code} 1
pass 5976782 2021-03-18 10:16:30 2021-03-18 11:23:53 2021-03-18 11:56:10 0:32:17 0:24:26 0:07:51 smithi master rhel 8.3 rados/singleton/{all/thrash_cache_writeback_proxy_none mon_election/connectivity msgr-failures/none msgr/async objectstore/bluestore-bitmap rados supported-random-distro$/{rhel_8}} 2
pass 5976783 2021-03-18 10:16:31 2021-03-18 11:25:03 2021-03-18 11:46:36 0:21:33 0:14:02 0:07:31 smithi master rhel 8.3 rados/thrash-erasure-code-shec/{ceph clusters/{fixed-4 openstack} mon_election/classic msgr-failures/fastclose objectstore/bluestore-comp-zlib rados recovery-overrides/{more-partial-recovery} supported-random-distro$/{rhel_8} thrashers/default thrashosds-health workloads/ec-rados-plugin=shec-k=4-m=3-c=2} 4
pass 5976784 2021-03-18 10:16:32 2021-03-18 11:25:44 2021-03-18 11:51:33 0:25:49 0:16:20 0:09:29 smithi master ubuntu 20.04 rados/cephadm/workunits/{0-distro/ubuntu_20.04_kubic_stable mon_election/classic task/test_cephadm} 1
pass 5976785 2021-03-18 10:16:33 2021-03-18 11:25:44 2021-03-18 11:43:43 0:17:59 0:07:58 0:10:01 smithi master centos 8.3 rados/singleton-nomsgr/{all/ceph-kvstore-tool mon_election/connectivity rados supported-random-distro$/{centos_8}} 1
pass 5976786 2021-03-18 10:16:34 2021-03-18 11:26:34 2021-03-18 11:45:52 0:19:18 0:08:24 0:10:54 smithi master centos 8.3 rados/mgr/{clusters/{2-node-mgr} debug/mgr mon_election/connectivity objectstore/bluestore-stupid supported-random-distro$/{centos_8} tasks/workunits} 2
pass 5976787 2021-03-18 10:16:35 2021-03-18 11:26:45 2021-03-18 11:47:34 0:20:49 0:13:19 0:07:30 smithi master ubuntu 18.04 rados/perf/{ceph mon_election/classic objectstore/bluestore-comp openstack scheduler/dmclock_default_shards settings/optimized ubuntu_18.04 workloads/fio_4M_rand_write} 1
pass 5976788 2021-03-18 10:16:36 2021-03-18 11:26:45 2021-03-18 12:24:28 0:57:43 0:50:07 0:07:36 smithi master rhel 8.3 rados/cephadm/with-work/{0-distro/rhel_8.3_kubic_stable fixed-2 mode/packaged mon_election/connectivity msgr/async-v1only start tasks/rados_python} 2
pass 5976789 2021-03-18 10:16:37 2021-03-18 11:27:16 2021-03-18 11:56:20 0:29:04 0:19:30 0:09:34 smithi master centos 8.3 rados/thrash/{0-size-min-size-overrides/3-size-2-min-size 1-pg-log-overrides/short_pg_log 2-recovery-overrides/{more-async-recovery} backoff/normal ceph clusters/{fixed-2 openstack} crc-failures/default d-balancer/on mon_election/connectivity msgr-failures/osd-delay msgr/async-v2only objectstore/bluestore-comp-snappy rados supported-random-distro$/{centos_8} thrashers/none thrashosds-health workloads/small-objects-localized} 2
pass 5976790 2021-03-18 10:16:38 2021-03-18 11:27:16 2021-03-18 12:15:50 0:48:34 0:41:23 0:07:11 smithi master rhel 8.3 rados/cephadm/smoke/{distro/rhel_8.3_kubic_stable fixed-2 mon_election/connectivity start} 2
pass 5976791 2021-03-18 10:16:39 2021-03-18 11:28:47 2021-03-18 11:45:50 0:17:03 0:07:58 0:09:05 smithi master centos 8.3 rados/singleton/{all/watch-notify-same-primary mon_election/classic msgr-failures/few msgr/async-v1only objectstore/bluestore-comp-lz4 rados supported-random-distro$/{centos_8}} 1
pass 5976792 2021-03-18 10:16:40 2021-03-18 11:28:47 2021-03-18 12:08:10 0:39:23 0:29:35 0:09:48 smithi master centos 8.3 rados/singleton-bluestore/{all/cephtool mon_election/classic msgr-failures/few msgr/async-v1only objectstore/bluestore-comp-snappy rados supported-random-distro$/{centos_8}} 1
pass 5976793 2021-03-18 10:16:40 2021-03-18 11:28:47 2021-03-18 11:50:12 0:21:25 0:12:20 0:09:05 smithi master centos 8.3 rados/objectstore/{backends/ceph_objectstore_tool supported-random-distro$/{centos_8}} 1
pass 5976794 2021-03-18 10:16:41 2021-03-18 11:29:07 2021-03-18 11:55:06 0:25:59 0:14:44 0:11:15 smithi master ubuntu 18.04 rados/cephadm/smoke/{distro/ubuntu_18.04 fixed-2 mon_election/classic start} 2
pass 5976795 2021-03-18 10:16:42 2021-03-18 11:29:48 2021-03-18 12:09:33 0:39:45 0:27:49 0:11:56 smithi master ubuntu 18.04 rados/thrash-erasure-code-overwrites/{bluestore-bitmap ceph clusters/{fixed-2 openstack} fast/normal mon_election/connectivity msgr-failures/few rados recovery-overrides/{more-active-recovery} supported-random-distro$/{ubuntu_latest} thrashers/pggrow thrashosds-health workloads/ec-pool-snaps-few-objects-overwrites} 2
pass 5976796 2021-03-18 10:16:43 2021-03-18 11:30:58 2021-03-18 11:47:23 0:16:25 0:06:50 0:09:35 smithi master centos 8.3 rados/singleton-nomsgr/{all/ceph-post-file mon_election/classic rados supported-random-distro$/{centos_8}} 1
pass 5976797 2021-03-18 10:16:44 2021-03-18 11:32:29 2021-03-18 11:59:03 0:26:34 0:15:51 0:10:43 smithi master ubuntu 18.04 rados/basic/{ceph clusters/{fixed-2 openstack} mon_election/classic msgr-failures/few msgr/async-v2only objectstore/bluestore-hybrid rados supported-random-distro$/{ubuntu_latest} tasks/rados_stress_watch} 2
pass 5976798 2021-03-18 10:16:45 2021-03-18 11:33:29 2021-03-18 12:02:39 0:29:10 0:23:31 0:05:39 smithi master rhel 8.3 rados/thrash/{0-size-min-size-overrides/2-size-2-min-size 1-pg-log-overrides/normal_pg_log 2-recovery-overrides/{more-active-recovery} backoff/peering ceph clusters/{fixed-2 openstack} crc-failures/bad_map_crc_failure d-balancer/crush-compat mon_election/classic msgr-failures/fastclose msgr/async objectstore/bluestore-comp-zlib rados supported-random-distro$/{rhel_8} thrashers/pggrow thrashosds-health workloads/small-objects} 2
fail 5976799 2021-03-18 10:16:46 2021-03-18 11:33:30 2021-03-18 13:09:45 1:36:15 1:28:35 0:07:40 smithi master rhel 8.3 rados/cephadm/smoke-roleless/{1-start 2-services/{basic rgw} 3-final distro/rhel_8.3_kubic_stable} 2
Failure Reason:

SELinux denials found on ubuntu@smithi045.front.sepia.ceph.com: ['type=AVC msg=audit(1616068792.296:8178): avc: denied { getattr } for pid=35450 comm="node_exporter" name="/" dev="tmpfs" ino=12351 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068932.301:8806): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=171422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068780.087:8048): avc: denied { setopt } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068803.771:8210): avc: denied { write } for pid=43672 comm="grafana-server" path="socket:[352942]" dev="sockfs" ino=352942 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068803.328:8202): avc: denied { read } for pid=43672 comm="grafana-server" name="png" dev="sda1" ino=1966085 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068601.009:7192): avc: denied { write } for pid=26404 comm="rstore_compact" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068620.086:7298): avc: denied { write } for pid=44429 comm="prometheus" path="socket:[320846]" dev="sockfs" ino=320846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068712.297:7780): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=173267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068512.297:6746): avc: denied { open } for pid=35450 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=20785 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068962.297:9015): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=30065 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068950.225:8925): avc: denied { open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/hosts-overview.json" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068532.295:6825): avc: denied { read } for pid=35450 comm="node_exporter" name="stat" dev="proc" ino=172378 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069038.184:9418): avc: denied { write } for pid=26380 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068954.231:8961): avc: denied { open } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069021.083:9284): avc: denied { read } for pid=26404 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069022.296:9299): avc: denied { search } for pid=35450 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068686.017:7619): avc: denied { read } for pid=26404 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068532.950:6843): avc: denied { search } for pid=56529 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068871.352:8554): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="tmpfs" ino=12350 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068706.833:7744): avc: denied { open } for pid=26785 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068952.296:8933): avc: denied { read } for pid=35450 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068871.731:8564): avc: denied { search } for pid=26785 comm="safe_timer" name="usr" dev="sda1" ino=658316 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069034.636:9381): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="sda1" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068512.225:6735): avc: denied { read } for pid=43672 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068692.296:7641): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069036.982:9390): avc: denied { getattr } for pid=26785 comm="msgr-worker-1" laddr=172.21.15.45 lport=6800 faddr=172.21.15.107 fport=47332 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068684.722:7593): avc: denied { open } for pid=26785 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068542.300:6949): avc: denied { search } for pid=35450 comm="node_exporter" name="host" dev="sda1" ino=1839635 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c767 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068790.086:8146): avc: denied { getattr } for pid=44429 comm="prometheus" laddr=172.21.15.45 lport=39423 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068872.295:8577): avc: denied { read } for pid=35450 comm="node_exporter" name="fd" dev="proc" ino=172379 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068962.297:9017): avc: denied { search } for pid=35450 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069037.920:9412): avc: denied { read } for pid=42172 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068854.195:8469): avc: denied { read } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068596.002:7093): avc: denied { getattr } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069040.225:9441): avc: denied { lock } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068931.529:8757): avc: denied { search } for pid=51635 comm="safe_timer" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c1,c200 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068712.297:7783): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=171422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069018.003:9236): avc: denied { signal } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069022.296:9295): avc: denied { read } for pid=35450 comm="node_exporter" name="stat" dev="proc" ino=172378 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068770.805:7992): avc: denied { write } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068953.926:8953): avc: denied { read } for pid=56529 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068871.352:8554): avc: denied { search } for pid=26380 comm="conmon" name="systemd" dev="tmpfs" ino=12359 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068542.299:6944): avc: denied { getattr } for pid=35450 comm="node_exporter" name="/" dev="tmpfs" ino=12351 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068602.295:7211): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="overlay" ino=1837665 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c767 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068872.296:8590): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=171422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069034.196:9375): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068931.375:8751): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068853.350:8463): avc: denied { search } for pid=26380 comm="conmon" name="journal" dev="tmpfs" ino=13382 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068952.296:8931): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="overlay" ino=1837665 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c767 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068932.301:8804): avc: denied { read } for pid=35450 comm="node_exporter" name="entropy_avail" dev="proc" ino=171422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069019.226:9265): avc: denied { read } for pid=43672 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068847.586:8348): avc: denied { search } for pid=26785 comm="safe_timer" name="etc" dev="sda1" ino=1442299 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068787.723:8106): avc: denied { append } for pid=42172 comm="log" path="/var/log/ceph/ceph-osd.0.log" dev="sda1" ino=395837 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069013.319:9176): avc: denied { write } for pid=56529 comm="bstore_kv_sync" path="/dev/dm-0" dev="devtmpfs" ino=108289 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068514.269:6787): avc: denied { write } for pid=56529 comm="osd_srv_heartbt" path="pipe:[222631]" dev="pipefs" ino=222631 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068851.051:8393): avc: denied { dac_read_search } for pid=26404 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068705.727:7721): avc: denied { append } for pid=46311 comm="log" path="/var/log/ceph/ceph-osd.1.log" dev="sda1" ino=395841 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068954.219:8959): avc: denied { search } for pid=26785 comm="safe_timer" name="libpod-722053c3dca6bf5448f2339bb00c594495867f94e3a343d72524ebd087422426.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068681.268:7537): avc: denied { search } for pid=42172 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966114 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c165,c594 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068771.033:7993): avc: denied { dac_read_search } for pid=26404 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068612.295:7255): avc: denied { search } for pid=35450 comm="node_exporter" name="7" dev="proc" ino=165324 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068596.288:7115): avc: denied { getattr } for pid=26785 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068938.224:8862): avc: denied { getattr } for pid=43672 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068702.297:7696): avc: denied { read } for pid=35450 comm="node_exporter" name="ce_count" dev="sysfs" ino=48268 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068847.054:8338): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068971.834:9044): avc: denied { open } for pid=101288 comm="pgrep" path="/proc/26404/status" dev="proc" ino=133163 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069014.199:9184): avc: denied { use } for pid=26404 comm="fn_monstore" path="pipe:[129746]" dev="pipefs" ino=129746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068512.296:6739): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=172378 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068791.791:8154): avc: denied { open } for pid=94445 comm="pgrep" path="/proc/26380/status" dev="proc" ino=131429 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068786.034:8102): avc: denied { dac_read_search } for pid=26404 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068551.736:6954): avc: denied { search } for pid=84337 comm="pgrep" name="26380" dev="proc" ino=131425 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068602.224:7207): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/etc" dev="sda1" ino=1966099 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068773.225:8032): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068788.037:8121): avc: denied { search } for pid=46311 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c235 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068860.086:8481): avc: denied { setopt } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068871.572:8559): avc: denied { search } for pid=51635 comm="safe_timer" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c1,c200 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068932.096:8761): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069014.195:9181): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068953.926:8953): avc: denied { search } for pid=56529 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c95,c734 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068533.224:6846): avc: denied { lock } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068706.585:7735): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069014.537:9195): avc: denied { open } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068847.054:8339): avc: denied { search } for pid=26380 comm="conmon" name="systemd" dev="tmpfs" ino=12359 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068511.495:6725): avc: denied { write } for pid=26380 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069022.296:9296): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=172379 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068681.017:7535): avc: denied { open } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068542.298:6940): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=172388 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068781.034:8053): avc: denied { getattr } for pid=26404 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068772.296:8009): avc: denied { read } for pid=35450 comm="node_exporter" name="mounts" dev="proc" ino=172388 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068542.297:6934): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=48268 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068788.224:8126): avc: denied { lock } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069040.087:9431): avc: denied { getattr } for pid=44429 comm="prometheus" path="/etc/hosts" dev="tmpfs" ino=194674 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068602.296:7216): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069034.226:9377): avc: denied { read } for pid=43672 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068932.296:8795): avc: denied { search } for pid=35450 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069040.087:9431): avc: denied { search } for pid=44429 comm="prometheus" name="etc" dev="sda1" ino=1966159 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068862.297:8498): avc: denied { search } for pid=35450 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616068962.297:9008): avc: denied { read } for pid=35450 comm="node_exporter" name="entropy_avail" dev="proc" ino=171422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068712.299:7791): avc: denied { search } for pid=35450 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068937.074:8854): avc: denied { write } for pid=26404 comm="fn_monstore" path="pipe:[129746]" dev="pipefs" ino=129746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068771.152:7995): avc: denied { open } for pid=26785 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068852.080:8424): avc: denied { search } for pid=56529 comm="safe_timer" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c95,c734 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068602.296:7220): avc: denied { search } for pid=35450 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068680.224:7516): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/etc" dev="sda1" ino=1966099 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068540.991:6925): avc: denied { open } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068682.298:7577): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="tmpfs" ino=12350 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068938.224:8862): avc: denied { search } for pid=43672 comm="grafana-server" name="etc" dev="sda1" ino=1966099 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068783.823:8098): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068597.012:7122): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="tmpfs" ino=12350 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068773.225:8031): avc: denied { read } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068622.422:7364): avc: denied { open } for pid=26785 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068972.296:9053): avc: denied { read } for pid=35450 comm="node_exporter" name="mc" dev="sysfs" ino=20785 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068781.821:8057): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="tmpfs" ino=12350 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068783.823:8099): avc: denied { write } for pid=26380 comm="conmon" name="socket" dev="tmpfs" ino=13391 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068792.297:8181): avc: denied { search } for pid=35450 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068787.237:8104): avc: denied { getattr } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068621.847:7318): avc: denied { write } for pid=26785 comm="msgr-worker-1" laddr=172.21.15.45 lport=45682 faddr=172.21.15.45 fport=3300 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068861.671:8491): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="sda1" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068622.299:7360): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=171422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069032.297:9353): avc: denied { search } for pid=35450 comm="node_exporter" name="1" dev="proc" ino=163757 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068781.034:8054): avc: denied { open } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068791.035:8150): avc: denied { search } for pid=26404 comm="safe_timer" name="/" dev="overlay" ino=1442271 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c690,c878 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069020.087:9275): avc: denied { getattr } for pid=44429 comm="prometheus" laddr=172.21.15.45 lport=33855 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068630.087:7381): avc: denied { search } for pid=44429 comm="prometheus" name="etc" dev="sda1" ino=1966159 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068506.225:6646): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068685.551:7615): avc: denied { append } for pid=44429 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068942.735:8899): avc: denied { read } for pid=46311 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068962.296:9005): avc: denied { read } for pid=35450 comm="node_exporter" name="fd" dev="proc" ino=172379 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068680.225:7520): avc: denied { open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068846.438:8333): avc: denied { read } for pid=46311 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068508.004:6681): avc: denied { append } for pid=44429 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068597.012:7122): avc: denied { search } for pid=26380 comm="conmon" name="journal" dev="tmpfs" ino=13382 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068849.389:8378): avc: denied { open } for pid=42172 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068511.795:6730): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="sda1" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068773.164:8029): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="sda1" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068871.719:8562): avc: denied { open } for pid=26785 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068770.087:7969): avc: denied { create } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068954.385:8963): avc: denied { write } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068962.297:9020): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068854.195:8470): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068932.295:8792): avc: denied { search } for pid=35450 comm="node_exporter" name="net" dev="proc" ino=165330 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068935.931:8836): avc: denied { write } for pid=75707 comm="msgr-worker-1" laddr=172.21.15.45 lport=41492 faddr=172.21.15.45 fport=6802 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068512.296:6738): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/7" dev="proc" ino=165324 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068596.003:7094): avc: denied { write } for pid=26404 comm="rstore_compact" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068782.296:8081): avc: denied { search } for pid=35450 comm="node_exporter" name="fs" dev="proc" ino=173266 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068712.297:7782): avc: denied { open } for pid=35450 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/hwmon/hwmon0/temp1_crit" dev="sysfs" ino=34546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069018.561:9257): avc: denied { open } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068542.298:6941): avc: denied { read } for pid=35450 comm="node_exporter" name="file-nr" dev="proc" ino=173267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069042.299:9469): avc: denied { search } for pid=35450 comm="node_exporter" name="1" dev="proc" ino=163757 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068712.297:7779): avc: denied { search } for pid=35450 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068954.196:8956): avc: denied { read } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068622.296:7341): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/7/net/sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068702.316:7704): avc: denied { append } for pid=44429 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069032.296:9345): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068532.676:6838): avc: denied { write } for pid=42172 comm="safe_timer" path="pipe:[187397]" dev="pipefs" ino=187397 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068620.086:7293): avc: denied { create } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069019.225:9263): avc: denied { read } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069032.623:9364): avc: denied { open } for pid=26785 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068772.296:8004): avc: denied { read } for pid=35450 comm="node_exporter" name="stat" dev="proc" ino=172378 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068622.295:7334): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="overlay" ino=1837665 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c767 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069042.299:9470): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068766.032:7929): avc: denied { dac_read_search } for pid=26404 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068956.225:8982): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/etc" dev="sda1" ino=1966099 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069032.297:9350): avc: denied { search } for pid=35450 comm="node_exporter" name="kernel" dev="proc" ino=174118 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068598.312:7150): avc: denied { getattr } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068602.297:7234): avc: denied { search } for pid=35450 comm="node_exporter" name="net" dev="proc" ino=165330 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068951.070:8928): avc: denied { search } for pid=26404 comm="safe_timer" name="var" dev="sda1" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c690,c878 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068864.761:8504): avc: denied { write } for pid=51635 comm="msgr-worker-2" laddr=172.21.15.45 lport=45982 faddr=172.21.15.45 fport=3300 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068702.296:7689): avc: denied { read } for pid=35450 comm="node_exporter" name="stat" dev="proc" ino=172378 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069013.319:9174): avc: denied { write } for pid=75707 comm="msgr-worker-0" laddr=172.21.15.45 lport=57056 faddr=172.21.15.45 fport=6826 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068702.027:7684): avc: denied { write } for pid=26380 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068788.224:8128): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068871.295:8545): avc: denied { read } for pid=26404 comm="msgr-worker-1" path="socket:[169624]" dev="sockfs" ino=169624 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068852.296:8448): avc: denied { search } for pid=35450 comm="node_exporter" name="kernel" dev="proc" ino=174118 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069040.843:9446): avc: denied { search } for pid=51635 comm="safe_timer" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c1,c200 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068540.086:6920): avc: denied { connect } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068932.295:8792): avc: denied { search } for pid=35450 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068965.917:9034): avc: denied { write } for pid=26785 comm="msgr-worker-0" laddr=172.21.15.45 lport=40708 faddr=172.21.15.45 fport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068953.926:8953): avc: denied { search } for pid=56529 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068783.823:8096): avc: denied { write } for pid=26404 comm="fn_monstore" path="pipe:[129746]" dev="pipefs" ino=129746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068623.224:7371): avc: denied { read } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068622.298:7353): avc: denied { getattr } for pid=35450 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068767.803:7961): avc: denied { search } for pid=26380 comm="conmon" name="systemd" dev="tmpfs" ino=12359 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068706.585:7736): avc: denied { write } for pid=26380 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068766.032:7930): avc: denied { read } for pid=26404 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068932.296:8801): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/sys/fs/xfs/stats/stats" dev="sysfs" ino=50013 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068930.683:8741): avc: denied { search } for pid=46311 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068532.296:6832): avc: denied { search } for pid=35450 comm="node_exporter" name="kernel" dev="proc" ino=174118 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068847.586:8348): avc: denied { open } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068803.771:8208): avc: denied { getopt } for pid=43672 comm="grafana-server" laddr=172.21.15.45 lport=36822 faddr=35.241.23.245 fport=443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069020.087:9272): avc: denied { create } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069042.296:9455): avc: denied { read } for pid=35450 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068685.576:7616): avc: denied { write } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068870.086:8534): avc: denied { search } for pid=44429 comm="prometheus" name="etc" dev="sda1" ino=1966159 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068971.834:9042): avc: denied { open } for pid=101288 comm="pgrep" path="/proc/26380/status" dev="proc" ino=131429 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068851.051:8394): avc: denied { search } for pid=26404 comm="safe_timer" name="mon.smithi045" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068965.917:9028): avc: denied { shutdown } for pid=26785 comm="msgr-worker-1" laddr=172.21.15.45 lport=6800 faddr=172.21.15.45 fport=39044 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068599.225:7157): avc: denied { open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-sync-overview.json" dev="overlay" ino=1444471 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068506.226:6653): avc: denied { open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/hosts-overview.json" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068692.297:7649): avc: denied { search } for pid=35450 comm="node_exporter" name="fs" dev="proc" ino=173266 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068853.622:8467): avc: denied { getattr } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068602.296:7227): avc: denied { read } for pid=35450 comm="node_exporter" name="cpufreq" dev="sysfs" ino=29977 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068962.296:9004): avc: denied { read } for pid=35450 comm="node_exporter" name="stat" dev="proc" ino=172378 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068679.810:7497): avc: denied { write } for pid=46311 comm="safe_timer" path="pipe:[194125]" dev="pipefs" ino=194125 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068872.296:8578): avc: denied { read } for pid=35450 comm="node_exporter" name="arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068512.297:6754): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/sys/class/net/ens1f1" dev="sysfs" ino=37772 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068602.300:7235): avc: denied { search } for pid=35450 comm="node_exporter" name="fs" dev="proc" ino=173266 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068765.128:7918): avc: denied { open } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068622.011:7324): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068872.296:8587): avc: denied { search } for pid=35450 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068533.224:6847): avc: denied { read } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068689.224:7633): avc: denied { read } for pid=43672 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068532.304:6837): avc: denied { append } for pid=44429 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068712.298:7788): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068765.116:7917): avc: denied { getattr } for pid=26785 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068962.298:9023): avc: denied { read } for pid=35450 comm="node_exporter" name="file-nr" dev="proc" ino=173267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068960.087:9000): avc: denied { write } for pid=44429 comm="prometheus" path="socket:[388725]" dev="sockfs" ino=388725 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068602.225:7208): avc: denied { read } for pid=43672 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068620.086:7296): avc: denied { connect } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068787.828:8113): avc: denied { read } for pid=26380 comm="conmon" path="pipe:[129746]" dev="pipefs" ino=129746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068856.052:8476): avc: denied { dac_read_search } for pid=26404 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068532.295:6829): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/sys/fs/xfs/stats/stats" dev="sysfs" ino=50013 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068772.296:8010): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069042.299:9476): avc: denied { search } for pid=35450 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616068556.046:6966): avc: denied { open } for pid=26785 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068965.917:9037): avc: denied { accept } for pid=26785 comm="msgr-worker-0" lport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069022.296:9301): avc: denied { open } for pid=35450 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069032.297:9353): avc: denied { read } for pid=35450 comm="node_exporter" name="mounts" dev="proc" ino=172388 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068783.823:8096): avc: denied { use } for pid=26404 comm="fn_monstore" path="pipe:[129746]" dev="pipefs" ino=129746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069022.297:9313): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=48080 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068938.225:8864): avc: denied { open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069014.537:9195): avc: denied { getattr } for pid=26785 comm="safe_timer" name="os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068542.299:6943): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=171422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068870.086:8540): avc: denied { connect } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068935.952:8842): avc: denied { write } for pid=26785 comm="safe_timer" path="pipe:[148857]" dev="pipefs" ino=148857 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068536.992:6879): avc: denied { read } for pid=26404 comm="msgr-worker-2" path="socket:[169612]" dev="sockfs" ino=169612 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068802.296:8199): avc: denied { getattr } for pid=35450 comm="node_exporter" name="/" dev="tmpfs" ino=12351 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068542.297:6933): avc: denied { read } for pid=35450 comm="node_exporter" name="ce_count" dev="sysfs" ino=48268 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069036.085:9383): avc: denied { search } for pid=26404 comm="safe_timer" name="/" dev="overlay" ino=1442271 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c690,c878 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068865.563:8509): avc: denied { use } for pid=26404 comm="fn_monstore" path="pipe:[129746]" dev="pipefs" ino=129746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068622.007:7321): avc: denied { write } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068871.352:8554): avc: denied { write } for pid=26380 comm="conmon" name="socket" dev="tmpfs" ino=13391 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068602.296:7230): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/sys/class/net/ens1f1" dev="sysfs" ino=37772 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068949.828:8907): avc: denied { search } for pid=51635 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068602.224:7206): avc: denied { getattr } for pid=43672 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068622.296:7344): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/sys/fs/xfs/stats/stats" dev="sysfs" ino=50013 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068710.087:7765): avc: denied { getattr } for pid=44429 comm="prometheus" laddr=172.21.15.45 lport=46055 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068950.087:8909): avc: denied { getattr } for pid=44429 comm="prometheus" path="/etc/hosts" dev="tmpfs" ino=194674 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068952.297:8940): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=173267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068596.288:7114): avc: denied { open } for pid=26785 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068599.224:7156): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068712.297:7781): avc: denied { search } for pid=35450 comm="node_exporter" name="kernel" dev="proc" ino=174118 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069014.537:9195): avc: denied { search } for pid=26785 comm="safe_timer" name="usr" dev="sda1" ino=658316 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068784.471:8101): avc: denied { search } for pid=51635 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c1,c200 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068772.296:8017): avc: denied { read } for pid=35450 comm="node_exporter" name="addr_assign_type" dev="sysfs" ino=34350 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068623.351:7375): avc: denied { search } for pid=51635 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c1,c200 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068788.128:8123): avc: denied { open } for pid=56529 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068542.297:6935): avc: denied { read } for pid=35450 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068779.874:8042): avc: denied { open } for pid=44429 comm="prometheus" path="/prometheus" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068790.086:8147): avc: denied { write } for pid=44429 comm="prometheus" path="socket:[352365]" dev="sockfs" ino=352365 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068940.086:8873): avc: denied { setopt } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069865.917:9570): avc: denied { shutdown } for pid=26785 comm="msgr-worker-1" laddr=172.21.15.45 lport=40710 faddr=172.21.15.45 fport=6800 scontext=system_u:system_r:spc_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1', 'type=AVC msg=audit(1616068510.087:6715): avc: denied { getattr } for pid=44429 comm="prometheus" laddr=172.21.15.45 lport=53893 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068537.938:6895): avc: denied { search } for pid=26785 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068803.328:8203): avc: denied { add_name } for pid=43672 comm="grafana-server" name="grafana.db-journal" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069018.205:9240): avc: denied { write } for pid=26380 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068533.224:6848): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068681.016:7534): avc: denied { getattr } for pid=26404 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068512.297:6757): avc: denied { search } for pid=35450 comm="node_exporter" name="net" dev="proc" ino=165330 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068556.058:6968): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068846.438:8333): avc: denied { search } for pid=46311 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068512.305:6768): avc: denied { read } for pid=44429 comm="prometheus" path="socket:[196826]" dev="sockfs" ino=196826 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068876.055:8610): avc: denied { open } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069019.225:9264): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068707.225:7749): avc: denied { search } for pid=43672 comm="grafana-server" name="/" dev="overlay" ino=1966093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068537.950:6897): avc: denied { open } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068707.225:7749): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068767.226:7957): avc: denied { read } for pid=43672 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068803.328:8203): avc: denied { dac_override } for pid=43672 comm="grafana-server" capability=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068880.086:8613): avc: denied { search } for pid=44429 comm="prometheus" name="/" dev="overlay" ino=1966143 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068596.300:7117): avc: denied { getattr } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068862.297:8499): avc: denied { search } for pid=35450 comm="node_exporter" name="host" dev="sda1" ino=1839635 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c767 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068616.870:7274): avc: denied { getattr } for pid=26785 comm="mgr-fin" path="/usr/lib64/python3.6" dev="overlay" ino=919830 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068622.298:7357): avc: denied { search } for pid=35450 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068623.224:7372): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068533.225:6850): avc: denied { open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/cephfs-overview.json" dev="overlay" ino=1444462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068681.016:7534): avc: denied { search } for pid=26404 comm="safe_timer" name="var" dev="sda1" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c690,c878 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068954.196:8956): avc: denied { read } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068765.097:7913): avc: denied { read } for pid=26404 comm="msgr-worker-2" path="pipe:[132125]" dev="pipefs" ino=132125 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068532.800:6842): avc: denied { open } for pid=46311 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069037.614:9397): avc: denied { write } for pid=42172 comm="osd_srv_heartbt" path="pipe:[187397]" dev="pipefs" ino=187397 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068932.225:8768): avc: denied { read } for pid=43672 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068788.224:8127): avc: denied { read } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068789.237:8138): avc: denied { open } for pid=26785 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068792.295:8163): avc: denied { search } for pid=35450 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069016.082:9218): avc: denied { getattr } for pid=26404 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068851.806:8408): avc: denied { search } for pid=97651 comm="pgrep" name="26404" dev="proc" ino=133126 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068542.297:6932): avc: denied { open } for pid=35450 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=20785 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068949.660:8906): avc: denied { append } for pid=46311 comm="log" path="/var/log/ceph/ceph-osd.1.log" dev="sda1" ino=395841 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068681.016:7534): avc: denied { dac_read_search } for pid=26404 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068624.089:7376): avc: denied { search } for pid=46311 comm="safe_timer" name="/" dev="overlay" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c235 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068630.087:7388): avc: denied { read } for pid=44429 comm="prometheus" path="socket:[313259]" dev="sockfs" ino=313259 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068952.296:8933): avc: denied { read } for pid=35450 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069022.296:9300): avc: denied { read } for pid=35450 comm="node_exporter" name="xfs" dev="sysfs" ino=50011 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068512.297:6762): avc: denied { search } for pid=35450 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068852.080:8425): avc: denied { read } for pid=56529 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068962.297:9007): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069042.299:9468): avc: denied { search } for pid=35450 comm="node_exporter" name="net" dev="proc" ino=165330 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068848.004:8369): avc: denied { append } for pid=44429 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068872.303:8600): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068680.708:7531): avc: denied { open } for pid=26785 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068596.224:7105): avc: denied { getattr } for pid=43672 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069016.082:9219): avc: denied { open } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069022.296:9299): avc: denied { search } for pid=35450 comm="node_exporter" name="net" dev="proc" ino=165330 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068597.085:7127): avc: denied { search } for pid=46311 comm="safe_timer" name="/" dev="overlay" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c235 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069032.297:9349): avc: denied { search } for pid=35450 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068531.914:6822): avc: denied { open } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068615.944:7268): avc: denied { search } for pid=56529 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068792.296:8166): avc: denied { search } for pid=35450 comm="node_exporter" name="net" dev="proc" ino=165330 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068972.327:9060): avc: denied { search } for pid=26785 comm="safe_timer" name="etc" dev="sda1" ino=1442299 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068851.598:8402): avc: denied { search } for pid=26785 comm="safe_timer" name="/" dev="overlay" ino=1442290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068682.296:7569): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/7/net/sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068707.225:7752): avc: denied { read } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068934.108:8823): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068865.563:8510): avc: denied { read } for pid=26380 comm="conmon" path="pipe:[129746]" dev="pipefs" ino=129746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068940.086:8870): avc: denied { search } for pid=44429 comm="prometheus" name="etc" dev="sda1" ino=1966159 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068972.297:9056): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069014.195:9180): avc: denied { read } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068515.988:6799): avc: denied { search } for pid=26404 comm="safe_timer" name="var" dev="sda1" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c690,c878 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068952.298:8942): avc: denied { search } for pid=35450 comm="node_exporter" name="host" dev="sda1" ino=1839635 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c767 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068791.791:8154): avc: denied { search } for pid=94445 comm="pgrep" name="26380" dev="proc" ino=131425 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068852.299:8454): avc: denied { search } for pid=35450 comm="node_exporter" name="user" dev="tmpfs" ino=13457 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069037.920:9411): avc: denied { search } for pid=42172 comm="safe_timer" name="/" dev="overlay" ino=1966114 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c165,c594 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068599.873:7162): avc: denied { getattr } for pid=44429 comm="prometheus" path="/prometheus/queries.active" dev="dm-4" ino=158 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068870.086:8543): avc: denied { read } for pid=44429 comm="prometheus" path="socket:[370031]" dev="sockfs" ino=370031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068872.224:8567): avc: denied { search } for pid=43672 comm="grafana-server" name="/" dev="overlay" ino=1966093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068956.071:8977): avc: denied { dac_read_search } for pid=26404 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068708.003:7756): avc: denied { signal } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069036.982:9389): avc: denied { setopt } for pid=26785 comm="msgr-worker-0" laddr=172.21.15.45 lport=6800 faddr=172.21.15.107 fport=47332 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068512.297:6761): avc: denied { search } for pid=35450 comm="node_exporter" name="user" dev="tmpfs" ino=13457 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068787.829:8115): avc: denied { search } for pid=26380 comm="conmon" name="journal" dev="tmpfs" ino=13382 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068876.055:8609): avc: denied { search } for pid=26404 comm="safe_timer" name="var" dev="sda1" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c690,c878 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069019.225:9261): avc: denied { search } for pid=43672 comm="grafana-server" name="etc" dev="sda1" ino=1966099 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069034.225:9376): avc: denied { getattr } for pid=43672 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068956.071:8979): avc: denied { getattr } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068802.296:8201): avc: denied { search } for pid=35450 comm="node_exporter" name="host" dev="sda1" ino=1839635 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c767 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068508.954:6682): avc: denied { search } for pid=42172 comm="safe_timer" name="/" dev="overlay" ino=1966114 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c165,c594 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068782.106:8066): avc: denied { search } for pid=46311 comm="safe_timer" name="/" dev="overlay" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c235 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069042.296:9458): avc: denied { read } for pid=35450 comm="node_exporter" name="cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068683.224:7586): avc: denied { read } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068506.225:6646): avc: denied { search } for pid=43672 comm="grafana-server" name="/" dev="overlay" ino=1966093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068539.224:6904): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068952.297:8938): avc: denied { read } for pid=35450 comm="node_exporter" name="mounts" dev="proc" ino=172388 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068803.390:8204): avc: denied { unlink } for pid=43672 comm="grafana-server" name="grafana.db-journal" dev="sda1" ino=1966086 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068871.731:8564): avc: denied { search } for pid=26785 comm="safe_timer" name="etc" dev="sda1" ino=1442299 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068682.296:7560): avc: denied { search } for pid=35450 comm="node_exporter" name="kernel" dev="proc" ino=174118 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068765.116:7915): avc: denied { open } for pid=26785 comm="safe_timer" path="/proc/meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068852.295:8434): avc: denied { read } for pid=35450 comm="node_exporter" name="fd" dev="proc" ino=172379 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069032.296:9345): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/7" dev="proc" ino=165324 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068848.224:8375): avc: denied { read } for pid=43672 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068788.224:8124): avc: denied { getattr } for pid=43672 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068621.524:7310): avc: denied { read } for pid=76167 comm="msgr-worker-1" path="pipe:[274127]" dev="pipefs" ino=274127 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068939.784:8869): avc: denied { search } for pid=46311 comm="safe_timer" name="diff" dev="sda1" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069014.691:9198): avc: denied { open } for pid=46311 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069022.225:9291): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069014.195:9180): avc: denied { read } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068702.297:7697): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=48268 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068848.224:8373): avc: denied { read } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068626.007:7377): avc: denied { search } for pid=26404 comm="safe_timer" name="var" dev="sda1" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c690,c878 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068509.493:6703): avc: denied { open } for pid=26380 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068622.422:7366): avc: denied { search } for pid=26785 comm="safe_timer" name="usr" dev="sda1" ino=658316 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068950.122:8918): avc: denied { getattr } for pid=26785 comm="mgr-fin" path="/usr/share/zoneinfo/UTC" dev="overlay" ino=1181438 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068850.086:8390): avc: denied { write } for pid=44429 comm="prometheus" path="socket:[360437]" dev="sockfs" ino=360437 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068621.847:7316): avc: denied { write } for pid=26785 comm="safe_timer" path="pipe:[148856]" dev="pipefs" ino=148856 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068782.296:8082): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=171422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068537.236:6888): avc: denied { read } for pid=51635 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068532.295:6826): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068682.296:7569): avc: denied { read } for pid=35450 comm="node_exporter" name="sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068932.295:8791): avc: denied { read } for pid=35450 comm="node_exporter" name="fd" dev="proc" ino=172379 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068506.226:6651): avc: denied { read open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068680.355:7525): avc: denied { open } for pid=26380 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068962.296:9004): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=172378 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068780.087:8045): avc: denied { create } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069032.623:9364): avc: denied { read } for pid=26785 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068686.017:7618): avc: denied { dac_read_search } for pid=26404 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069014.199:9186): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068852.295:8441): avc: denied { search } for pid=35450 comm="node_exporter" name="fs" dev="proc" ino=173266 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068872.296:8589): avc: denied { search } for pid=35450 comm="node_exporter" name="kernel" dev="proc" ino=174118 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069021.083:9285): avc: denied { getattr } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068930.509:8738): avc: denied { write } for pid=42172 comm="tp_osd_tp" path="pipe:[187397]" dev="pipefs" ino=187397 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069040.225:9439): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068770.471:7990): avc: denied { search } for pid=51635 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c1,c200 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068682.298:7575): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068533.926:6860): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="overlay" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068704.196:7712): avc: denied { read } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068846.292:8328): avc: denied { write } for pid=26785 comm="msgr-worker-1" laddr=172.21.15.45 lport=45682 faddr=172.21.15.45 fport=3300 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068850.086:8388): avc: denied { connect } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069042.299:9475): avc: denied { search } for pid=35450 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068791.792:8156): avc: denied { open } for pid=94445 comm="pgrep" path="/proc/26404/status" dev="proc" ino=133163 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068597.012:7119): avc: denied { use } for pid=26404 comm="fn_monstore" path="pipe:[129746]" dev="pipefs" ino=129746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068850.086:8387): avc: denied { setopt } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068866.224:8523): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069014.537:9195): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="sda1" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068847.054:8339): avc: denied { write } for pid=26380 comm="conmon" name="socket" dev="tmpfs" ino=13391 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068595.841:7082): avc: denied { read } for pid=26785 comm="msgr-worker-1" path="socket:[279281]" dev="sockfs" ino=279281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069022.296:9296): avc: denied { read } for pid=35450 comm="node_exporter" name="fd" dev="proc" ino=172379 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068682.296:7570): avc: denied { open } for pid=35450 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/net/eno1/addr_assign_type" dev="sysfs" ino=34350 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068932.303:8810): avc: denied { search } for pid=35450 comm="node_exporter" name="user" dev="tmpfs" ino=13457 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068533.503:6851): avc: denied { write } for pid=26404 comm="fn_monstore" path="pipe:[129746]" dev="pipefs" ino=129746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069032.297:9352): avc: denied { open } for pid=35450 comm="node_exporter" path="/sys/fs/xfs/dm-4/stats/stats" dev="sysfs" ino=50083 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068936.108:8849): avc: denied { search } for pid=26785 comm="safe_timer" name="/" dev="overlay" ino=1442290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068622.011:7324): avc: denied { open } for pid=26380 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068772.314:8028): avc: denied { append } for pid=44429 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068783.212:8095): avc: denied { search } for pid=26785 comm="safe_timer" name="etc" dev="sda1" ino=1442299 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068515.988:6801): avc: denied { getattr } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068532.677:6841): avc: denied { read } for pid=26785 comm="msgr-worker-1" path="socket:[190646]" dev="sockfs" ino=190646 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068533.224:6849): avc: denied { read open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068848.224:8372): avc: denied { lock } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068532.296:6833): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=172388 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068702.820:7708): avc: denied { open } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069042.295:9453): avc: denied { read } for pid=35450 comm="node_exporter" name="stat" dev="proc" ino=172378 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068682.858:7581): avc: denied { search } for pid=51635 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c1,c200 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068872.224:8571): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068942.297:8894): avc: denied { search } for pid=35450 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069014.525:9194): avc: denied { getattr } for pid=26785 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068782.296:8077): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/sys/class/net/ens1f1" dev="sysfs" ino=37772 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068852.299:8456): avc: denied { search } for pid=35450 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616068772.299:8020): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=173267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068931.375:8752): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="tmpfs" ino=12350 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068853.350:8460): avc: denied { read } for pid=26380 comm="conmon" path="pipe:[129746]" dev="pipefs" ino=129746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068932.296:8797): avc: denied { open } for pid=35450 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=50011 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068596.002:7091): avc: denied { read } for pid=26404 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068602.295:7212): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/7" dev="proc" ino=165324 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068792.295:8163): avc: denied { read } for pid=35450 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068872.296:8582): avc: denied { open } for pid=35450 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=48268 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068506.992:6665): avc: denied { use } for pid=26404 comm="fn_monstore" path="pipe:[129746]" dev="pipefs" ino=129746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068712.298:7787): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/7/net/dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068620.086:7295): avc: denied { connect } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068622.296:7341): avc: denied { read } for pid=35450 comm="node_exporter" name="sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068792.295:8160): avc: denied { read } for pid=35450 comm="node_exporter" name="stat" dev="proc" ino=172378 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068686.224:7623): avc: denied { read open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068612.297:7259): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=172388 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068852.299:8457): avc: denied { search } for pid=35450 comm="node_exporter" name="host" dev="sda1" ino=1839635 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c767 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068783.212:8094): avc: denied { search } for pid=26785 comm="safe_timer" name="libpod-722053c3dca6bf5448f2339bb00c594495867f94e3a343d72524ebd087422426.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069042.296:9457): avc: denied { search } for pid=35450 comm="node_exporter" name="fs" dev="proc" ino=173266 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068935.952:8843): avc: denied { read } for pid=26785 comm="msgr-worker-2" path="pipe:[148857]" dev="pipefs" ino=148857 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068847.054:8338): avc: denied { write } for pid=26380 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068621.983:7320): avc: denied { search } for pid=56529 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068697.935:7666): avc: denied { search } for pid=51635 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068619.951:7289): avc: denied { search } for pid=51635 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c1,c200 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068962.297:9008): avc: denied { search } for pid=35450 comm="node_exporter" name="kernel" dev="proc" ino=174118 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068962.299:9026): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/sys/class/net/ens1f1" dev="sysfs" ino=37772 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068954.219:8960): avc: denied { getattr } for pid=26785 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068866.224:8524): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/etc" dev="sda1" ino=1966099 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068507.771:6676): avc: denied { open } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068871.352:8553): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068767.225:7952): avc: denied { search } for pid=43672 comm="grafana-server" name="etc" dev="sda1" ino=1966099 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068872.296:8579): avc: denied { open } for pid=35450 comm="node_exporter" path="/sys/class/net" dev="sysfs" ino=20806 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068930.510:8740): avc: denied { write } for pid=56529 comm="msgr-worker-2" laddr=172.21.15.45 lport=6826 faddr=172.21.15.107 fport=48288 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069031.713:9327): avc: denied { search } for pid=42172 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1966114 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069022.296:9302): avc: denied { search } for pid=35450 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068848.224:8371): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/etc" dev="sda1" ino=1966099 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068707.225:7751): avc: denied { lock } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068532.676:6839): avc: denied { read } for pid=42172 comm="msgr-worker-2" path="pipe:[187397]" dev="pipefs" ino=187397 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068952.296:8934): avc: denied { search } for pid=35450 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068932.296:8800): avc: denied { read open } for pid=35450 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/net/eno1/addr_assign_type" dev="sysfs" ino=34350 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068612.015:7252): avc: denied { search } for pid=46311 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068680.708:7531): avc: denied { read } for pid=26785 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068951.070:8928): avc: denied { dac_read_search } for pid=26404 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069039.177:9430): avc: denied { search } for pid=46311 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c235 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068700.107:7675): avc: denied { read } for pid=26785 comm="mgr-fin" name="localtime" dev="overlay" ino=265527 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068852.190:8429): avc: denied { search } for pid=42172 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068620.086:7291): avc: denied { getattr } for pid=44429 comm="prometheus" path="/etc/hosts" dev="tmpfs" ino=194674 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068706.673:7742): avc: denied { open } for pid=56529 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068962.297:9008): avc: denied { search } for pid=35450 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068787.828:8112): avc: denied { write } for pid=26404 comm="fn_monstore" path="pipe:[129746]" dev="pipefs" ino=129746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068962.297:9016): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068682.297:7573): avc: denied { read } for pid=35450 comm="node_exporter" name="file-nr" dev="proc" ino=173267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068792.296:8165): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068852.190:8429): avc: denied { search } for pid=42172 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966114 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c165,c594 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068706.585:7735): avc: denied { write } for pid=26380 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068965.917:9030): avc: denied { setopt } for pid=26785 comm="msgr-worker-0" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068555.046:6962): avc: denied { search } for pid=56529 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068953.855:8950): avc: denied { read } for pid=26404 comm="msgr-worker-2" path="pipe:[132125]" dev="pipefs" ino=132125 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068507.759:6674): avc: denied { search } for pid=26785 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068771.808:8000): avc: denied { write } for pid=26380 comm="conmon" name="socket" dev="tmpfs" ino=13391 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068622.296:7339): avc: denied { open } for pid=35450 comm="node_exporter" path="/sys/class/net" dev="sysfs" ino=20806 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068702.298:7703): avc: denied { read } for pid=35450 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068539.224:6905): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/etc" dev="sda1" ino=1966099 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069013.318:9171): avc: denied { read } for pid=56529 comm="msgr-worker-0" path="socket:[273343]" dev="sockfs" ino=273343 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068942.297:8893): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="tmpfs" ino=12350 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068942.298:8897): avc: denied { search } for pid=35450 comm="node_exporter" name="fs" dev="proc" ino=173266 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068596.300:7116): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068706.673:7742): avc: denied { search } for pid=56529 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068771.808:7999): avc: denied { write } for pid=26380 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068601.004:7191): avc: denied { read } for pid=42172 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068866.224:8525): avc: denied { open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069018.005:9237): avc: denied { append } for pid=44429 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068512.225:6733): avc: denied { read } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068602.296:7233): avc: denied { search } for pid=35450 comm="node_exporter" name="host" dev="sda1" ino=1839635 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c767 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068871.731:8564): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069042.296:9459): avc: denied { read } for pid=35450 comm="node_exporter" name="cpufreq" dev="sysfs" ino=29977 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068599.517:7159): avc: denied { open } for pid=26380 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069040.225:9444): avc: denied { read } for pid=43672 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068955.388:8970): avc: denied { write } for pid=26380 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068689.224:7631): avc: denied { search } for pid=43672 comm="grafana-server" name="/" dev="overlay" ino=1966093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068554.623:6961): avc: denied { open } for pid=26761 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068611.750:7249): avc: denied { search } for pid=87621 comm="pgrep" name="26404" dev="proc" ino=133126 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068542.299:6942): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=171422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068771.164:7997): avc: denied { open } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068932.096:8761): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="sda1" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068954.231:8961): avc: denied { getattr } for pid=26785 comm="safe_timer" name="os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068792.296:8170): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068621.524:7309): avc: denied { write } for pid=76167 comm="ceph_timer" path="pipe:[274127]" dev="pipefs" ino=274127 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068851.225:8400): avc: denied { read } for pid=43672 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069031.850:9334): avc: denied { read } for pid=104464 comm="pgrep" name="status" dev="proc" ino=133163 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068956.071:8978): avc: denied { search } for pid=26404 comm="safe_timer" name="mon.smithi045" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068616.398:7272): avc: denied { open } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068515.225:6795): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/etc" dev="sda1" ino=1966099 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068506.433:6657): avc: denied { open } for pid=51635 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068848.224:8370): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069042.296:9458): avc: denied { open } for pid=35450 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068533.926:6860): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="sda1" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068852.295:8435): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068595.880:7088): avc: denied { open } for pid=56529 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068765.097:7911): avc: denied { append } for pid=26404 comm="log" path="/var/log/ceph/ceph-mon.smithi045.log" dev="sda1" ino=395815 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068602.296:7224): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069038.660:9427): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="sda1" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068782.224:8071): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/etc" dev="sda1" ino=1966099 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068620.224:7301): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068692.771:7661): avc: denied { search } for pid=26785 comm="safe_timer" name="libpod-722053c3dca6bf5448f2339bb00c594495867f94e3a343d72524ebd087422426.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068771.808:8000): avc: denied { write } for pid=26380 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068782.295:8075): avc: denied { read } for pid=35450 comm="node_exporter" name="fd" dev="proc" ino=172379 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068601.009:7192): avc: denied { add_name } for pid=26404 comm="rstore_compact" name="000018.log" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068620.086:7299): avc: denied { read } for pid=44429 comm="prometheus" path="socket:[317105]" dev="sockfs" ino=317105 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068686.225:7624): avc: denied { read } for pid=43672 comm="grafana-server" name="osds-overview.json" dev="sda1" ino=1444466 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068512.297:6743): avc: denied { search } for pid=35450 comm="node_exporter" name="1" dev="proc" ino=163757 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068601.520:7201): avc: denied { write } for pid=26380 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068788.128:8122): avc: denied { search } for pid=56529 comm="safe_timer" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c95,c734 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068931.322:8748): avc: denied { search } for pid=56529 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c95,c734 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068622.271:7332): avc: denied { search } for pid=42172 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068702.027:7684): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068601.004:7191): avc: denied { open } for pid=42172 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068853.350:8461): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069034.336:9380): avc: denied { read } for pid=56529 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068789.249:8140): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="overlay" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068622.295:7336): avc: denied { search } for pid=35450 comm="node_exporter" name="7" dev="proc" ino=165324 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068798.245:8187): avc: denied { append } for pid=26404 comm="log" path="/var/log/ceph/ceph-mon.smithi045.log" dev="sda1" ino=395815 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068692.299:7659): avc: denied { search } for pid=35450 comm="node_exporter" name="host" dev="sda1" ino=1839635 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c767 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068850.086:8385): avc: denied { search } for pid=44429 comm="prometheus" name="etc" dev="sda1" ino=1966159 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068872.296:8585): avc: denied { search } for pid=35450 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068956.226:8983): avc: denied { read } for pid=43672 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068800.224:8194): avc: denied { read } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069036.086:9384): avc: denied { search } for pid=26404 comm="safe_timer" name="mon.smithi045" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068942.295:8879): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/7" dev="proc" ino=165324 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068531.499:6820): avc: denied { write } for pid=26380 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068506.433:6657): avc: denied { search } for pid=51635 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068863.224:8502): avc: denied { read open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068771.033:7994): avc: denied { getattr } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068510.987:6719): avc: denied { getattr } for pid=26404 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068682.296:7562): avc: denied { read } for pid=35450 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069022.296:9302): avc: denied { read } for pid=35450 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068612.297:7259): avc: denied { search } for pid=35450 comm="node_exporter" name="1" dev="proc" ino=163757 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068940.086:8877): avc: denied { read } for pid=44429 comm="prometheus" path="socket:[386153]" dev="sockfs" ino=386153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068792.297:8182): avc: denied { search } for pid=35450 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616068872.296:8591): avc: denied { search } for pid=35450 comm="node_exporter" name="1" dev="proc" ino=163757 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069022.298:9318): avc: denied { search } for pid=35450 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069037.701:9407): avc: denied { read } for pid=42172 comm="msgr-worker-0" path="socket:[279250]" dev="sockfs" ino=279250 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068596.224:7109): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068539.224:6907): avc: denied { read } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068932.224:8765): avc: denied { lock } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069013.332:9177): avc: denied { search } for pid=56529 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068803.858:8212): avc: denied { write } for pid=26380 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068542.297:6935): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068932.295:8794): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/7/net/sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068853.610:8464): avc: denied { read } for pid=26785 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069042.299:9471): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069032.297:9355): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068510.087:6713): avc: denied { setopt } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068620.086:7297): avc: denied { getattr } for pid=44429 comm="prometheus" laddr=172.21.15.45 lport=50932 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068849.389:8378): avc: denied { read } for pid=42172 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068792.295:8160): avc: denied { search } for pid=35450 comm="node_exporter" name="7" dev="proc" ino=165324 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068766.032:7929): avc: denied { search } for pid=26404 comm="safe_timer" name="var" dev="sda1" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c690,c878 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068855.115:8473): avc: denied { getattr } for pid=26785 comm="mgr-fin" path="/usr/share/zoneinfo/UTC" dev="sda1" ino=1181438 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068531.499:6820): avc: denied { write } for pid=26380 comm="conmon" name="socket" dev="tmpfs" ino=13391 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068596.003:7094): avc: denied { create } for pid=26404 comm="rstore_compact" name="000015.log" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068686.017:7620): avc: denied { getattr } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068800.225:8196): avc: denied { open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/pool-overview.json" dev="overlay" ino=1444468 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068602.324:7239): avc: denied { search } for pid=26785 comm="safe_timer" name="libpod-722053c3dca6bf5448f2339bb00c594495867f94e3a343d72524ebd087422426.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068519.495:6803): avc: denied { search } for pid=26380 comm="conmon" name="systemd" dev="tmpfs" ino=12359 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068856.052:8476): avc: denied { search } for pid=26404 comm="safe_timer" name="/" dev="overlay" ino=1442271 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c690,c878 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068848.224:8375): avc: denied { read open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068851.806:8407): avc: denied { getattr } for pid=97651 comm="pgrep" path="/proc/26404" dev="proc" ino=133126 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068802.296:8200): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=173267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068707.226:7755): avc: denied { open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/rbd-overview.json" dev="overlay" ino=1444473 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068950.380:8927): avc: denied { write } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069014.199:9187): avc: denied { search } for pid=26380 comm="conmon" name="journal" dev="tmpfs" ino=13382 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068930.683:8742): avc: denied { open } for pid=46311 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069014.537:9195): avc: denied { search } for pid=26785 comm="safe_timer" name="etc" dev="sda1" ino=1442299 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069042.295:9454): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=172379 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068871.352:8553): avc: denied { write } for pid=26380 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068932.295:8788): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="overlay" ino=1837665 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c767 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068532.677:6840): avc: denied { write } for pid=42172 comm="msgr-worker-2" laddr=172.21.15.45 lport=39218 faddr=172.21.15.45 fport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068772.296:8004): avc: denied { search } for pid=35450 comm="node_exporter" name="7" dev="proc" ino=165324 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068932.303:8808): avc: denied { getattr } for pid=35450 comm="node_exporter" name="/" dev="tmpfs" ino=12351 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069041.086:9448): avc: denied { open } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068509.493:6703): avc: denied { write } for pid=26380 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068512.297:6748): avc: denied { read } for pid=35450 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068597.012:7119): avc: denied { write } for pid=26404 comm="fn_monstore" path="pipe:[129746]" dev="pipefs" ino=129746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068867.059:8526): avc: denied { search } for pid=26380 comm="conmon" name="systemd" dev="tmpfs" ino=12359 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069022.297:9311): avc: denied { read } for pid=35450 comm="node_exporter" name="entropy_avail" dev="proc" ino=171422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068767.225:7954): avc: denied { lock } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068533.224:6844): avc: denied { getattr } for pid=43672 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069042.299:9475): avc: denied { search } for pid=35450 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068692.297:7649): avc: denied { read } for pid=35450 comm="node_exporter" name="file-nr" dev="proc" ino=173267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068930.683:8742): avc: denied { search } for pid=46311 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068712.296:7771): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=172378 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068952.296:8931): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068851.224:8398): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069040.225:9443): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068782.297:8087): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068871.572:8559): avc: denied { read } for pid=51635 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068539.224:6904): avc: denied { search } for pid=43672 comm="grafana-server" name="etc" dev="sda1" ino=1966099 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068790.086:8144): avc: denied { setopt } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068512.297:6744): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=171422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068971.928:9050): avc: denied { search } for pid=51635 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068856.052:8476): avc: denied { search } for pid=26404 comm="safe_timer" name="var" dev="sda1" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c690,c878 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068506.992:6667): avc: denied { write } for pid=26380 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068712.297:7773): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068876.055:8610): avc: denied { read } for pid=26404 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069018.561:9257): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068871.719:8561): avc: denied { search } for pid=26785 comm="safe_timer" name="/" dev="overlay" ino=1442290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068512.297:6759): avc: denied { search } for pid=35450 comm="node_exporter" name="fs" dev="proc" ino=173266 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068596.224:7108): avc: denied { read } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068847.586:8348): avc: denied { open } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068706.022:7728): avc: denied { open } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068515.988:6800): avc: denied { read } for pid=26404 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069042.295:9454): avc: denied { read } for pid=35450 comm="node_exporter" name="fd" dev="proc" ino=172379 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068622.299:7360): avc: denied { read } for pid=35450 comm="node_exporter" name="entropy_avail" dev="proc" ino=171422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068601.009:7192): avc: denied { create } for pid=26404 comm="rstore_compact" name="000018.log" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068542.297:6928): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/7" dev="proc" ino=165324 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068767.225:7956): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068601.519:7198): avc: denied { write } for pid=26404 comm="msgr-worker-2" laddr=172.21.15.45 lport=3300 faddr=172.21.15.107 fport=41100 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068770.087:7974): avc: denied { read } for pid=44429 comm="prometheus" path="socket:[345563]" dev="sockfs" ino=345563 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068855.634:8475): avc: denied { open } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069016.549:9229): avc: denied { open } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068765.128:7918): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068531.914:6822): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068938.132:8861): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="overlay" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068765.800:7923): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069040.087:9432): avc: denied { create } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068692.298:7657): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="tmpfs" ino=12350 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068932.296:8798): avc: denied { read } for pid=35450 comm="node_exporter" name="file-nr" dev="proc" ino=173267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068540.991:6925): avc: denied { read } for pid=26404 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068765.128:7918): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069042.299:9474): avc: denied { search } for pid=35450 comm="node_exporter" name="user" dev="tmpfs" ino=13457 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068522.299:6814): avc: denied { search } for pid=35450 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068682.298:7578): avc: denied { search } for pid=35450 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069038.184:9415): avc: denied { use } for pid=26404 comm="fn_monstore" path="pipe:[129746]" dev="pipefs" ino=129746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068803.328:8203): avc: denied { create } for pid=43672 comm="grafana-server" name="grafana.db-journal" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068626.007:7378): avc: denied { open } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068772.296:8016): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069019.875:9269): avc: denied { getattr } for pid=44429 comm="prometheus" path="/prometheus/wal" dev="dm-4" ino=8388752 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068617.224:7278): avc: denied { lock } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068596.225:7112): avc: denied { open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/hosts-overview.json" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068800.224:8195): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068532.296:6831): avc: denied { read } for pid=35450 comm="node_exporter" name="file-nr" dev="proc" ino=173267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068851.051:8393): avc: denied { search } for pid=26404 comm="safe_timer" name="/" dev="overlay" ino=1442271 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c690,c878 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068940.086:8875): avc: denied { getattr } for pid=44429 comm="prometheus" laddr=172.21.15.45 lport=38689 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068871.719:8562): avc: denied { read } for pid=26785 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069037.836:9410): avc: denied { search } for pid=56529 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068612.295:7255): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=172378 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068787.829:8115): avc: denied { write } for pid=26380 comm="conmon" name="socket" dev="tmpfs" ino=13391 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068599.873:7163): avc: denied { getattr } for pid=44429 comm="prometheus" path="/prometheus/wal" dev="dm-4" ino=8388752 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068602.296:7218): avc: denied { read } for pid=35450 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068938.225:8864): avc: denied { read } for pid=43672 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068622.271:7331): avc: denied { search } for pid=42172 comm="safe_timer" name="/" dev="overlay" ino=1966114 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c165,c594 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068940.086:8870): avc: denied { search } for pid=44429 comm="prometheus" name="/" dev="overlay" ino=1966143 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068506.433:6657): avc: denied { search } for pid=51635 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c1,c200 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068766.032:7930): avc: denied { open } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068862.295:8495): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068537.938:6894): avc: denied { search } for pid=26785 comm="safe_timer" name="/" dev="overlay" ino=1442290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068871.352:8554): avc: denied { search } for pid=26380 comm="conmon" name="journal" dev="tmpfs" ino=13382 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068542.297:6932): avc: denied { read } for pid=35450 comm="node_exporter" name="mc" dev="sysfs" ino=20785 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068931.066:8744): avc: denied { read } for pid=26404 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068712.296:7771): avc: denied { search } for pid=35450 comm="node_exporter" name="7" dev="proc" ino=165324 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068512.297:6746): avc: denied { read } for pid=35450 comm="node_exporter" name="mc" dev="sysfs" ino=20785 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068601.010:7196): avc: denied { remove_name } for pid=26404 comm="rocksdb:high0" name="000015.log" dev="dm-4" ino=137 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068602.296:7220): avc: denied { search } for pid=35450 comm="node_exporter" name="kernel" dev="proc" ino=174118 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068707.225:7749): avc: denied { search } for pid=43672 comm="grafana-server" name="etc" dev="sda1" ino=1966099 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068772.299:8021): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068942.296:8885): avc: denied { search } for pid=35450 comm="node_exporter" name="kernel" dev="proc" ino=174118 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068950.194:8919): avc: denied { open } for pid=26785 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068510.987:6719): avc: denied { search } for pid=26404 comm="safe_timer" name="/" dev="overlay" ino=1442271 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c690,c878 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068680.224:7518): avc: denied { read } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068706.585:7736): avc: denied { write } for pid=26380 comm="conmon" name="socket" dev="tmpfs" ino=13391 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068700.591:7681): avc: denied { read } for pid=56529 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068778.003:8035): avc: denied { signal } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068851.224:8398): avc: denied { search } for pid=43672 comm="grafana-server" name="etc" dev="sda1" ino=1966099 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068596.300:7116): avc: denied { open } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068936.067:8848): avc: denied { getattr } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068510.087:6712): avc: denied { create } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068681.719:7555): avc: denied { search } for pid=56529 comm="safe_timer" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c95,c734 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068684.576:7592): avc: denied { write } for pid=26380 comm="conmon" name="socket" dev="tmpfs" ino=13391 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068602.296:7232): avc: denied { search } for pid=35450 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616068693.426:7662): avc: denied { search } for pid=46311 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c235 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068512.297:6753): avc: denied { search } for pid=35450 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068780.087:8046): avc: denied { create } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068712.297:7777): avc: denied { read } for pid=35450 comm="node_exporter" name="hwmon0" dev="sysfs" ino=34541 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069032.297:9351): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/sys/fs/xfs/stats/stats" dev="sysfs" ino=50013 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068790.086:8145): avc: denied { connect } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068542.300:6951): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068710.087:7761): avc: denied { setopt } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068512.297:6763): avc: denied { search } for pid=35450 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616068956.071:8977): avc: denied { search } for pid=26404 comm="safe_timer" name="var" dev="sda1" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c690,c878 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069042.296:9462): avc: denied { search } for pid=35450 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068682.295:7556): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068954.196:8957): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068962.297:9012): avc: denied { open } for pid=35450 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068772.296:8014): avc: denied { read } for pid=35450 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068622.296:7345): avc: denied { read } for pid=35450 comm="node_exporter" name="addr_assign_type" dev="sysfs" ino=34350 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068792.295:8162): avc: denied { read } for pid=35450 comm="node_exporter" name="entropy_avail" dev="proc" ino=171422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068510.087:6710): avc: denied { getattr } for pid=44429 comm="prometheus" path="/etc/hosts" dev="tmpfs" ino=194674 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068506.992:6667): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068771.164:7998): avc: denied { getattr } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068950.225:8924): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068791.035:8150): avc: denied { search } for pid=26404 comm="safe_timer" name="var" dev="sda1" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c690,c878 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068540.991:6924): avc: denied { search } for pid=26404 comm="safe_timer" name="var" dev="sda1" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c690,c878 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068551.736:6953): avc: denied { getattr } for pid=84337 comm="pgrep" path="/proc/26380" dev="proc" ino=131425 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068787.829:8115): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="tmpfs" ino=12350 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069042.295:9451): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="overlay" ino=1837665 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c767 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068954.231:8962): avc: denied { getattr } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069030.087:9326): avc: denied { search } for pid=44429 comm="prometheus" name="/" dev="overlay" ino=1966143 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068540.086:6922): avc: denied { write } for pid=44429 comm="prometheus" path="socket:[300877]" dev="sockfs" ino=300877 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068788.037:8121): avc: denied { read } for pid=46311 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069016.082:9219): avc: denied { search } for pid=26404 comm="safe_timer" name="mon.smithi045" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069041.086:9447): avc: denied { dac_read_search } for pid=26404 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068506.225:6648): avc: denied { lock } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068972.327:9058): avc: denied { search } for pid=26785 comm="safe_timer" name="/" dev="overlay" ino=1442290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068622.298:7350): avc: denied { read } for pid=35450 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068872.224:8572): avc: denied { read } for pid=43672 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068872.296:8591): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=172388 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068949.380:8905): avc: denied { search } for pid=26380 comm="conmon" name="systemd" dev="tmpfs" ino=12359 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069019.875:9268): avc: denied { getattr } for pid=44429 comm="prometheus" path="/prometheus/queries.active" dev="dm-4" ino=158 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069041.086:9447): avc: denied { getattr } for pid=26404 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068954.594:8966): avc: denied { read } for pid=46311 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068873.455:8602): avc: denied { search } for pid=46311 comm="safe_timer" name="/" dev="overlay" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c235 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068680.224:7518): avc: denied { read } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068862.295:8494): avc: denied { read } for pid=35450 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068602.324:7238): avc: denied { search } for pid=26785 comm="safe_timer" name="/" dev="overlay" ino=1442290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068622.011:7325): avc: denied { search } for pid=26380 comm="conmon" name="journal" dev="tmpfs" ino=13382 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068706.846:7746): avc: denied { open } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068790.086:8142): avc: denied { search } for pid=44429 comm="prometheus" name="etc" dev="sda1" ino=1966159 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068512.297:6742): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068622.298:7351): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069022.296:9304): avc: denied { read } for pid=35450 comm="node_exporter" name="cpufreq" dev="sysfs" ino=29977 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068954.231:8961): avc: denied { search } for pid=26785 comm="safe_timer" name="usr" dev="sda1" ino=658316 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068702.296:7694): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=173267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068540.086:6914): avc: denied { getattr } for pid=44429 comm="prometheus" path="/etc/hosts" dev="tmpfs" ino=194674 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068616.131:7270): avc: denied { append } for pid=46311 comm="log" path="/var/log/ceph/ceph-osd.1.log" dev="sda1" ino=395841 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068865.563:8511): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068507.971:6679): avc: denied { read } for pid=56529 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068686.224:7622): avc: denied { getattr } for pid=43672 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068952.296:8937): avc: denied { open } for pid=35450 comm="node_exporter" path="/sys/fs/xfs/dm-4/stats/stats" dev="sysfs" ino=50083 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068621.847:7319): avc: denied { read } for pid=26404 comm="msgr-worker-2" path="socket:[151829]" dev="sockfs" ino=151829 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068630.087:7382): avc: denied { create } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069032.297:9358): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="overlay" ino=1837665 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c767 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068772.296:8008): avc: denied { read } for pid=35450 comm="node_exporter" name="net" dev="sysfs" ino=20806 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068515.099:6794): avc: denied { read } for pid=46311 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068851.051:8393): avc: denied { search } for pid=26404 comm="safe_timer" name="var" dev="sda1" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c690,c878 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068852.304:8458): avc: denied { append } for pid=44429 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068781.201:8056): avc: denied { open } for pid=26785 comm="safe_timer" path="/proc/meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069019.875:9267): avc: denied { open } for pid=44429 comm="prometheus" path="/prometheus" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069016.082:9218): avc: denied { search } for pid=26404 comm="safe_timer" name="/" dev="overlay" ino=1442271 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c690,c878 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068692.297:7647): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/sys/fs/xfs/stats/stats" dev="sysfs" ino=50013 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068596.015:7102): avc: denied { read } for pid=26404 comm="rocksdb:high0" name="000016.sst" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068706.022:7730): avc: denied { getattr } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068683.236:7590): avc: denied { search } for pid=42172 comm="safe_timer" name="/" dev="overlay" ino=1966114 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c165,c594 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068965.917:9039): avc: denied { getattr } for pid=26785 comm="msgr-worker-1" laddr=172.21.15.45 lport=40710 faddr=172.21.15.45 fport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068866.224:8525): avc: denied { read } for pid=43672 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068765.116:7916): avc: denied { read } for pid=26785 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068692.296:7646): avc: denied { read } for pid=35450 comm="node_exporter" name="cpufreq" dev="sysfs" ino=29977 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068788.224:8124): avc: denied { search } for pid=43672 comm="grafana-server" name="etc" dev="sda1" ino=1966099 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068871.731:8564): avc: denied { open } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068962.297:9021): avc: denied { search } for pid=35450 comm="node_exporter" name="user" dev="tmpfs" ino=13457 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068698.808:7668): avc: denied { search } for pid=26785 comm="safe_timer" name="etc" dev="sda1" ino=1442299 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068538.003:6902): avc: denied { append } for pid=44429 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069042.296:9463): avc: denied { read } for pid=35450 comm="node_exporter" name="arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068600.087:7171): avc: denied { append } for pid=44429 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068596.300:7116): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="overlay" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068848.224:8370): avc: denied { search } for pid=43672 comm="grafana-server" name="/" dev="overlay" ino=1966093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068620.086:7290): avc: denied { signal } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068506.225:6650): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069022.297:9310): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068791.035:8151): avc: denied { open } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069040.087:9435): avc: denied { connect } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068512.297:6747): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=171422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068791.035:8151): avc: denied { read } for pid=26404 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068851.051:8394): avc: denied { open } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068596.003:7099): avc: denied { open } for pid=26404 comm="rstore_compact" path="/sys/devices/virtual/block/dm-4/queue/logical_block_size" dev="sysfs" ino=49667 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068942.297:8894): avc: denied { search } for pid=35450 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069037.225:9394): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/etc" dev="sda1" ino=1966099 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069037.701:9408): avc: denied { append } for pid=56529 comm="log" path="/var/log/ceph/ceph-osd.3.log" dev="sda1" ino=395844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068802.296:8199): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068682.296:7572): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=48268 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068767.880:7962): avc: denied { search } for pid=42172 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966114 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c165,c594 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069037.920:9412): avc: denied { open } for pid=42172 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068680.355:7524): avc: denied { read } for pid=26380 comm="conmon" path="pipe:[129746]" dev="pipefs" ino=129746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069038.184:9417): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068780.087:8050): avc: denied { getattr } for pid=44429 comm="prometheus" laddr=172.21.15.45 lport=55851 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068860.086:8486): avc: denied { read } for pid=44429 comm="prometheus" path="socket:[369829]" dev="sockfs" ino=369829 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068782.224:8072): avc: denied { read } for pid=43672 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068872.224:8572): avc: denied { read open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068506.225:6646): avc: denied { search } for pid=43672 comm="grafana-server" name="etc" dev="sda1" ino=1966099 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069020.087:9276): avc: denied { write } for pid=44429 comm="prometheus" path="socket:[394166]" dev="sockfs" ino=394166 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068621.983:7320): avc: denied { open } for pid=56529 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068706.833:7744): avc: denied { search } for pid=26785 comm="safe_timer" name="libpod-722053c3dca6bf5448f2339bb00c594495867f94e3a343d72524ebd087422426.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068506.225:6646): avc: denied { getattr } for pid=43672 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068623.225:7373): avc: denied { read open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068622.011:7322): avc: denied { use } for pid=26404 comm="fn_monstore" path="pipe:[129746]" dev="pipefs" ino=129746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068853.350:8462): avc: denied { append } for pid=26404 comm="log" path="/var/log/ceph/ceph-mon.smithi045.log" dev="sda1" ino=395815 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068798.285:8190): avc: denied { getattr } for pid=26404 comm="rstore_compact" path="/var/lib/ceph/mon/ceph-smithi045/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068788.224:8127): avc: denied { read } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068773.225:8030): avc: denied { lock } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068861.700:8492): avc: denied { search } for pid=51635 comm="safe_timer" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c1,c200 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068962.297:9019): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068782.059:8065): avc: denied { search } for pid=56529 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068874.392:8606): avc: denied { search } for pid=42172 comm="safe_timer" name="/" dev="overlay" ino=1966114 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c165,c594 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068937.074:8857): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="tmpfs" ino=12350 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068852.296:8450): avc: denied { read } for pid=35450 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068599.224:7154): avc: denied { lock } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068623.225:7373): avc: denied { read } for pid=43672 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068622.422:7366): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="sda1" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069014.524:9193): avc: denied { open } for pid=26785 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068872.299:8595): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="tmpfs" ino=12350 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068932.295:8789): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/7" dev="proc" ino=165324 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068531.498:6817): avc: denied { append } for pid=26404 comm="log" path="/var/log/ceph/ceph-mon.smithi045.log" dev="sda1" ino=395815 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068679.810:7499): avc: denied { write } for pid=46311 comm="msgr-worker-1" laddr=172.21.15.45 lport=45918 faddr=172.21.15.45 fport=3300 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068702.297:7700): avc: denied { getattr } for pid=35450 comm="node_exporter" name="/" dev="tmpfs" ino=12351 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068942.735:8899): avc: denied { open } for pid=46311 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068512.334:6769): avc: denied { search } for pid=51635 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c1,c200 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068773.226:8033): avc: denied { open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/osd-device-details.json" dev="overlay" ino=1444465 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068612.298:7260): avc: denied { search } for pid=35450 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068682.296:7561): avc: denied { search } for pid=35450 comm="node_exporter" name="net" dev="proc" ino=165330 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068555.514:6963): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068616.398:7273): avc: denied { getattr } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068506.226:6653): avc: denied { open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/hosts-overview.json" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068788.225:8129): avc: denied { read } for pid=43672 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068705.727:7724): avc: denied { write } for pid=46311 comm="msgr-worker-2" laddr=172.21.15.45 lport=55540 faddr=172.21.15.45 fport=6808 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068789.237:8138): avc: denied { search } for pid=26785 comm="safe_timer" name="libpod-722053c3dca6bf5448f2339bb00c594495867f94e3a343d72524ebd087422426.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068932.296:8799): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/sys/class/net/ens1f1" dev="sysfs" ino=37772 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068542.298:6936): avc: denied { read } for pid=35450 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068618.410:7288): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="sda1" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068684.734:7595): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068955.388:8971): avc: denied { sendto } for pid=26380 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068952.297:8939): avc: denied { getattr } for pid=35450 comm="node_exporter" name="/" dev="tmpfs" ino=12351 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068680.196:7514): avc: denied { read } for pid=46311 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068765.800:7923): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069038.184:9418): avc: denied { search } for pid=26380 comm="conmon" name="systemd" dev="tmpfs" ino=12359 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068704.225:7714): avc: denied { open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/hosts-overview.json" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068862.418:8500): avc: denied { open } for pid=42172 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068962.298:9023): avc: denied { search } for pid=35450 comm="node_exporter" name="fs" dev="proc" ino=173266 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068954.231:8961): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="overlay" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068537.950:6897): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="overlay" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068852.296:8448): avc: denied { read } for pid=35450 comm="node_exporter" name="entropy_avail" dev="proc" ino=171422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068533.224:6849): avc: denied { read } for pid=43672 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068853.610:8464): avc: denied { open } for pid=26785 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068972.296:9054): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/sys/class/net/ens1f1" dev="sysfs" ino=37772 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068792.297:8180): avc: denied { search } for pid=35450 comm="node_exporter" name="user" dev="tmpfs" ino=13457 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068782.003:8061): avc: denied { write } for pid=56529 comm="osd_srv_heartbt" path="pipe:[222631]" dev="pipefs" ino=222631 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068932.295:8793): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/7/net/arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068542.300:6950): avc: denied { read } for pid=35450 comm="node_exporter" name="cpufreq" dev="sysfs" ino=29977 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069039.120:9429): avc: denied { getattr } for pid=26785 comm="mgr-fin" path="/usr/lib64/python3.6" dev="overlay" ino=919830 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068601.009:7194): avc: denied { getattr } for pid=26404 comm="rstore_compact" path="/sys/devices/virtual/block/dm-4/queue/logical_block_size" dev="sysfs" ino=49667 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068618.398:7287): avc: denied { open } for pid=26785 comm="safe_timer" path="/proc/meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068540.991:6924): avc: denied { dac_read_search } for pid=26404 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068962.297:9014): avc: denied { read } for pid=35450 comm="node_exporter" name="cpuinfo_max_freq" dev="sysfs" ino=30065 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068533.224:6844): avc: denied { search } for pid=43672 comm="grafana-server" name="dashboards" dev="sda1" ino=1444459 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068602.296:7225): avc: denied { read } for pid=35450 comm="node_exporter" name="cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068507.771:6676): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068602.813:7241): avc: denied { search } for pid=46311 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c235 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068950.087:8911): avc: denied { create } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068595.562:7076): avc: denied { append } for pid=51635 comm="log" path="/var/log/ceph/ceph-osd.2.log" dev="sda1" ino=395842 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068848.224:8374): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068861.671:8491): avc: denied { search } for pid=26785 comm="safe_timer" name="usr" dev="sda1" ino=658316 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068765.116:7915): avc: denied { search } for pid=26785 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068864.761:8505): avc: denied { read } for pid=26404 comm="msgr-worker-1" path="socket:[206621]" dev="sockfs" ino=206621 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068942.297:8891): avc: denied { search } for pid=35450 comm="node_exporter" name="net" dev="proc" ino=165330 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068782.297:8088): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="tmpfs" ino=12350 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068962.296:9002): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068871.352:8554): avc: denied { write } for pid=26380 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068973.390:9065): avc: denied { sendto } for pid=26380 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068539.873:6912): avc: denied { getattr } for pid=44429 comm="prometheus" path="/prometheus/queries.active" dev="dm-4" ino=158 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068932.301:8804): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=171422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068942.297:8888): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068956.225:8981): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068792.296:8171): avc: denied { open } for pid=35450 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068682.295:7557): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/7" dev="proc" ino=165324 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068506.992:6668): avc: denied { write } for pid=26380 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068871.572:8559): avc: denied { search } for pid=51635 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068787.745:8107): avc: denied { write } for pid=78707 comm="notif-worker0" path="pipe:[285709]" dev="pipefs" ino=285709 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068871.351:8550): avc: denied { read } for pid=26404 comm="msgr-worker-2" path="pipe:[132125]" dev="pipefs" ino=132125 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068938.225:8864): avc: denied { read } for pid=43672 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068779.874:8043): avc: denied { getattr } for pid=44429 comm="prometheus" path="/prometheus/queries.active" dev="dm-4" ino=158 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068602.296:7229): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="tmpfs" ino=12350 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068684.576:7591): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069022.297:9312): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=171422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068772.296:8003): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/7" dev="proc" ino=165324 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068765.800:7924): avc: denied { search } for pid=26380 comm="conmon" name="systemd" dev="tmpfs" ino=12359 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068960.087:9001): avc: denied { read } for pid=44429 comm="prometheus" path="socket:[380778]" dev="sockfs" ino=380778 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069041.086:9448): avc: denied { search } for pid=26404 comm="safe_timer" name="mon.smithi045" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068772.299:8026): avc: denied { search } for pid=35450 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616068931.375:8749): avc: denied { use } for pid=26404 comm="fn_monstore" path="pipe:[129746]" dev="pipefs" ino=129746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068792.295:8160): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=172378 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068706.846:7746): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068803.390:8204): avc: denied { remove_name } for pid=43672 comm="grafana-server" name="grafana.db-journal" dev="overlay" ino=1966086 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068932.295:8793): avc: denied { read } for pid=35450 comm="node_exporter" name="arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068687.905:7630): avc: denied { dac_override } for pid=34631 comm="ceph-crash" capability=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068596.300:7116): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="sda1" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068532.296:6833): avc: denied { read } for pid=35450 comm="node_exporter" name="mounts" dev="proc" ino=172388 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068622.295:7337): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=172379 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068952.297:8939): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068959.875:8992): avc: denied { getattr } for pid=44429 comm="prometheus" path="/prometheus/wal" dev="dm-4" ino=8388752 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068767.225:7956): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068931.066:8744): avc: denied { search } for pid=26404 comm="safe_timer" name="mon.smithi045" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068931.375:8752): avc: denied { search } for pid=26380 comm="conmon" name="systemd" dev="tmpfs" ino=12359 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069022.298:9314): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068852.296:8443): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=30065 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068706.673:7742): avc: denied { read } for pid=56529 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068597.012:7121): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069036.086:9386): avc: denied { getattr } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068971.834:9042): avc: denied { search } for pid=101288 comm="pgrep" name="26380" dev="proc" ino=131425 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068621.983:7320): avc: denied { search } for pid=56529 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068512.297:6751): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068516.570:6802): avc: denied { search } for pid=56529 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c95,c734 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069040.226:9445): avc: denied { open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/hosts-overview.json" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068942.297:8890): avc: denied { getattr } for pid=35450 comm="node_exporter" name="/" dev="tmpfs" ino=12351 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068537.982:6899): avc: denied { open } for pid=46311 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068506.226:6653): avc: denied { read } for pid=43672 comm="grafana-server" name="hosts-overview.json" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069032.091:9341): avc: denied { sendto } for pid=26380 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068702.296:7689): avc: denied { search } for pid=35450 comm="node_exporter" name="7" dev="proc" ino=165324 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069034.226:9378): avc: denied { open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/osds-overview.json" dev="overlay" ino=1444466 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068848.224:8375): avc: denied { read } for pid=43672 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068965.917:9032): avc: denied { name_connect } for pid=26785 comm="msgr-worker-1" dest=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unreserved_port_t:s0 tclass=tcp_socket permissive=1', 'type=AVC msg=audit(1616068950.194:8920): avc: denied { getattr } for pid=26785 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068602.296:7215): avc: denied { search } for pid=35450 comm="node_exporter" name="1" dev="proc" ino=163757 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068596.225:7112): avc: denied { read } for pid=43672 comm="grafana-server" name="hosts-overview.json" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068872.299:8595): avc: denied { search } for pid=35450 comm="node_exporter" name="user" dev="tmpfs" ino=13457 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068687.905:7630): avc: denied { search } for pid=34631 comm="ceph-crash" name="/" dev="overlay" ino=1444308 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c527,c911 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068850.086:8386): avc: denied { create } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068933.378:8819): avc: denied { write } for pid=26380 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068852.296:8444): avc: denied { search } for pid=35450 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068684.734:7596): avc: denied { getattr } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068556.058:6968): avc: denied { open } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069034.196:9374): avc: denied { read } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068532.296:6831): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=173267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068611.750:7248): avc: denied { getattr } for pid=87621 comm="pgrep" path="/proc/26404" dev="proc" ino=133126 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068770.087:7967): avc: denied { search } for pid=44429 comm="prometheus" name="/" dev="overlay" ino=1966143 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068772.296:8009): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=172388 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068597.012:7121): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068692.298:7655): avc: denied { getattr } for pid=35450 comm="node_exporter" name="/" dev="tmpfs" ino=12351 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068971.834:9043): avc: denied { getattr } for pid=101288 comm="pgrep" path="/proc/26404" dev="proc" ino=133126 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068950.194:8919): avc: denied { read } for pid=26785 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069020.087:9271): avc: denied { create } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068767.803:7960): avc: denied { search } for pid=26380 comm="conmon" name="journal" dev="tmpfs" ino=13382 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068932.224:8767): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068779.874:8042): avc: denied { read } for pid=44429 comm="prometheus" name="data" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068537.950:6897): avc: denied { search } for pid=26785 comm="safe_timer" name="usr" dev="sda1" ino=658316 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068852.299:8453): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068532.295:6828): avc: denied { read } for pid=35450 comm="node_exporter" name="ce_count" dev="sysfs" ino=48268 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068704.196:7711): avc: denied { lock } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068702.820:7709): avc: denied { getattr } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068953.766:8946): avc: denied { read } for pid=46311 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068956.071:8980): avc: denied { getattr } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068622.295:7333): avc: denied { signal } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068771.164:7997): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068851.806:8408): avc: denied { read } for pid=97651 comm="pgrep" name="status" dev="proc" ino=133163 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068930.683:8741): avc: denied { search } for pid=46311 comm="safe_timer" name="/" dev="overlay" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c235 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068599.873:7161): avc: denied { read } for pid=44429 comm="prometheus" name="data" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068506.362:6656): avc: denied { read } for pid=26785 comm="msgr-worker-1" path="socket:[245315]" dev="sockfs" ino=245315 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068522.296:6810): avc: denied { read } for pid=35450 comm="node_exporter" name="mc" dev="sysfs" ino=20785 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068686.259:7625): avc: denied { search } for pid=51635 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c1,c200 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068712.298:7789): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068847.586:8348): avc: denied { search } for pid=26785 comm="safe_timer" name="usr" dev="sda1" ino=658316 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068512.296:6741): avc: denied { read } for pid=35450 comm="node_exporter" name="fd" dev="proc" ino=172379 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068623.224:7372): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068872.299:8596): avc: denied { search } for pid=35450 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068596.224:7110): avc: denied { read open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068932.225:8768): avc: denied { read open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068954.219:8959): avc: denied { search } for pid=26785 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068622.422:7366): avc: denied { search } for pid=26785 comm="safe_timer" name="etc" dev="sda1" ino=1442299 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068613.525:7262): avc: denied { search } for pid=26380 comm="conmon" name="journal" dev="tmpfs" ino=13382 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068601.010:7195): avc: denied { read } for pid=26404 comm="rocksdb:high0" name="000019.sst" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068702.296:7690): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=172379 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068702.296:7691): avc: denied { read } for pid=35450 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068692.297:7650): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=48080 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068863.560:8503): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="tmpfs" ino=12350 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068871.572:8560): avc: denied { read } for pid=51635 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068791.035:8152): avc: denied { getattr } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068512.297:6750): avc: denied { read } for pid=35450 comm="node_exporter" name="ce_count" dev="sysfs" ino=48268 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068780.087:8049): avc: denied { connect } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069032.297:9353): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=172388 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068600.086:7166): avc: denied { setopt } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068779.874:8044): avc: denied { getattr } for pid=44429 comm="prometheus" path="/prometheus/wal" dev="dm-4" ino=8388752 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069040.087:9436): avc: denied { getattr } for pid=44429 comm="prometheus" laddr=172.21.15.45 lport=36656 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068535.990:6869): avc: denied { search } for pid=26404 comm="safe_timer" name="/" dev="overlay" ino=1442271 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c690,c878 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068788.225:8129): avc: denied { read open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068792.295:8162): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=171422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068770.087:7973): avc: denied { write } for pid=44429 comm="prometheus" path="socket:[345563]" dev="sockfs" ino=345563 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069016.082:9219): avc: denied { read } for pid=26404 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068872.296:8588): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068848.002:8368): avc: denied { signal } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068932.295:8790): avc: denied { read } for pid=35450 comm="node_exporter" name="stat" dev="proc" ino=172378 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068551.736:6956): avc: denied { read } for pid=84337 comm="pgrep" name="status" dev="proc" ino=133163 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068602.296:7223): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068932.225:8769): avc: denied { open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/cephfs-overview.json" dev="overlay" ino=1444462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068532.295:6827): avc: denied { read } for pid=35450 comm="node_exporter" name="sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068962.296:9004): avc: denied { search } for pid=35450 comm="node_exporter" name="7" dev="proc" ino=165324 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068701.021:7682): avc: denied { dac_read_search } for pid=26404 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068706.846:7746): avc: denied { search } for pid=26785 comm="safe_timer" name="etc" dev="sda1" ino=1442299 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068765.111:7914): avc: denied { read } for pid=26785 comm="mgr-fin" name="localtime" dev="overlay" ino=265527 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068622.422:7364): avc: denied { read } for pid=26785 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069019.226:9265): avc: denied { read open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068680.355:7526): avc: denied { sendto } for pid=26380 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068851.806:8406): avc: denied { open } for pid=97651 comm="pgrep" path="/proc/26380/status" dev="proc" ino=131429 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068680.105:7512): avc: denied { search } for pid=26785 comm="mgr-fin" name="usr" dev="sda1" ino=658316 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068852.295:8441): avc: denied { read } for pid=35450 comm="node_exporter" name="file-nr" dev="proc" ino=173267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068706.585:7734): avc: denied { read } for pid=26380 comm="conmon" path="pipe:[129746]" dev="pipefs" ino=129746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068792.296:8169): avc: denied { search } for pid=35450 comm="node_exporter" name="fs" dev="proc" ino=173266 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068789.237:8137): avc: denied { search } for pid=26785 comm="safe_timer" name="/" dev="overlay" ino=1442290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068531.914:6823): avc: denied { getattr } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068936.120:8851): avc: denied { search } for pid=26785 comm="safe_timer" name="etc" dev="sda1" ino=1442299 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068782.296:8078): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068680.086:7502): avc: denied { signal } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068509.491:6701): avc: denied { append } for pid=26404 comm="log" path="/var/log/ceph/ceph-mon.smithi045.log" dev="sda1" ino=395815 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068788.225:8131): avc: denied { open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-sync-overview.json" dev="sda1" ino=1444471 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068865.683:8513): avc: denied { search } for pid=26785 comm="safe_timer" name="diff" dev="sda1" ino=1442290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068712.299:7791): avc: denied { search } for pid=35450 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068682.296:7562): avc: denied { search } for pid=35450 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068870.086:8534): avc: denied { search } for pid=44429 comm="prometheus" name="/" dev="overlay" ino=1966143 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068782.224:8070): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068710.087:7767): avc: denied { read } for pid=44429 comm="prometheus" path="socket:[333393]" dev="sockfs" ino=333393 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068782.295:8076): avc: denied { read } for pid=35450 comm="node_exporter" name="net" dev="sysfs" ino=20806 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069019.875:9267): avc: denied { read } for pid=44429 comm="prometheus" name="data" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068596.003:7099): avc: denied { read } for pid=26404 comm="rstore_compact" name="logical_block_size" dev="sysfs" ino=49667 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068856.052:8477): avc: denied { getattr } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068802.295:8198): avc: denied { search } for pid=35450 comm="node_exporter" name="kernel" dev="proc" ino=174118 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068534.872:6865): avc: denied { search } for pid=56529 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c95,c734 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068846.438:8333): avc: denied { open } for pid=46311 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068601.010:7196): avc: denied { unlink } for pid=26404 comm="rocksdb:high0" name="000015.log" dev="dm-4" ino=137 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068766.136:7934): avc: denied { open } for pid=46311 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069032.297:9354): avc: denied { read } for pid=35450 comm="node_exporter" name="file-nr" dev="proc" ino=173267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068772.296:8015): avc: denied { read } for pid=35450 comm="node_exporter" name="cpufreq" dev="sysfs" ino=29977 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069022.092:9290): avc: denied { read } for pid=26404 comm="msgr-worker-2" path="pipe:[132125]" dev="pipefs" ino=132125 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069034.225:9376): avc: denied { search } for pid=43672 comm="grafana-server" name="dashboards" dev="sda1" ino=1444459 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068542.297:6929): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=172378 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068535.955:6868): avc: denied { open } for pid=56529 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068680.196:7514): avc: denied { search } for pid=46311 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068533.224:6844): avc: denied { search } for pid=43672 comm="grafana-server" name="etc" dev="sda1" ino=1966099 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068779.225:8038): avc: denied { read } for pid=43672 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068770.805:7991): avc: denied { append } for pid=26404 comm="log" path="/var/log/ceph/ceph-mon.smithi045.log" dev="sda1" ino=395815 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068932.296:8800): avc: denied { read } for pid=35450 comm="node_exporter" name="addr_assign_type" dev="sysfs" ino=34350 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068611.750:7251): avc: denied { search } for pid=87621 comm="pgrep" name="26761" dev="proc" ino=134195 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068539.225:6909): avc: denied { read } for pid=43672 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068507.971:6678): avc: denied { search } for pid=56529 comm="safe_timer" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c95,c734 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068539.872:6911): avc: denied { read } for pid=44429 comm="prometheus" name="data" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068789.249:8140): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="sda1" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068973.390:9062): avc: denied { use } for pid=26404 comm="fn_monstore" path="pipe:[129746]" dev="pipefs" ino=129746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068766.136:7934): avc: denied { read } for pid=46311 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068852.299:8452): avc: denied { getattr } for pid=35450 comm="node_exporter" name="/" dev="tmpfs" ino=12351 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068954.231:8961): avc: denied { open } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068786.034:8102): avc: denied { search } for pid=26404 comm="safe_timer" name="/" dev="overlay" ino=1442271 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c690,c878 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068535.990:6871): avc: denied { getattr } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068551.736:6955): avc: denied { getattr } for pid=84337 comm="pgrep" path="/proc/26404" dev="proc" ino=133126 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068782.224:8070): avc: denied { search } for pid=43672 comm="grafana-server" name="etc" dev="sda1" ino=1966099 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068765.116:7916): avc: denied { search } for pid=26785 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068942.297:8890): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069036.085:9383): avc: denied { getattr } for pid=26404 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068871.352:8553): avc: denied { open } for pid=26380 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068596.002:7091): avc: denied { search } for pid=26404 comm="safe_timer" name="mon.smithi045" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068680.086:7503): avc: denied { search } for pid=44429 comm="prometheus" name="diff" dev="sda1" ino=1966143 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068506.225:6646): avc: denied { search } for pid=43672 comm="grafana-server" name="dashboards" dev="sda1" ino=1444459 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069018.205:9240): avc: denied { open } for pid=26380 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068765.116:7915): avc: denied { read } for pid=26785 comm="safe_timer" name="meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068542.299:6944): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069031.850:9334): avc: denied { search } for pid=104464 comm="pgrep" name="26404" dev="proc" ino=133126 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068860.086:8480): avc: denied { create } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068781.034:8054): avc: denied { read } for pid=26404 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068597.012:7121): avc: denied { open } for pid=26380 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068765.128:7918): avc: denied { open } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068852.295:8436): avc: denied { read } for pid=35450 comm="node_exporter" name="sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069032.091:9340): avc: denied { write } for pid=26380 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068765.111:7914): avc: denied { read } for pid=26785 comm="mgr-fin" name="localtime" dev="sda1" ino=265527 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069016.549:9230): avc: denied { getattr } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068855.634:8475): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068950.087:8915): avc: denied { write } for pid=44429 comm="prometheus" path="socket:[380772]" dev="sockfs" ino=380772 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068954.196:8957): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068930.683:8741): avc: denied { search } for pid=46311 comm="safe_timer" name="diff" dev="sda1" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068700.588:7679): avc: denied { sendto } for pid=26380 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068602.225:7210): avc: denied { open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/pool-detail.json" dev="sda1" ino=1444467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068610.086:7243): avc: denied { search } for pid=44429 comm="prometheus" name="/" dev="overlay" ino=1966143 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068854.195:8470): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068960.087:8995): avc: denied { create } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068542.298:6938): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068531.670:6821): avc: denied { search } for pid=56529 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069036.085:9383): avc: denied { dac_read_search } for pid=26404 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069016.537:9227): avc: denied { read } for pid=26785 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068788.294:8132): avc: denied { search } for pid=42172 comm="safe_timer" name="/" dev="overlay" ino=1966114 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c165,c594 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069034.178:9369): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="tmpfs" ino=12350 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068782.296:8086): avc: denied { search } for pid=35450 comm="node_exporter" name="1" dev="proc" ino=163757 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068540.086:6923): avc: denied { read } for pid=44429 comm="prometheus" path="socket:[305376]" dev="sockfs" ino=305376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069022.298:9320): avc: denied { search } for pid=35450 comm="node_exporter" name="host" dev="sda1" ino=1839635 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c767 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068792.296:8167): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=172388 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068866.053:8519): avc: denied { search } for pid=26404 comm="safe_timer" name="mon.smithi045" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068865.683:8514): avc: denied { search } for pid=26785 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068930.509:8736): avc: denied { append } for pid=56529 comm="log" path="/var/log/ceph/ceph-osd.3.log" dev="sda1" ino=395844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069032.297:9348): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/7/net/sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068622.299:7360): avc: denied { search } for pid=35450 comm="node_exporter" name="kernel" dev="proc" ino=174118 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068680.105:7512): avc: denied { search } for pid=26785 comm="mgr-fin" name="etc" dev="sda1" ino=1442299 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068798.022:8184): avc: denied { getattr } for pid=26785 comm="mgr-fin" path="/usr/lib64/python3.6" dev="overlay" ino=919830 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068846.438:8333): avc: denied { search } for pid=46311 comm="safe_timer" name="/" dev="overlay" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c235 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068555.889:6965): avc: denied { search } for pid=42172 comm="safe_timer" name="/" dev="overlay" ino=1966114 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c165,c594 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068954.219:8959): avc: denied { read } for pid=26785 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068847.054:8339): avc: denied { search } for pid=26380 comm="conmon" name="journal" dev="tmpfs" ino=13382 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068620.086:7294): avc: denied { setopt } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068623.224:7368): avc: denied { getattr } for pid=43672 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068792.295:8162): avc: denied { search } for pid=35450 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068626.008:7380): avc: denied { getattr } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069020.087:9274): avc: denied { connect } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068719.873:7794): avc: denied { read } for pid=44429 comm="prometheus" name="data" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068710.087:7764): avc: denied { connect } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069014.537:9195): avc: denied { open } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068869.719:8532): avc: denied { open } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068599.517:7159): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069034.178:9369): avc: denied { write } for pid=26380 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068973.390:9062): avc: denied { write } for pid=26404 comm="fn_monstore" path="pipe:[129746]" dev="pipefs" ino=129746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069041.087:9449): avc: denied { getattr } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068932.301:8804): avc: denied { search } for pid=35450 comm="node_exporter" name="kernel" dev="proc" ino=174118 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068712.297:7784): avc: denied { search } for pid=35450 comm="node_exporter" name="1" dev="proc" ino=163757 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068971.834:9041): avc: denied { getattr } for pid=101288 comm="pgrep" path="/proc/26380" dev="proc" ino=131425 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068622.295:7336): avc: denied { read } for pid=35450 comm="node_exporter" name="stat" dev="proc" ino=172378 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068692.296:7643): avc: denied { read } for pid=35450 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068880.086:8613): avc: denied { search } for pid=44429 comm="prometheus" name="etc" dev="sda1" ino=1966159 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068533.224:6848): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068536.996:6883): avc: denied { write } for pid=26380 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068955.388:8968): avc: denied { use } for pid=26404 comm="fn_monstore" path="pipe:[129746]" dev="pipefs" ino=129746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068512.226:6736): avc: denied { open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/pool-detail.json" dev="overlay" ino=1444467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068539.872:6911): avc: denied { search } for pid=44429 comm="prometheus" name="/" dev="overlay" ino=1966143 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068871.351:8549): avc: denied { write } for pid=26404 comm="safe_timer" path="pipe:[132125]" dev="pipefs" ino=132125 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068860.086:8483): avc: denied { connect } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068542.299:6946): avc: denied { search } for pid=35450 comm="node_exporter" name="user" dev="tmpfs" ino=13457 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068617.224:7279): avc: denied { read } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068930.509:8737): avc: denied { write } for pid=56529 comm="tp_osd_tp" path="pipe:[222631]" dev="pipefs" ino=222631 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068934.108:8823): avc: denied { getattr } for pid=26785 comm="safe_timer" name="os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068792.296:8171): avc: denied { read } for pid=35450 comm="node_exporter" name="cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068871.731:8564): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068682.296:7560): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=171422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068537.938:6895): avc: denied { search } for pid=26785 comm="safe_timer" name="libpod-722053c3dca6bf5448f2339bb00c594495867f94e3a343d72524ebd087422426.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068623.224:7368): avc: denied { search } for pid=43672 comm="grafana-server" name="etc" dev="sda1" ino=1966099 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068851.051:8393): avc: denied { getattr } for pid=26404 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068872.299:8594): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068965.917:9029): avc: denied { create } for pid=26785 comm="msgr-worker-0" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068682.298:7578): avc: denied { search } for pid=35450 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068865.493:8508): avc: denied { read } for pid=42172 comm="msgr-worker-2" path="pipe:[187397]" dev="pipefs" ino=187397 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068952.296:8933): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068679.810:7500): avc: denied { read } for pid=26404 comm="msgr-worker-0" path="socket:[199902]" dev="sockfs" ino=199902 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068622.298:7350): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068701.966:7683): avc: denied { search } for pid=51635 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068847.054:8338): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068870.086:8536): avc: denied { create } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068931.375:8751): avc: denied { write } for pid=26380 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069040.225:9444): avc: denied { read } for pid=43672 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068702.296:7688): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/7" dev="proc" ino=165324 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068942.296:8885): avc: denied { read } for pid=35450 comm="node_exporter" name="entropy_avail" dev="proc" ino=171422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068599.873:7161): avc: denied { search } for pid=44429 comm="prometheus" name="/" dev="overlay" ino=1966143 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068542.298:6939): avc: denied { search } for pid=35450 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068702.298:7702): avc: denied { search } for pid=35450 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068626.008:7379): avc: denied { getattr } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068803.328:8203): avc: denied { write open } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db-journal" dev="sda1" ino=1966086 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068934.108:8823): avc: denied { open } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068689.224:7632): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/etc" dev="sda1" ino=1966099 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068803.771:8209): avc: denied { getattr } for pid=43672 comm="grafana-server" laddr=172.21.15.45 lport=36822 faddr=35.241.23.245 fport=443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068682.298:7577): avc: denied { search } for pid=35450 comm="node_exporter" name="user" dev="tmpfs" ino=13457 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068932.303:8809): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069016.226:9225): avc: denied { read } for pid=43672 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068712.297:7780): avc: denied { search } for pid=35450 comm="node_exporter" name="fs" dev="proc" ino=173266 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069019.225:9264): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068846.292:8326): avc: denied { write } for pid=26785 comm="safe_timer" path="pipe:[148856]" dev="pipefs" ino=148856 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069034.226:9377): avc: denied { read open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068765.800:7923): avc: denied { open } for pid=26380 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068551.736:6954): avc: denied { read } for pid=84337 comm="pgrep" name="status" dev="proc" ino=131429 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068600.086:7164): avc: denied { getattr } for pid=44429 comm="prometheus" path="/etc/hosts" dev="tmpfs" ino=194674 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069038.648:9425): avc: denied { read } for pid=26785 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068697.636:7665): avc: denied { read } for pid=77709 comm="msgr-worker-1" path="pipe:[279866]" dev="pipefs" ino=279866 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069033.175:9368): avc: denied { write } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068772.296:8004): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=172378 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069037.701:9404): avc: denied { read } for pid=77709 comm="msgr-worker-1" path="pipe:[279866]" dev="pipefs" ino=279866 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068596.225:7112): avc: denied { open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/hosts-overview.json" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068783.823:8099): avc: denied { sendto } for pid=26380 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069016.226:9226): avc: denied { open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/pool-overview.json" dev="overlay" ino=1444468 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068932.301:8803): avc: denied { read } for pid=35450 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068596.224:7105): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068702.027:7684): avc: denied { open } for pid=26380 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068847.054:8337): avc: denied { read } for pid=26380 comm="conmon" path="pipe:[129746]" dev="pipefs" ino=129746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068852.299:8452): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068952.297:8938): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=172388 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068532.299:6834): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068950.087:8914): avc: denied { getattr } for pid=44429 comm="prometheus" laddr=172.21.15.45 lport=36826 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068871.351:8548): avc: denied { write } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068706.833:7745): avc: denied { getattr } for pid=26785 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068536.996:6882): avc: denied { open } for pid=26380 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068687.905:7630): avc: denied { search } for pid=34631 comm="ceph-crash" name="var" dev="sda1" ino=1444321 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c527,c911 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068847.586:8348): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068938.224:8862): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068506.433:6657): avc: denied { read } for pid=51635 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068862.418:8500): avc: denied { read } for pid=42172 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068950.207:8921): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068771.164:7998): avc: denied { getattr } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068681.017:7535): avc: denied { search } for pid=26404 comm="safe_timer" name="mon.smithi045" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068712.297:7782): avc: denied { read } for pid=35450 comm="node_exporter" name="temp1_crit" dev="sysfs" ino=34546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068707.225:7750): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/etc" dev="sda1" ino=1966099 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069040.225:9442): avc: denied { read } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068955.388:8971): avc: denied { write } for pid=26380 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068852.299:8453): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068871.731:8564): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="overlay" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068533.224:6845): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/etc" dev="sda1" ino=1966099 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068680.224:7515): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068865.851:8517): avc: denied { search } for pid=46311 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c235 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068770.471:7990): avc: denied { search } for pid=51635 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068965.917:9033): avc: denied { write } for pid=26785 comm="msgr-worker-1" laddr=172.21.15.45 lport=40710 faddr=172.21.15.45 fport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068536.968:6874): avc: denied { append } for pid=42172 comm="log" path="/var/log/ceph/ceph-osd.0.log" dev="sda1" ino=395837 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068787.829:8115): avc: denied { sendto } for pid=26380 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068954.231:8961): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069014.199:9186): avc: denied { write } for pid=26380 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068712.298:7786): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068512.296:6737): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="overlay" ino=1837665 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c767 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068602.296:7231): avc: denied { search } for pid=35450 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068852.295:8437): avc: denied { open } for pid=35450 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069032.623:9366): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068539.225:6910): avc: denied { open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/osd-device-details.json" dev="overlay" ino=1444465 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068958.003:8989): avc: denied { signal } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068962.297:9010): avc: denied { read } for pid=35450 comm="node_exporter" name="mounts" dev="proc" ino=172388 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068509.771:6705): avc: denied { open } for pid=26785 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068506.433:6658): avc: denied { write } for pid=51635 comm="osd_srv_heartbt" path="pipe:[206383]" dev="pipefs" ino=206383 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068792.295:8162): avc: denied { search } for pid=35450 comm="node_exporter" name="kernel" dev="proc" ino=174118 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068680.225:7521): avc: denied { open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/cephfs-overview.json" dev="overlay" ino=1444462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068942.296:8883): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=48080 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068514.269:6788): avc: denied { read } for pid=56529 comm="msgr-worker-2" path="pipe:[222631]" dev="pipefs" ino=222631 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068692.297:7648): avc: denied { read } for pid=35450 comm="node_exporter" name="stats" dev="sysfs" ino=50083 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068706.585:7736): avc: denied { search } for pid=26380 comm="conmon" name="journal" dev="tmpfs" ino=13382 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068770.087:7971): avc: denied { connect } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068852.295:8437): avc: denied { read } for pid=35450 comm="node_exporter" name="cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069037.225:9395): avc: denied { open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068971.889:9046): avc: denied { read } for pid=42172 comm="msgr-worker-1" path="pipe:[187396]" dev="pipefs" ino=187396 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068852.295:8431): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="overlay" ino=1837665 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c767 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068533.503:6852): avc: denied { read } for pid=26380 comm="conmon" path="pipe:[129746]" dev="pipefs" ino=129746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068780.087:8047): avc: denied { setopt } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068512.297:6762): avc: denied { search } for pid=35450 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068602.296:7220): avc: denied { read } for pid=35450 comm="node_exporter" name="entropy_avail" dev="proc" ino=171422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068542.297:6930): avc: denied { read } for pid=35450 comm="node_exporter" name="fd" dev="proc" ino=172379 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069037.225:9393): avc: denied { search } for pid=43672 comm="grafana-server" name="etc" dev="sda1" ino=1966099 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068947.074:8901): avc: denied { search } for pid=26380 comm="conmon" name="journal" dev="tmpfs" ino=13382 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068682.296:7566): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=171422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068707.226:7754): avc: denied { read } for pid=43672 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068783.823:8097): avc: denied { read } for pid=26380 comm="conmon" path="pipe:[129746]" dev="pipefs" ino=129746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068950.087:8908): avc: denied { signal } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068601.003:7189): avc: denied { read } for pid=26404 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068792.296:8172): avc: denied { open } for pid=35450 comm="node_exporter" path="/sys/devices/system/cpu/cpu0/topology/physical_package_id" dev="sysfs" ino=28137 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068612.295:7254): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/7" dev="proc" ino=165324 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068506.433:6659): avc: denied { read } for pid=51635 comm="msgr-worker-1" path="pipe:[206383]" dev="pipefs" ino=206383 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068706.021:7727): avc: denied { search } for pid=26404 comm="safe_timer" name="/" dev="overlay" ino=1442271 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c690,c878 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069032.297:9352): avc: denied { read } for pid=35450 comm="node_exporter" name="stats" dev="sysfs" ino=50083 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069022.297:9309): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/7/net/sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068852.080:8424): avc: denied { search } for pid=56529 comm="safe_timer" name="diff" dev="sda1" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068936.006:8844): avc: denied { open } for pid=56529 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068932.295:8793): avc: denied { read } for pid=35450 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068601.009:7193): avc: denied { open } for pid=26404 comm="rstore_compact" path="/sys/devices/virtual/block/dm-4/queue/logical_block_size" dev="sysfs" ino=49667 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068848.224:8373): avc: denied { read } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069020.087:9270): avc: denied { getattr } for pid=44429 comm="prometheus" path="/etc/hosts" dev="tmpfs" ino=194674 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068555.541:6964): avc: denied { append } for pid=44429 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068692.296:7642): avc: denied { read } for pid=35450 comm="node_exporter" path="socket:[196099]" dev="sockfs" ino=196099 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068702.298:7703): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068542.298:6941): avc: denied { search } for pid=35450 comm="node_exporter" name="fs" dev="proc" ino=173266 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068602.296:7220): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=171422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068781.824:8059): avc: denied { write } for pid=26404 comm="msgr-worker-2" laddr=172.21.15.45 lport=3300 faddr=172.21.15.45 fport=45682 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068942.297:8895): avc: denied { search } for pid=35450 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616069016.537:9227): avc: denied { open } for pid=26785 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068512.297:6761): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="tmpfs" ino=12350 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068512.225:6734): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069014.195:9179): avc: denied { search } for pid=43672 comm="grafana-server" name="var" dev="sda1" ino=1966089 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068539.873:6913): avc: denied { getattr } for pid=44429 comm="prometheus" path="/prometheus/wal" dev="dm-4" ino=8388752 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068682.297:7574): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068772.296:8013): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=171422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068950.207:8921): avc: denied { open } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068512.297:6748): avc: denied { read } for pid=35450 comm="node_exporter" name="sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068954.196:8955): avc: denied { search } for pid=43672 comm="grafana-server" name="/" dev="overlay" ino=1966093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069016.225:9224): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/etc" dev="sda1" ino=1966099 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068552.296:6957): avc: denied { read } for pid=35450 comm="node_exporter" name="sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068542.299:6942): avc: denied { read } for pid=35450 comm="node_exporter" name="entropy_avail" dev="proc" ino=171422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068533.224:6847): avc: denied { read } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068623.225:7373): avc: denied { read } for pid=43672 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069042.297:9464): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=48080 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068690.086:7640): avc: denied { read } for pid=44429 comm="prometheus" path="socket:[326389]" dev="sockfs" ino=326389 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069031.850:9332): avc: denied { search } for pid=104464 comm="pgrep" name="26380" dev="proc" ino=131425 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068787.745:8109): avc: denied { write } for pid=78707 comm="msgr-worker-0" laddr=172.21.15.45 lport=44580 faddr=172.21.15.107 fport=6808 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069016.980:9235): avc: denied { search } for pid=42172 comm="safe_timer" name="/" dev="overlay" ino=1966114 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c165,c594 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068597.012:7121): avc: denied { write } for pid=26380 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068507.759:6674): avc: denied { read } for pid=26785 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068712.297:7774): avc: denied { search } for pid=35450 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068765.116:7916): avc: denied { open } for pid=26785 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068706.585:7736): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="tmpfs" ino=12350 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068765.799:7920): avc: denied { write } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068706.022:7728): avc: denied { search } for pid=26404 comm="safe_timer" name="mon.smithi045" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068962.297:9006): avc: denied { read } for pid=35450 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068601.003:7189): avc: denied { open } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068932.295:8788): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068788.225:8129): avc: denied { read } for pid=43672 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069014.199:9187): avc: denied { write } for pid=26380 comm="conmon" name="socket" dev="tmpfs" ino=13391 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068705.727:7720): avc: denied { read } for pid=46311 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068602.225:7210): avc: denied { read } for pid=43672 comm="grafana-server" name="pool-detail.json" dev="sda1" ino=1444467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068611.750:7246): avc: denied { getattr } for pid=87621 comm="pgrep" path="/proc/26380" dev="proc" ino=131425 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068932.096:8762): avc: denied { getattr } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069042.296:9457): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=173267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068875.216:8607): avc: denied { search } for pid=56529 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c95,c734 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068765.553:7919): avc: denied { append } for pid=44429 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068599.313:7158): avc: denied { search } for pid=46311 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068707.226:7754): avc: denied { read } for pid=43672 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068539.224:6904): avc: denied { search } for pid=43672 comm="grafana-server" name="/" dev="overlay" ino=1966093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068871.572:8559): avc: denied { open } for pid=51635 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068692.297:7653): avc: denied { search } for pid=35450 comm="node_exporter" name="kernel" dev="proc" ino=174118 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068851.806:8408): avc: denied { open } for pid=97651 comm="pgrep" path="/proc/26404/status" dev="proc" ino=133163 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068708.004:7757): avc: denied { append } for pid=44429 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068956.226:8983): avc: denied { open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068622.011:7324): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068700.588:7677): avc: denied { use } for pid=26404 comm="fn_monstore" path="pipe:[129746]" dev="pipefs" ino=129746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068772.296:8002): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069014.199:9186): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068602.295:7214): avc: denied { read } for pid=35450 comm="node_exporter" name="fd" dev="proc" ino=172379 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068601.003:7189): avc: denied { search } for pid=26404 comm="safe_timer" name="mon.smithi045" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068596.002:7091): avc: denied { open } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069032.298:9360): avc: denied { search } for pid=35450 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068722.297:7797): avc: denied { fork } for pid=35450 comm="node_exporter" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068787.237:8103): avc: denied { open } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069038.660:9427): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="overlay" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068512.225:6734): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068613.525:7262): avc: denied { search } for pid=26380 comm="conmon" name="systemd" dev="tmpfs" ino=12359 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068852.296:8449): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=171422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068936.108:8850): avc: denied { search } for pid=26785 comm="safe_timer" name="libpod-722053c3dca6bf5448f2339bb00c594495867f94e3a343d72524ebd087422426.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068872.296:8582): avc: denied { read } for pid=35450 comm="node_exporter" name="ce_count" dev="sysfs" ino=48268 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068782.297:8092): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069032.091:9339): avc: denied { read } for pid=26380 comm="conmon" path="pipe:[129746]" dev="pipefs" ino=129746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068788.225:8130): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="sda1" ino=1444461 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068512.297:6743): avc: denied { read } for pid=35450 comm="node_exporter" name="mounts" dev="proc" ino=172388 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068931.066:8743): avc: denied { dac_read_search } for pid=26404 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068937.074:8854): avc: denied { use } for pid=26404 comm="fn_monstore" path="pipe:[129746]" dev="pipefs" ino=129746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068622.296:7338): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=50011 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068684.576:7591): avc: denied { write } for pid=26380 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068938.224:8862): avc: denied { search } for pid=43672 comm="grafana-server" name="/" dev="overlay" ino=1966093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068540.086:6917): avc: denied { setopt } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068506.992:6668): avc: denied { search } for pid=26380 comm="conmon" name="journal" dev="tmpfs" ino=13382 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068962.297:9008): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=171422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068786.034:8102): avc: denied { search } for pid=26404 comm="safe_timer" name="var" dev="sda1" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c690,c878 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068872.224:8567): avc: denied { getattr } for pid=43672 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068952.296:8932): avc: denied { read } for pid=35450 comm="node_exporter" name="stat" dev="proc" ino=172378 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069042.296:9457): avc: denied { read } for pid=35450 comm="node_exporter" name="file-nr" dev="proc" ino=173267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068680.355:7525): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068622.011:7322): avc: denied { write } for pid=26404 comm="fn_monstore" path="pipe:[129746]" dev="pipefs" ino=129746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068602.296:7221): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=171422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068782.295:8074): avc: denied { search } for pid=35450 comm="node_exporter" name="7" dev="proc" ino=165324 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068702.296:7687): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068535.990:6870): avc: denied { open } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068870.086:8537): avc: denied { setopt } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068932.083:8758): avc: denied { search } for pid=26785 comm="safe_timer" name="/" dev="overlay" ino=1442290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068682.296:7561): avc: denied { search } for pid=35450 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068680.086:7510): avc: denied { read } for pid=44429 comm="prometheus" path="socket:[326232]" dev="sockfs" ino=326232 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068954.605:8967): avc: denied { search } for pid=42172 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966114 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c165,c594 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068533.503:6851): avc: denied { use } for pid=26404 comm="fn_monstore" path="pipe:[129746]" dev="pipefs" ino=129746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068942.296:8882): avc: denied { read } for pid=35450 comm="node_exporter" name="cpufreq" dev="sysfs" ino=29977 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068618.398:7287): avc: denied { read } for pid=26785 comm="safe_timer" name="meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068542.299:6948): avc: denied { search } for pid=35450 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616068630.087:7384): avc: denied { setopt } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068953.855:8948): avc: denied { append } for pid=26404 comm="log" path="/var/log/ceph/ceph-mon.smithi045.log" dev="sda1" ino=395815 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068930.509:8739): avc: denied { read } for pid=56529 comm="msgr-worker-2" path="pipe:[222631]" dev="pipefs" ino=222631 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068701.021:7682): avc: denied { search } for pid=26404 comm="safe_timer" name="/" dev="overlay" ino=1442271 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c690,c878 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068680.086:7505): avc: denied { create } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068791.792:8156): avc: denied { read } for pid=94445 comm="pgrep" name="status" dev="proc" ino=133163 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068537.950:6897): avc: denied { getattr } for pid=26785 comm="safe_timer" name="os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068792.296:8175): avc: denied { read } for pid=35450 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068931.375:8752): avc: denied { write } for pid=26380 comm="conmon" name="socket" dev="tmpfs" ino=13391 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068683.224:7586): avc: denied { read } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068539.225:6909): avc: denied { open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069022.298:9317): avc: denied { search } for pid=35450 comm="node_exporter" name="user" dev="tmpfs" ino=13457 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069042.299:9469): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=172388 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069032.091:9341): avc: denied { search } for pid=26380 comm="conmon" name="systemd" dev="tmpfs" ino=12359 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068680.225:7520): avc: denied { read } for pid=43672 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068506.988:6664): avc: denied { write } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db/000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068698.796:7667): avc: denied { search } for pid=26785 comm="safe_timer" name="/" dev="overlay" ino=1442290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068787.745:8110): avc: denied { read } for pid=78707 comm="msgr-worker-0" path="socket:[284749]" dev="sockfs" ino=284749 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068512.296:6739): avc: denied { read } for pid=35450 comm="node_exporter" name="stat" dev="proc" ino=172378 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068700.591:7681): avc: denied { open } for pid=56529 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068960.087:8993): avc: denied { search } for pid=44429 comm="prometheus" name="etc" dev="sda1" ino=1966159 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068798.083:8185): avc: denied { search } for pid=42172 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966114 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c165,c594 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068931.066:8747): avc: denied { write } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068512.297:6758): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068852.295:8442): avc: denied { read } for pid=35450 comm="node_exporter" name="cpuinfo_max_freq" dev="sysfs" ino=30065 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069022.298:9318): avc: denied { search } for pid=35450 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068596.224:7109): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068705.727:7720): avc: denied { search } for pid=46311 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068712.297:7774): avc: denied { read } for pid=35450 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068872.295:8576): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=172378 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068705.727:7720): avc: denied { search } for pid=46311 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068511.495:6725): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="tmpfs" ino=12350 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068680.086:7507): avc: denied { connect } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068623.225:7374): avc: denied { open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/cephfs-overview.json" dev="overlay" ino=1444462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068798.299:8192): avc: denied { unlink } for pid=26404 comm="rocksdb:high0" name="000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069037.701:9409): avc: denied { append } for pid=42172 comm="log" path="/var/log/ceph/ceph-osd.0.log" dev="sda1" ino=395837 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068936.585:8852): avc: denied { search } for pid=51635 comm="safe_timer" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c1,c200 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068622.295:7335): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/7" dev="proc" ino=165324 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068872.295:8574): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068509.783:6707): avc: denied { open } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068704.582:7715): avc: denied { write } for pid=26380 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068852.295:8438): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068602.324:7240): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="sda1" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068973.390:9064): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069016.225:9223): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068868.002:8530): avc: denied { signal } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069020.208:9278): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="tmpfs" ino=12350 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068511.795:6730): avc: denied { search } for pid=26785 comm="safe_timer" name="usr" dev="sda1" ino=658316 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068537.938:6895): avc: denied { read } for pid=26785 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068766.032:7930): avc: denied { search } for pid=26404 comm="safe_timer" name="mon.smithi045" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068850.086:8385): avc: denied { search } for pid=44429 comm="prometheus" name="/" dev="overlay" ino=1966143 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069038.660:9427): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068932.681:8816): avc: denied { append } for pid=56529 comm="log" path="/var/log/ceph/ceph-osd.3.log" dev="sda1" ino=395844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068875.532:8608): avc: denied { signal } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068702.297:7699): avc: denied { read } for pid=35450 comm="node_exporter" name="mounts" dev="proc" ino=172388 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068962.297:9010): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=172388 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068938.224:8863): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/etc" dev="sda1" ino=1966099 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068626.007:7378): avc: denied { read } for pid=26404 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068792.295:8164): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=171422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068692.297:7653): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=171422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068712.296:7770): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/7" dev="proc" ino=165324 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069022.296:9293): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="overlay" ino=1837665 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c767 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068700.591:7680): avc: denied { search } for pid=56529 comm="safe_timer" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c95,c734 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068852.295:8430): avc: denied { signal } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068596.003:7098): avc: denied { read } for pid=26404 comm="rstore_compact" name="253:4" dev="sysfs" ino=49630 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068618.003:7282): avc: denied { append } for pid=44429 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068936.067:8847): avc: denied { getattr } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068686.017:7619): avc: denied { open } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068972.296:9053): avc: denied { open } for pid=35450 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=20785 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068680.224:7517): avc: denied { lock } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068705.727:7722): avc: denied { write } for pid=46311 comm="osd_srv_heartbt" path="pipe:[194126]" dev="pipefs" ino=194126 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068866.178:8522): avc: denied { read } for pid=56529 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068962.297:9006): avc: denied { read } for pid=35450 comm="node_exporter" name="dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068515.501:6796): avc: denied { use } for pid=26404 comm="fn_monstore" path="pipe:[129746]" dev="pipefs" ino=129746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068599.873:7161): avc: denied { open } for pid=44429 comm="prometheus" path="/prometheus" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068792.295:8157): avc: denied { signal } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068798.285:8189): avc: denied { add_name } for pid=26404 comm="rstore_compact" name="000021.log" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068622.422:7363): avc: denied { search } for pid=26785 comm="safe_timer" name="/" dev="overlay" ino=1442290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069038.660:9427): avc: denied { getattr } for pid=26785 comm="safe_timer" name="os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068540.991:6926): avc: denied { getattr } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069037.701:9406): avc: denied { write } for pid=77709 comm="msgr-worker-2" laddr=172.21.15.45 lport=58302 faddr=172.21.15.107 fport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068955.388:8971): avc: denied { search } for pid=26380 comm="conmon" name="journal" dev="tmpfs" ino=13382 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069022.296:9306): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=48268 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068707.225:7752): avc: denied { read } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068790.086:8142): avc: denied { getattr } for pid=44429 comm="prometheus" path="/etc/hosts" dev="tmpfs" ino=194674 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069016.225:9223): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068515.501:6798): avc: denied { search } for pid=26380 comm="conmon" name="journal" dev="tmpfs" ino=13382 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068556.046:6967): avc: denied { getattr } for pid=26785 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068685.105:7613): avc: denied { read } for pid=26785 comm="mgr-fin" name="localtime" dev="sda1" ino=265527 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068539.224:6906): avc: denied { lock } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068971.928:9049): avc: denied { search } for pid=51635 comm="safe_timer" name="diff" dev="sda1" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068852.295:8440): avc: denied { read } for pid=35450 comm="node_exporter" name="cpufreq" dev="sysfs" ino=29977 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068770.087:7972): avc: denied { getattr } for pid=44429 comm="prometheus" laddr=172.21.15.45 lport=38992 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069032.091:9341): avc: denied { search } for pid=26380 comm="conmon" name="journal" dev="tmpfs" ino=13382 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068847.574:8346): avc: denied { read } for pid=26785 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069025.180:9325): avc: denied { write } for pid=26404 comm="fn_monstore" path="pipe:[129746]" dev="pipefs" ino=129746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068531.914:6822): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068771.033:7993): avc: denied { search } for pid=26404 comm="safe_timer" name="var" dev="sda1" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c690,c878 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069021.175:9287): avc: denied { search } for pid=46311 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c235 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068542.298:6937): avc: denied { search } for pid=35450 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068710.087:7758): avc: denied { search } for pid=44429 comm="prometheus" name="etc" dev="sda1" ino=1966159 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069038.184:9417): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068953.855:8949): avc: denied { write } for pid=26404 comm="safe_timer" path="pipe:[132125]" dev="pipefs" ino=132125 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068953.926:8953): avc: denied { search } for pid=56529 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068537.982:6899): avc: denied { read } for pid=46311 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069037.701:9405): avc: denied { write } for pid=77709 comm="msgr-worker-1" laddr=172.21.15.45 lport=41600 faddr=172.21.15.45 fport=6802 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068532.800:6842): avc: denied { read } for pid=46311 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068790.086:8143): avc: denied { create } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068532.296:6830): avc: denied { search } for pid=35450 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068536.996:6882): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068680.721:7533): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068803.328:8203): avc: denied { write } for pid=43672 comm="grafana-server" name="grafana" dev="overlay" ino=1837473 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068932.084:8759): avc: denied { open } for pid=26785 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068872.224:8570): avc: denied { read } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068953.766:8946): avc: denied { open } for pid=46311 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068792.297:8179): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068872.295:8576): avc: denied { read } for pid=35450 comm="node_exporter" name="stat" dev="proc" ino=172378 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068686.018:7621): avc: denied { getattr } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068767.226:7957): avc: denied { open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068932.224:8763): avc: denied { search } for pid=43672 comm="grafana-server" name="etc" dev="sda1" ino=1966099 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068767.226:7958): avc: denied { open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-overview.json" dev="overlay" ino=1444470 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068533.503:6853): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068602.224:7206): avc: denied { search } for pid=43672 comm="grafana-server" name="/" dev="overlay" ino=1966093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068506.992:6667): avc: denied { open } for pid=26380 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068685.105:7613): avc: denied { getattr } for pid=26785 comm="mgr-fin" name="UTC" dev="sda1" ino=1181438 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068852.295:8433): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=172378 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068611.522:7245): avc: denied { read } for pid=26380 comm="conmon" path="pipe:[129746]" dev="pipefs" ino=129746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069014.199:9187): avc: denied { sendto } for pid=26380 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068596.015:7103): avc: denied { remove_name } for pid=26404 comm="rocksdb:high0" name="000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069022.573:9323): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="overlay" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068602.324:7240): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="overlay" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069014.199:9185): avc: denied { read } for pid=26380 comm="conmon" path="pipe:[129746]" dev="pipefs" ino=129746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068680.105:7512): avc: denied { getattr } for pid=26785 comm="mgr-fin" name="UTC" dev="sda1" ino=1181438 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068702.463:7705): avc: denied { append } for pid=46311 comm="log" path="/var/log/ceph/ceph-osd.1.log" dev="sda1" ino=395841 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068622.422:7366): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068602.224:7206): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068596.003:7100): avc: denied { getattr } for pid=26404 comm="rstore_compact" path="/sys/devices/virtual/block/dm-4/queue/logical_block_size" dev="sysfs" ino=49667 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068601.009:7193): avc: denied { read } for pid=26404 comm="rstore_compact" name="logical_block_size" dev="sysfs" ino=49667 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068930.683:8742): avc: denied { read } for pid=46311 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069022.297:9311): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=171422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068602.296:7231): avc: denied { search } for pid=35450 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068702.820:7707): avc: denied { getattr } for pid=26785 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068950.357:8926): avc: denied { search } for pid=42172 comm="safe_timer" name="/" dev="overlay" ino=1966114 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c165,c594 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068847.586:8349): avc: denied { getattr } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068712.296:7769): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068932.303:8811): avc: denied { search } for pid=35450 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069022.296:9295): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=172378 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068596.139:7104): avc: denied { search } for pid=42172 comm="safe_timer" name="/" dev="overlay" ino=1966114 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c165,c594 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068952.296:8936): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/sys/fs/xfs/stats/stats" dev="sysfs" ino=50013 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068512.298:6766): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/firmware_node" dev="sysfs" ino=20352 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068700.588:7679): avc: denied { write } for pid=26380 comm="conmon" name="socket" dev="tmpfs" ino=13391 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068782.224:8072): avc: denied { open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068851.806:8406): avc: denied { search } for pid=97651 comm="pgrep" name="26380" dev="proc" ino=131425 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068846.292:8329): avc: denied { read } for pid=26404 comm="msgr-worker-2" path="socket:[151829]" dev="sockfs" ino=151829 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068872.296:8578): avc: denied { read } for pid=35450 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069014.537:9195): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069022.297:9308): avc: denied { read } for pid=35450 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068611.750:7249): avc: denied { open } for pid=87621 comm="pgrep" path="/proc/26404/status" dev="proc" ino=133163 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068515.988:6800): avc: denied { search } for pid=26404 comm="safe_timer" name="mon.smithi045" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068536.992:6878): avc: denied { write } for pid=26404 comm="msgr-worker-2" laddr=172.21.15.45 lport=3300 faddr=172.21.15.107 fport=41100 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068686.224:7623): avc: denied { read } for pid=43672 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068700.087:7674): avc: denied { search } for pid=44429 comm="prometheus" name="/" dev="overlay" ino=1966143 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068871.731:8564): avc: denied { open } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068707.225:7753): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068860.086:8484): avc: denied { getattr } for pid=44429 comm="prometheus" laddr=172.21.15.45 lport=53457 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068706.585:7733): avc: denied { write } for pid=26404 comm="fn_monstore" path="pipe:[129746]" dev="pipefs" ino=129746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068700.087:7674): avc: denied { search } for pid=44429 comm="prometheus" name="etc" dev="sda1" ino=1966159 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068871.731:8564): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="sda1" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068706.846:7746): avc: denied { search } for pid=26785 comm="safe_timer" name="usr" dev="sda1" ino=658316 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068712.296:7772): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=172379 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068599.517:7159): avc: denied { write } for pid=26380 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068771.164:7997): avc: denied { open } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068847.586:8348): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068680.708:7532): avc: denied { getattr } for pid=26785 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068852.296:8445): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/sys/class/net/ens1f1" dev="sysfs" ino=37772 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068682.296:7564): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=172388 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068784.102:8100): avc: denied { search } for pid=56529 comm="safe_timer" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c95,c734 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068932.301:8807): avc: denied { search } for pid=35450 comm="node_exporter" name="1" dev="proc" ino=163757 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069032.298:9360): avc: denied { search } for pid=35450 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069042.296:9463): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/7/net/arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068866.178:8522): avc: denied { open } for pid=56529 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068596.224:7105): avc: denied { search } for pid=43672 comm="grafana-server" name="dashboards" dev="sda1" ino=1444459 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068871.572:8560): avc: denied { open } for pid=51635 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068515.099:6794): avc: denied { search } for pid=46311 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068621.847:7317): avc: denied { read } for pid=26785 comm="msgr-worker-1" path="pipe:[148856]" dev="pipefs" ino=148856 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069032.296:9347): avc: denied { read } for pid=35450 comm="node_exporter" name="fd" dev="proc" ino=172379 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068850.377:8392): avc: denied { search } for pid=46311 comm="safe_timer" name="/" dev="overlay" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c235 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069040.225:9439): avc: denied { search } for pid=43672 comm="grafana-server" name="etc" dev="sda1" ino=1966099 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068683.224:7587): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068931.066:8745): avc: denied { getattr } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068682.296:7563): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068522.296:6809): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=20785 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068602.296:7223): avc: denied { getattr } for pid=35450 comm="node_exporter" name="/" dev="tmpfs" ino=12351 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068872.296:8586): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=173267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068532.299:6836): avc: denied { search } for pid=35450 comm="node_exporter" name="host" dev="sda1" ino=1839635 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c767 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068704.196:7713): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068852.299:8455): avc: denied { search } for pid=35450 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068954.219:8958): avc: denied { search } for pid=26785 comm="safe_timer" name="/" dev="overlay" ino=1442290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068872.303:8599): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068965.917:9035): avc: denied { read } for pid=26785 comm="msgr-worker-0" path="socket:[388946]" dev="sockfs" ino=388946 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068932.303:8808): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068706.021:7727): avc: denied { getattr } for pid=26404 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068790.372:8149): avc: denied { search } for pid=51635 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c1,c200 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068792.296:8167): avc: denied { search } for pid=35450 comm="node_exporter" name="1" dev="proc" ino=163757 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069032.297:9355): avc: denied { getattr } for pid=35450 comm="node_exporter" name="/" dev="tmpfs" ino=12351 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068542.299:6946): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="tmpfs" ino=12350 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068791.791:8153): avc: denied { getattr } for pid=94445 comm="pgrep" path="/proc/26380" dev="proc" ino=131425 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069038.648:9425): avc: denied { open } for pid=26785 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068803.763:8205): avc: denied { create } for pid=43672 comm="grafana-server" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068537.950:6898): avc: denied { getattr } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069019.225:9263): avc: denied { read } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068622.298:7359): avc: denied { search } for pid=35450 comm="node_exporter" name="host" dev="sda1" ino=1839635 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c767 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068710.087:7762): avc: denied { setopt } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069022.298:9314): avc: denied { getattr } for pid=35450 comm="node_exporter" name="/" dev="tmpfs" ino=12351 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068798.299:8192): avc: denied { remove_name } for pid=26404 comm="rocksdb:high0" name="000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068848.224:8370): avc: denied { getattr } for pid=43672 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069021.083:9284): avc: denied { open } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068787.829:8115): avc: denied { search } for pid=26380 comm="conmon" name="systemd" dev="tmpfs" ino=12359 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068522.296:6808): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=172379 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068680.224:7515): avc: denied { search } for pid=43672 comm="grafana-server" name="/" dev="overlay" ino=1966093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068705.727:7720): avc: denied { search } for pid=46311 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c235 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068788.037:8121): avc: denied { open } for pid=46311 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068540.086:6916): avc: denied { create } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068622.422:7365): avc: denied { getattr } for pid=26785 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068849.083:8377): avc: denied { search } for pid=56529 comm="safe_timer" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c95,c734 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068932.307:8814): avc: denied { append } for pid=44429 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068536.996:6883): avc: denied { search } for pid=26380 comm="conmon" name="journal" dev="tmpfs" ino=13382 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068537.950:6897): avc: denied { open } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069014.524:9193): avc: denied { read } for pid=26785 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068866.053:8519): avc: denied { open } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069037.125:9391): avc: denied { write } for pid=26785 comm="msgr-worker-1" laddr=172.21.15.45 lport=45682 faddr=172.21.15.45 fport=3300 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068767.225:7952): avc: denied { search } for pid=43672 comm="grafana-server" name="/" dev="overlay" ino=1966093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068872.296:8585): avc: denied { search } for pid=35450 comm="node_exporter" name="net" dev="proc" ino=165330 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068622.298:7356): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="tmpfs" ino=12350 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068960.087:8999): avc: denied { getattr } for pid=44429 comm="prometheus" laddr=172.21.15.45 lport=56980 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068712.297:7776): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=48080 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068684.722:7593): avc: denied { read } for pid=26785 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068872.297:8592): avc: denied { getattr } for pid=35450 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068954.196:8954): avc: denied { lock } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068956.225:8981): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068765.800:7924): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="tmpfs" ino=12350 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068792.296:8167): avc: denied { read } for pid=35450 comm="node_exporter" name="mounts" dev="proc" ino=172388 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068680.355:7526): avc: denied { search } for pid=26380 comm="conmon" name="systemd" dev="tmpfs" ino=12359 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068872.296:8580): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=20785 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068710.087:7760): avc: denied { create } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068930.683:8741): avc: denied { read } for pid=46311 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068853.622:8466): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="overlay" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068872.296:8583): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=48268 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068595.880:7088): avc: denied { read } for pid=56529 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068940.086:8871): avc: denied { create } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068616.005:7269): avc: denied { search } for pid=26404 comm="safe_timer" name="var" dev="sda1" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c690,c878 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068852.296:8451): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068932.295:8794): avc: denied { read } for pid=35450 comm="node_exporter" name="sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068860.086:8485): avc: denied { write } for pid=44429 comm="prometheus" path="socket:[369507]" dev="sockfs" ino=369507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068952.297:8940): avc: denied { search } for pid=35450 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068620.215:7300): avc: denied { search } for pid=42172 comm="safe_timer" name="/" dev="overlay" ino=1966114 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c165,c594 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068765.800:7924): avc: denied { search } for pid=26380 comm="conmon" name="journal" dev="tmpfs" ino=13382 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068846.291:8325): avc: denied { append } for pid=26785 comm="log" path="/var/log/ceph/ceph-mgr.smithi045.orzrqd.log" dev="sda1" ino=395817 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068955.388:8971): avc: denied { search } for pid=26380 comm="conmon" name="systemd" dev="tmpfs" ino=12359 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068682.296:7570): avc: denied { read } for pid=35450 comm="node_exporter" name="eno1" dev="sysfs" ino=34342 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068595.865:7084): avc: denied { write } for pid=42172 comm="msgr-worker-1" laddr=172.21.15.45 lport=6808 faddr=172.21.15.107 fport=59694 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068772.299:8021): avc: denied { getattr } for pid=35450 comm="node_exporter" name="/" dev="tmpfs" ino=12351 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068765.097:7910): avc: denied { write } for pid=26404 comm="msgr-worker-2" laddr=172.21.15.45 lport=3300 faddr=172.21.15.107 fport=41100 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069019.225:9262): avc: denied { lock } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068506.992:6667): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068617.224:7280): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068850.038:8384): avc: denied { search } for pid=56529 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068880.086:8618): avc: denied { getattr } for pid=44429 comm="prometheus" laddr=172.21.15.45 lport=50896 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068598.300:7147): avc: denied { read } for pid=26785 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068533.503:6854): avc: denied { sendto } for pid=26380 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068612.295:7257): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/7/net/sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068962.297:9022): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068872.295:8574): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="overlay" ino=1837665 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c767 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068940.086:8874): avc: denied { connect } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068515.096:6793): avc: denied { read } for pid=26785 comm="mgr-fin" name="localtime" dev="overlay" ino=265527 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068537.938:6895): avc: denied { open } for pid=26785 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069042.295:9453): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=172378 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068622.422:7364): avc: denied { search } for pid=26785 comm="safe_timer" name="libpod-722053c3dca6bf5448f2339bb00c594495867f94e3a343d72524ebd087422426.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068512.297:6744): avc: denied { search } for pid=35450 comm="node_exporter" name="kernel" dev="proc" ino=174118 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068680.086:7509): avc: denied { write } for pid=44429 comm="prometheus" path="socket:[331269]" dev="sockfs" ino=331269 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068782.297:8089): avc: denied { search } for pid=35450 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068535.990:6872): avc: denied { getattr } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068852.299:8455): avc: denied { search } for pid=35450 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068712.297:7781): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=171422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068542.297:6929): avc: denied { search } for pid=35450 comm="node_exporter" name="7" dev="proc" ino=165324 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069013.332:9177): avc: denied { open } for pid=56529 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068792.296:8174): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/sys/class/net/ens1f1" dev="sysfs" ino=37772 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068792.296:8169): avc: denied { read } for pid=35450 comm="node_exporter" name="file-nr" dev="proc" ino=173267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068936.067:8846): avc: denied { search } for pid=26404 comm="safe_timer" name="mon.smithi045" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068782.059:8064): avc: denied { search } for pid=56529 comm="safe_timer" name="diff" dev="sda1" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068510.087:6710): avc: denied { search } for pid=44429 comm="prometheus" name="/" dev="overlay" ino=1966143 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068539.224:6908): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068788.225:8131): avc: denied { open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-sync-overview.json" dev="overlay" ino=1444471 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068622.011:7323): avc: denied { read } for pid=26380 comm="conmon" path="pipe:[129746]" dev="pipefs" ino=129746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068788.224:8124): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068712.296:7769): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="overlay" ino=1837665 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c767 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068622.298:7358): avc: denied { search } for pid=35450 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616068622.296:7345): avc: denied { open } for pid=35450 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/net/eno1/addr_assign_type" dev="sysfs" ino=34350 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068622.011:7325): avc: denied { sendto } for pid=26380 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068692.297:7652): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068538.648:6903): avc: denied { search } for pid=42172 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966114 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c165,c594 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068512.297:6756): avc: denied { getattr } for pid=35450 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068539.224:6904): avc: denied { getattr } for pid=43672 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068932.295:8790): avc: denied { search } for pid=35450 comm="node_exporter" name="7" dev="proc" ino=165324 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068872.296:8586): avc: denied { search } for pid=35450 comm="node_exporter" name="fs" dev="proc" ino=173266 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068706.585:7735): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068510.987:6719): avc: denied { dac_read_search } for pid=26404 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068712.297:7785): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068532.295:6826): avc: denied { read } for pid=35450 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068533.914:6859): avc: denied { search } for pid=26785 comm="safe_timer" name="diff" dev="sda1" ino=1442290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069037.614:9396): avc: denied { search } for pid=42172 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966114 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c165,c594 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068702.296:7692): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=20785 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068789.249:8141): avc: denied { getattr } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068876.055:8612): avc: denied { getattr } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068622.299:7361): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=171422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068596.224:7110): avc: denied { read } for pid=43672 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068512.225:6731): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068602.295:7211): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068949.380:8905): avc: denied { write } for pid=26380 comm="conmon" name="socket" dev="tmpfs" ino=13391 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068787.828:8114): avc: denied { write } for pid=26380 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068956.226:8983): avc: denied { read } for pid=43672 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068602.296:7222): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/7/net/arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069038.660:9427): avc: denied { search } for pid=26785 comm="safe_timer" name="usr" dev="sda1" ino=658316 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068866.224:8523): avc: denied { search } for pid=43672 comm="grafana-server" name="etc" dev="sda1" ino=1966099 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068765.111:7914): avc: denied { search } for pid=26785 comm="mgr-fin" name="etc" dev="sda1" ino=1442299 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068932.296:8797): avc: denied { read } for pid=35450 comm="node_exporter" name="xfs" dev="sysfs" ino=50011 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068542.299:6947): avc: denied { search } for pid=35450 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068798.285:8189): avc: denied { create } for pid=26404 comm="rstore_compact" name="000021.log" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068955.388:8971): avc: denied { write } for pid=26380 comm="conmon" name="socket" dev="tmpfs" ino=13391 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068602.295:7214): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=172379 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068942.296:8885): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=171422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068539.224:6908): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068792.296:8176): avc: denied { read } for pid=35450 comm="node_exporter" name="eno1" dev="sysfs" ino=34342 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069042.298:9465): avc: denied { read } for pid=35450 comm="node_exporter" name="entropy_avail" dev="proc" ino=171422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068931.375:8752): avc: denied { write } for pid=26380 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068956.071:8977): avc: denied { search } for pid=26404 comm="safe_timer" name="/" dev="overlay" ino=1442271 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c690,c878 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068622.422:7366): avc: denied { open } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068704.196:7713): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068872.296:8581): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/sys/class/net/ens1f1" dev="sysfs" ino=37772 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068872.296:8584): avc: denied { read } for pid=35450 comm="node_exporter" name="eno1" dev="sysfs" ino=34342 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068533.914:6859): avc: denied { search } for pid=26785 comm="safe_timer" name="/" dev="overlay" ino=1442290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068596.002:7090): avc: denied { getattr } for pid=26404 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068880.086:8619): avc: denied { write } for pid=44429 comm="prometheus" path="socket:[369660]" dev="sockfs" ino=369660 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068602.296:7215): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=172388 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069040.225:9439): avc: denied { search } for pid=43672 comm="grafana-server" name="/" dev="overlay" ino=1966093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068680.086:7506): avc: denied { setopt } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069032.296:9343): avc: denied { signal } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069041.086:9447): avc: denied { search } for pid=26404 comm="safe_timer" name="/" dev="overlay" ino=1442271 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c690,c878 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069037.836:9410): avc: denied { search } for pid=56529 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068847.574:8345): avc: denied { search } for pid=26785 comm="safe_timer" name="/" dev="overlay" ino=1442290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069022.296:9298): avc: denied { read } for pid=35450 comm="node_exporter" name="mounts" dev="proc" ino=172388 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068621.051:7306): avc: denied { write } for pid=51635 comm="msgr-worker-1" laddr=172.21.15.45 lport=55606 faddr=172.21.15.45 fport=6808 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068680.225:7521): avc: denied { read } for pid=43672 comm="grafana-server" name="cephfs-overview.json" dev="sda1" ino=1444462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069038.184:9417): avc: denied { open } for pid=26380 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069032.623:9366): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068880.086:8616): avc: denied { setopt } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068932.296:8796): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=50011 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068554.446:6958): avc: denied { getattr } for pid=26785 comm="mgr-fin" path="/usr/lib64/python3.6" dev="overlay" ino=919830 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068602.295:7213): avc: denied { read } for pid=35450 comm="node_exporter" name="stat" dev="proc" ino=172378 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068706.585:7736): avc: denied { sendto } for pid=26380 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068681.017:7535): avc: denied { read } for pid=26404 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069038.648:9425): avc: denied { search } for pid=26785 comm="safe_timer" name="libpod-722053c3dca6bf5448f2339bb00c594495867f94e3a343d72524ebd087422426.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068692.298:7656): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068851.051:8396): avc: denied { write } for pid=26404 comm="safe_timer" path="pipe:[132125]" dev="pipefs" ino=132125 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068595.880:7088): avc: denied { search } for pid=56529 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068702.298:7702): avc: denied { search } for pid=35450 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068847.054:8339): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="tmpfs" ino=12350 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068798.279:8188): avc: denied { write } for pid=26404 comm="ms_dispatch" path="/var/lib/ceph/mon/ceph-smithi045/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068772.296:8011): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068854.225:8471): avc: denied { open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/rbd-details.json" dev="overlay" ino=1444472 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068680.350:7522): avc: denied { write } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069022.296:9298): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=172388 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068931.375:8751): avc: denied { open } for pid=26380 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068534.310:6864): avc: denied { search } for pid=51635 comm="safe_timer" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c1,c200 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068851.224:8398): avc: denied { search } for pid=43672 comm="grafana-server" name="/" dev="overlay" ino=1966093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068712.296:7772): avc: denied { read } for pid=35450 comm="node_exporter" name="fd" dev="proc" ino=172379 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069014.524:9193): avc: denied { search } for pid=26785 comm="safe_timer" name="libpod-722053c3dca6bf5448f2339bb00c594495867f94e3a343d72524ebd087422426.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069022.297:9311): avc: denied { search } for pid=35450 comm="node_exporter" name="kernel" dev="proc" ino=174118 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068537.236:6888): avc: denied { search } for pid=51635 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c1,c200 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068846.292:8327): avc: denied { read } for pid=26785 comm="msgr-worker-1" path="pipe:[148856]" dev="pipefs" ino=148856 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068702.296:7695): avc: denied { read } for pid=35450 comm="node_exporter" name="mc" dev="sysfs" ino=20785 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068621.051:7307): avc: denied { read } for pid=42172 comm="msgr-worker-0" path="socket:[206813]" dev="sockfs" ino=206813 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068765.800:7924): avc: denied { write } for pid=26380 comm="conmon" name="socket" dev="tmpfs" ino=13391 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068537.950:6897): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="sda1" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068852.295:8436): avc: denied { read } for pid=35450 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068950.207:8921): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068872.295:8575): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/7" dev="proc" ino=165324 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069040.225:9444): avc: denied { open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068959.875:8990): avc: denied { open } for pid=44429 comm="prometheus" path="/prometheus" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069034.196:9374): avc: denied { read } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068952.296:8935): avc: denied { read } for pid=35450 comm="node_exporter" name="sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068788.128:8123): avc: denied { read } for pid=56529 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069039.120:9429): avc: denied { getattr } for pid=26785 comm="mgr-fin" path="/usr/lib64/python3.6" dev="sda1" ino=919830 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068616.398:7272): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068770.087:7967): avc: denied { search } for pid=44429 comm="prometheus" name="etc" dev="sda1" ino=1966159 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068766.032:7931): avc: denied { getattr } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068551.736:6956): avc: denied { search } for pid=84337 comm="pgrep" name="26404" dev="proc" ino=133126 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068626.007:7377): avc: denied { search } for pid=26404 comm="safe_timer" name="/" dev="overlay" ino=1442271 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c690,c878 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069022.225:9292): avc: denied { open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068853.350:8461): avc: denied { open } for pid=26380 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069032.623:9366): avc: denied { open } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068630.087:7386): avc: denied { getattr } for pid=44429 comm="prometheus" laddr=172.21.15.45 lport=43371 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068506.225:6650): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069020.087:9273): avc: denied { setopt } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068933.378:8818): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068596.003:7096): avc: denied { search } for pid=26404 comm="rstore_compact" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068770.087:7968): avc: denied { create } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069032.297:9357): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="overlay" ino=1837665 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c767 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068704.196:7712): avc: denied { read } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068962.297:9021): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="tmpfs" ino=12350 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068719.873:7794): avc: denied { open } for pid=44429 comm="prometheus" path="/prometheus" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069042.295:9451): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068683.228:7589): avc: denied { search } for pid=46311 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068522.296:6808): avc: denied { read } for pid=35450 comm="node_exporter" name="fd" dev="proc" ino=172379 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068712.297:7777): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/hwmon/hwmon0" dev="sysfs" ino=34537 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068685.969:7617): avc: denied { read } for pid=42172 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068962.297:9010): avc: denied { search } for pid=35450 comm="node_exporter" name="1" dev="proc" ino=163757 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068689.224:7631): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069018.799:9258): avc: denied { open } for pid=51635 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068702.296:7690): avc: denied { read } for pid=35450 comm="node_exporter" name="fd" dev="proc" ino=172379 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068792.297:8183): avc: denied { search } for pid=35450 comm="node_exporter" name="host" dev="sda1" ino=1839635 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c767 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068781.821:8058): avc: denied { read } for pid=26404 comm="msgr-worker-2" path="socket:[169612]" dev="sockfs" ino=169612 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069042.299:9470): avc: denied { read } for pid=35450 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068506.992:6668): avc: denied { sendto } for pid=26380 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068506.225:6647): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/etc" dev="sda1" ino=1966099 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068950.225:8923): avc: denied { read } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068932.096:8761): avc: denied { getattr } for pid=26785 comm="safe_timer" name="os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068532.295:6825): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=172378 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068515.099:6794): avc: denied { open } for pid=46311 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068703.580:7710): avc: denied { write } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068705.727:7720): avc: denied { open } for pid=46311 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068779.225:8037): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069022.298:9316): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068623.224:7370): avc: denied { lock } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068539.872:6911): avc: denied { open } for pid=44429 comm="prometheus" path="/prometheus" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068706.022:7728): avc: denied { read } for pid=26404 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069042.298:9465): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=171422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068871.352:8551): avc: denied { use } for pid=26404 comm="fn_monstore" path="pipe:[129746]" dev="pipefs" ino=129746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068788.037:8121): avc: denied { search } for pid=46311 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069031.850:9332): avc: denied { read } for pid=104464 comm="pgrep" name="status" dev="proc" ino=131429 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068702.297:7696): avc: denied { open } for pid=35450 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=48268 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068512.297:6752): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=48268 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068931.066:8743): avc: denied { search } for pid=26404 comm="safe_timer" name="var" dev="sda1" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c690,c878 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068772.299:8027): avc: denied { search } for pid=35450 comm="node_exporter" name="host" dev="sda1" ino=1839635 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c767 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068507.771:6676): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="sda1" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068512.297:6744): avc: denied { search } for pid=35450 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068942.296:8881): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=172379 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068960.087:8994): avc: denied { create } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069042.299:9472): avc: denied { getattr } for pid=35450 comm="node_exporter" name="/" dev="tmpfs" ino=12351 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068512.297:6749): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069022.296:9294): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/7" dev="proc" ino=165324 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069038.648:9426): avc: denied { getattr } for pid=26785 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068852.295:8441): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=173267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068596.003:7101): avc: denied { read } for pid=26404 comm="rstore_compact" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068712.297:7778): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/hwmon/hwmon0/uevent" dev="sysfs" ino=34538 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068702.820:7708): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069018.205:9240): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068512.225:6732): avc: denied { lock } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068692.298:7657): avc: denied { search } for pid=35450 comm="node_exporter" name="user" dev="tmpfs" ino=13457 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068788.224:8125): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/etc" dev="sda1" ino=1966099 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069014.537:9195): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="overlay" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068612.295:7255): avc: denied { read } for pid=35450 comm="node_exporter" name="stat" dev="proc" ino=172378 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068865.695:8515): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="overlay" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068960.087:8998): avc: denied { connect } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068710.087:7759): avc: denied { create } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068702.297:7700): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068847.574:8347): avc: denied { getattr } for pid=26785 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068522.296:6806): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/7" dev="proc" ino=165324 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068847.574:8346): avc: denied { open } for pid=26785 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068847.054:8338): avc: denied { open } for pid=26380 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068971.834:9044): avc: denied { search } for pid=101288 comm="pgrep" name="26404" dev="proc" ino=133126 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068854.195:8468): avc: denied { lock } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068536.996:6881): avc: denied { read } for pid=26380 comm="conmon" path="pipe:[129746]" dev="pipefs" ino=129746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069036.982:9387): avc: denied { shutdown } for pid=26785 comm="msgr-worker-1" laddr=172.21.15.45 lport=6800 faddr=172.21.15.107 fport=46734 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068930.683:8741): avc: denied { open } for pid=46311 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068852.296:8450): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068872.224:8570): avc: denied { read } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068872.299:8597): avc: denied { search } for pid=35450 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616068621.006:7304): avc: denied { open } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069022.298:9315): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=173267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068872.224:8568): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/etc" dev="sda1" ino=1966099 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068596.224:7110): avc: denied { read } for pid=43672 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068950.087:8912): avc: denied { setopt } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068506.992:6665): avc: denied { write } for pid=26404 comm="fn_monstore" path="pipe:[129746]" dev="pipefs" ino=129746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068932.084:8759): avc: denied { read } for pid=26785 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068767.502:7959): avc: denied { search } for pid=56529 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c95,c734 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069022.573:9323): avc: denied { search } for pid=26785 comm="safe_timer" name="etc" dev="sda1" ino=1442299 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068866.053:8520): avc: denied { getattr } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068942.297:8896): avc: denied { search } for pid=35450 comm="node_exporter" name="host" dev="sda1" ino=1839635 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c767 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068932.297:8802): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068611.522:7244): avc: denied { use } for pid=26404 comm="fn_monstore" path="pipe:[129746]" dev="pipefs" ino=129746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068622.011:7325): avc: denied { write } for pid=26380 comm="conmon" name="socket" dev="tmpfs" ino=13391 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068962.297:9012): avc: denied { read } for pid=35450 comm="node_exporter" name="cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069038.660:9428): avc: denied { getattr } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069032.318:9363): avc: denied { append } for pid=44429 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068871.731:8565): avc: denied { getattr } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068622.422:7366): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068772.299:8020): avc: denied { read } for pid=35450 comm="node_exporter" name="file-nr" dev="proc" ino=173267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069042.295:9453): avc: denied { search } for pid=35450 comm="node_exporter" name="7" dev="proc" ino=165324 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068787.828:8114): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068598.300:7148): avc: denied { getattr } for pid=26785 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068780.087:8051): avc: denied { write } for pid=44429 comm="prometheus" path="socket:[348800]" dev="sockfs" ino=348800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068602.296:7222): avc: denied { read } for pid=35450 comm="node_exporter" name="arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069014.199:9186): avc: denied { open } for pid=26380 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069041.086:9448): avc: denied { read } for pid=26404 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068542.296:6927): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068520.989:6805): avc: denied { dac_read_search } for pid=26404 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068613.525:7262): avc: denied { sendto } for pid=26380 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068622.297:7349): avc: denied { search } for pid=35450 comm="node_exporter" name="1" dev="proc" ino=163757 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068932.084:8760): avc: denied { getattr } for pid=26785 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068682.296:7563): avc: denied { read } for pid=35450 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068712.299:7792): avc: denied { search } for pid=35450 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616068771.808:7999): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069022.225:9291): avc: denied { search } for pid=43672 comm="grafana-server" name="/" dev="overlay" ino=1966093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068972.297:9057): avc: denied { search } for pid=35450 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068507.759:6673): avc: denied { search } for pid=26785 comm="safe_timer" name="/" dev="overlay" ino=1442290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068682.298:7575): avc: denied { getattr } for pid=35450 comm="node_exporter" name="/" dev="tmpfs" ino=12351 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068509.491:6702): avc: denied { write } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db/000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068959.875:8991): avc: denied { getattr } for pid=44429 comm="prometheus" path="/prometheus/queries.active" dev="dm-4" ino=158 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068515.988:6799): avc: denied { search } for pid=26404 comm="safe_timer" name="/" dev="overlay" ino=1442271 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c690,c878 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068692.296:7643): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068612.297:7259): avc: denied { read } for pid=35450 comm="node_exporter" name="mounts" dev="proc" ino=172388 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068792.295:8159): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/7" dev="proc" ino=165324 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069019.875:9267): avc: denied { search } for pid=44429 comm="prometheus" name="/" dev="overlay" ino=1966143 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068542.297:6933): avc: denied { open } for pid=35450 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=48268 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069032.297:9348): avc: denied { read } for pid=35450 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069032.091:9341): avc: denied { write } for pid=26380 comm="conmon" name="socket" dev="tmpfs" ino=13391 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068936.067:8845): avc: denied { getattr } for pid=26404 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068706.021:7727): avc: denied { dac_read_search } for pid=26404 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068712.297:7779): avc: denied { search } for pid=35450 comm="node_exporter" name="net" dev="proc" ino=165330 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068772.299:8022): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068623.224:7368): avc: denied { search } for pid=43672 comm="grafana-server" name="/" dev="overlay" ino=1966093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068506.992:6666): avc: denied { read } for pid=26380 comm="conmon" path="pipe:[129746]" dev="pipefs" ino=129746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069042.296:9461): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=30065 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068803.328:8203): avc: denied { create } for pid=43672 comm="grafana-server" name="grafana.db-journal" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069037.836:9410): avc: denied { search } for pid=56529 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c95,c734 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068771.981:8001): avc: denied { search } for pid=42172 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966114 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c165,c594 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068509.783:6707): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068680.086:7503): avc: denied { getattr } for pid=44429 comm="prometheus" path="/etc/hosts" dev="tmpfs" ino=194674 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068536.996:6883): avc: denied { write } for pid=26380 comm="conmon" name="socket" dev="tmpfs" ino=13391 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068612.295:7256): avc: denied { read } for pid=35450 comm="node_exporter" name="fd" dev="proc" ino=172379 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068616.398:7273): avc: denied { getattr } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068509.493:6703): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068680.355:7526): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="tmpfs" ino=12350 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068689.224:7633): avc: denied { open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068932.303:8810): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="tmpfs" ino=12350 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069032.296:9346): avc: denied { search } for pid=35450 comm="node_exporter" name="7" dev="proc" ino=165324 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069034.196:9375): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068692.297:7654): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=171422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069022.225:9292): avc: denied { read } for pid=43672 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069014.199:9184): avc: denied { write } for pid=26404 comm="fn_monstore" path="pipe:[129746]" dev="pipefs" ino=129746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068872.224:8571): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068846.438:8334): avc: denied { search } for pid=46311 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068954.196:8955): avc: denied { search } for pid=43672 comm="grafana-server" name="var" dev="sda1" ino=1966089 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068936.067:8846): avc: denied { read } for pid=26404 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068622.296:7342): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/sys/class/net/ens1f1" dev="sysfs" ino=37772 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068596.224:7107): avc: denied { lock } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068702.296:7686): avc: denied { signal } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068767.226:7957): avc: denied { read open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068933.376:8817): avc: denied { write } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069022.296:9298): avc: denied { search } for pid=35450 comm="node_exporter" name="1" dev="proc" ino=163757 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068792.296:8175): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069032.297:9350): avc: denied { search } for pid=35450 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068680.105:7512): avc: denied { read } for pid=26785 comm="mgr-fin" name="localtime" dev="sda1" ino=265527 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068515.096:6793): avc: denied { search } for pid=26785 comm="mgr-fin" name="etc" dev="sda1" ino=1442299 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068536.996:6880): avc: denied { write } for pid=26404 comm="fn_monstore" path="pipe:[129746]" dev="pipefs" ino=129746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068622.298:7355): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068680.224:7519): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068602.300:7235): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=173267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068509.783:6708): avc: denied { getattr } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068596.015:7103): avc: denied { unlink } for pid=26404 comm="rocksdb:high0" name="000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068803.763:8206): avc: denied { setopt } for pid=43672 comm="grafana-server" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068788.224:8128): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068680.086:7508): avc: denied { getattr } for pid=44429 comm="prometheus" laddr=172.21.15.45 lport=55818 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068787.828:8112): avc: denied { use } for pid=26404 comm="fn_monstore" path="pipe:[129746]" dev="pipefs" ino=129746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068852.299:8454): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="tmpfs" ino=12350 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068601.003:7190): avc: denied { getattr } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068690.086:7634): avc: denied { create } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068765.800:7921): avc: denied { write } for pid=26404 comm="fn_monstore" path="pipe:[129746]" dev="pipefs" ino=129746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068612.295:7257): avc: denied { read } for pid=35450 comm="node_exporter" name="sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068622.298:7354): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068680.721:7533): avc: denied { open } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068932.096:8761): avc: denied { search } for pid=26785 comm="safe_timer" name="etc" dev="sda1" ino=1442299 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068620.086:7292): avc: denied { create } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068955.543:8976): avc: denied { append } for pid=44429 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068792.296:8172): avc: denied { read } for pid=35450 comm="node_exporter" name="physical_package_id" dev="sysfs" ino=28137 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068871.719:8562): avc: denied { search } for pid=26785 comm="safe_timer" name="libpod-722053c3dca6bf5448f2339bb00c594495867f94e3a343d72524ebd087422426.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068595.880:7088): avc: denied { search } for pid=56529 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068710.087:7766): avc: denied { write } for pid=44429 comm="prometheus" path="socket:[340050]" dev="sockfs" ino=340050 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069018.561:9257): avc: denied { search } for pid=26785 comm="safe_timer" name="usr" dev="sda1" ino=658316 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068954.219:8959): avc: denied { open } for pid=26785 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069018.799:9258): avc: denied { read } for pid=51635 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068773.225:8031): avc: denied { read } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068692.298:7655): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068618.410:7288): avc: denied { search } for pid=26785 comm="safe_timer" name="usr" dev="sda1" ino=658316 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068554.622:6960): avc: denied { getattr } for pid=26785 comm="mgr-fin" path="/usr/share/ceph/mgr/cephadm/serve.py" dev="overlay" ino=1050949 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068680.224:7515): avc: denied { search } for pid=43672 comm="grafana-server" name="etc" dev="sda1" ino=1966099 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068600.458:7172): avc: denied { search } for pid=42172 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966114 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c165,c594 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068680.225:7521): avc: denied { open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/cephfs-overview.json" dev="sda1" ino=1444462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068613.017:7261): avc: denied { read } for pid=56529 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068686.017:7618): avc: denied { getattr } for pid=26404 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068622.296:7341): avc: denied { read } for pid=35450 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068850.086:8385): avc: denied { getattr } for pid=44429 comm="prometheus" path="/etc/hosts" dev="tmpfs" ino=194674 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068536.992:6877): avc: denied { read } for pid=26404 comm="msgr-worker-2" path="pipe:[132125]" dev="pipefs" ino=132125 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069038.184:9418): avc: denied { write } for pid=26380 comm="conmon" name="socket" dev="tmpfs" ino=13391 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068942.296:8886): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=171422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068862.296:8496): avc: denied { search } for pid=35450 comm="node_exporter" name="kernel" dev="proc" ino=174118 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068596.002:7090): avc: denied { dac_read_search } for pid=26404 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068850.086:8391): avc: denied { read } for pid=44429 comm="prometheus" path="socket:[360437]" dev="sockfs" ino=360437 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068600.086:7164): avc: denied { search } for pid=44429 comm="prometheus" name="etc" dev="sda1" ino=1966159 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068772.299:8023): avc: denied { search } for pid=35450 comm="node_exporter" name="user" dev="tmpfs" ino=13457 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068680.105:7512): avc: denied { getattr } for pid=26785 comm="mgr-fin" path="/usr/share/zoneinfo/UTC" dev="overlay" ino=1181438 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068767.225:7952): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068536.996:6883): avc: denied { search } for pid=26380 comm="conmon" name="systemd" dev="tmpfs" ino=12359 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068932.096:8761): avc: denied { open } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068936.812:8853): avc: denied { search } for pid=46311 comm="safe_timer" name="/" dev="overlay" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c235 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068700.588:7679): avc: denied { search } for pid=26380 comm="conmon" name="systemd" dev="tmpfs" ino=12359 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069037.701:9403): avc: denied { write } for pid=77709 comm="ceph_timer" path="pipe:[279866]" dev="pipefs" ino=279866 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068702.296:7694): avc: denied { read } for pid=35450 comm="node_exporter" name="file-nr" dev="proc" ino=173267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068532.295:6824): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068680.355:7526): avc: denied { write } for pid=26380 comm="conmon" name="socket" dev="tmpfs" ino=13391 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068772.296:8007): avc: denied { search } for pid=35450 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068955.388:8969): avc: denied { read } for pid=26380 comm="conmon" path="pipe:[129746]" dev="pipefs" ino=129746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068707.226:7754): avc: denied { open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069014.199:9187): avc: denied { write } for pid=26380 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068506.226:6651): avc: denied { open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068540.086:6919): avc: denied { connect } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068707.225:7753): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069042.299:9469): avc: denied { read } for pid=35450 comm="node_exporter" name="mounts" dev="proc" ino=172388 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068852.296:8448): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=171422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068931.066:8744): avc: denied { open } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068600.086:7168): avc: denied { getattr } for pid=44429 comm="prometheus" laddr=172.21.15.45 lport=36786 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068789.249:8140): avc: denied { open } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069016.082:9218): avc: denied { dac_read_search } for pid=26404 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069034.336:9380): avc: denied { open } for pid=56529 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068853.622:8466): avc: denied { open } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068510.987:6719): avc: denied { search } for pid=26404 comm="safe_timer" name="var" dev="sda1" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c690,c878 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068712.296:7771): avc: denied { read } for pid=35450 comm="node_exporter" name="stat" dev="proc" ino=172378 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068876.055:8609): avc: denied { search } for pid=26404 comm="safe_timer" name="/" dev="overlay" ino=1442271 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c690,c878 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068765.111:7914): avc: denied { getattr } for pid=26785 comm="mgr-fin" path="/usr/share/zoneinfo/UTC" dev="overlay" ino=1181438 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069036.086:9384): avc: denied { read } for pid=26404 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069032.296:9346): avc: denied { read } for pid=35450 comm="node_exporter" name="stat" dev="proc" ino=172378 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068630.087:7381): avc: denied { search } for pid=44429 comm="prometheus" name="/" dev="overlay" ino=1966143 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069031.827:9329): avc: denied { open } for pid=51635 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068684.576:7591): avc: denied { open } for pid=26380 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069019.226:9266): avc: denied { open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-sync-overview.json" dev="overlay" ino=1444471 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068686.225:7624): avc: denied { open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/osds-overview.json" dev="sda1" ino=1444466 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068536.996:6882): avc: denied { write } for pid=26380 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068680.086:7503): avc: denied { search } for pid=44429 comm="prometheus" name="/" dev="overlay" ino=1966143 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069042.298:9467): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068971.889:9047): avc: denied { write } for pid=42172 comm="msgr-worker-1" laddr=172.21.15.45 lport=45866 faddr=172.21.15.45 fport=3300 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068782.297:8089): avc: denied { search } for pid=35450 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069037.836:9410): avc: denied { open } for pid=56529 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068512.297:6743): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=172388 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068509.771:6704): avc: denied { search } for pid=26785 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068942.297:8892): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068959.875:8990): avc: denied { read } for pid=44429 comm="prometheus" name="data" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068880.385:8621): avc: denied { fork } for pid=41287 comm="alertmanager" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068972.297:9057): avc: denied { search } for pid=35450 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069016.549:9229): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068536.991:6876): avc: denied { write } for pid=26404 comm="safe_timer" path="pipe:[132125]" dev="pipefs" ino=132125 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068770.087:7970): avc: denied { setopt } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068872.296:8578): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/7/net/arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068522.299:6813): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069022.296:9305): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068617.224:7281): avc: denied { open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/host-details.json" dev="overlay" ino=1444463 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068942.297:8887): avc: denied { search } for pid=35450 comm="node_exporter" name="1" dev="proc" ino=163757 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068955.388:8968): avc: denied { write } for pid=26404 comm="fn_monstore" path="pipe:[129746]" dev="pipefs" ino=129746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069022.296:9307): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068803.763:8207): avc: denied { connect } for pid=43672 comm="grafana-server" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068507.771:6676): avc: denied { search } for pid=26785 comm="safe_timer" name="etc" dev="sda1" ino=1442299 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068846.438:8333): avc: denied { search } for pid=46311 comm="safe_timer" name="diff" dev="sda1" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068950.225:8922): avc: denied { lock } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068956.071:8977): avc: denied { getattr } for pid=26404 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068791.035:8151): avc: denied { search } for pid=26404 comm="safe_timer" name="mon.smithi045" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068601.003:7188): avc: denied { getattr } for pid=26404 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068690.086:7637): avc: denied { connect } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068601.455:7197): avc: denied { search } for pid=51635 comm="safe_timer" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c1,c200 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068507.771:6677): avc: denied { getattr } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068680.087:7511): avc: denied { append } for pid=44429 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068532.295:6828): avc: denied { open } for pid=35450 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=48268 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068622.296:7347): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=173267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068596.300:7116): avc: denied { search } for pid=26785 comm="safe_timer" name="etc" dev="sda1" ino=1442299 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068932.296:8798): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=173267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069014.691:9197): avc: denied { search } for pid=46311 comm="safe_timer" name="/" dev="overlay" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c235 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068611.750:7250): avc: denied { getattr } for pid=87621 comm="pgrep" path="/proc/26761" dev="proc" ino=134195 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068789.237:8138): avc: denied { read } for pid=26785 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068792.296:8173): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/sys/devices/system/cpu/cpu0/topology/physical_package_id" dev="sysfs" ino=28137 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068872.297:8593): avc: denied { getattr } for pid=35450 comm="node_exporter" name="/" dev="tmpfs" ino=12351 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068950.087:8913): avc: denied { connect } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068791.792:8156): avc: denied { search } for pid=94445 comm="pgrep" name="26404" dev="proc" ino=133126 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068787.828:8114): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068792.296:8168): avc: denied { read } for pid=35450 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068872.299:8598): avc: denied { search } for pid=35450 comm="node_exporter" name="host" dev="sda1" ino=1839635 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c767 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068512.297:6760): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068869.719:8533): avc: denied { getattr } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068798.200:8186): avc: denied { search } for pid=26761 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068767.225:7955): avc: denied { read } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068540.086:6915): avc: denied { create } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068685.969:7617): avc: denied { open } for pid=42172 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068506.226:6651): avc: denied { read } for pid=43672 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068871.352:8551): avc: denied { write } for pid=26404 comm="fn_monstore" path="pipe:[129746]" dev="pipefs" ino=129746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068506.225:6649): avc: denied { read } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068962.298:9023): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=173267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069016.226:9225): avc: denied { read } for pid=43672 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068622.316:7362): avc: denied { append } for pid=44429 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068706.022:7729): avc: denied { getattr } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069013.332:9177): avc: denied { search } for pid=56529 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068851.224:8399): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/etc" dev="sda1" ino=1966099 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069040.087:9433): avc: denied { create } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068792.295:8161): avc: denied { read } for pid=35450 comm="node_exporter" name="fd" dev="proc" ino=172379 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068852.295:8431): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068932.096:8761): avc: denied { open } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068972.327:9059): avc: denied { search } for pid=26785 comm="safe_timer" name="libpod-722053c3dca6bf5448f2339bb00c594495867f94e3a343d72524ebd087422426.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068706.846:7746): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="overlay" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069020.087:9277): avc: denied { read } for pid=44429 comm="prometheus" path="socket:[398553]" dev="sockfs" ino=398553 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068597.012:7120): avc: denied { read } for pid=26380 comm="conmon" path="pipe:[129746]" dev="pipefs" ino=129746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068506.225:6646): avc: denied { search } for pid=43672 comm="grafana-server" name="diff" dev="sda1" ino=1966093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068870.086:8538): avc: denied { setopt } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068870.086:8535): avc: denied { create } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068682.298:7576): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069032.296:9346): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=172378 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068782.295:8075): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=172379 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068936.120:8851): avc: denied { search } for pid=26785 comm="safe_timer" name="usr" dev="sda1" ino=658316 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068767.225:7952): avc: denied { getattr } for pid=43672 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068872.299:8596): avc: denied { search } for pid=35450 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068782.296:8082): avc: denied { read } for pid=35450 comm="node_exporter" name="entropy_avail" dev="proc" ino=171422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069032.297:9354): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=173267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068772.296:8008): avc: denied { open } for pid=35450 comm="node_exporter" path="/sys/class/net" dev="sysfs" ino=20806 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068712.297:7780): avc: denied { read } for pid=35450 comm="node_exporter" name="file-nr" dev="proc" ino=173267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068847.586:8348): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="sda1" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068617.010:7276): avc: denied { write } for pid=26380 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068595.865:7085): avc: denied { write } for pid=46311 comm="msgr-worker-0" laddr=172.21.15.45 lport=6814 faddr=172.21.15.107 fport=53098 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068597.012:7122): avc: denied { write } for pid=26380 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068690.086:7635): avc: denied { create } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068765.800:7922): avc: denied { read } for pid=26380 comm="conmon" path="pipe:[129746]" dev="pipefs" ino=129746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068707.226:7754): avc: denied { read open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068954.231:8961): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="sda1" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068623.224:7371): avc: denied { read } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068622.298:7356): avc: denied { search } for pid=35450 comm="node_exporter" name="user" dev="tmpfs" ino=13457 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068706.846:7747): avc: denied { getattr } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069038.660:9427): avc: denied { search } for pid=26785 comm="safe_timer" name="etc" dev="sda1" ino=1442299 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068712.297:7773): avc: denied { read } for pid=35450 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068537.236:6888): avc: denied { search } for pid=51635 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068932.224:8766): avc: denied { read } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068596.003:7095): avc: denied { getattr } for pid=26404 comm="rstore_compact" path="/sys" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068622.296:7340): avc: denied { open } for pid=35450 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068707.001:7748): avc: denied { search } for pid=51635 comm="safe_timer" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c1,c200 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068803.763:8207): avc: denied { name_connect } for pid=43672 comm="grafana-server" dest=443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:http_port_t:s0 tclass=tcp_socket permissive=1', 'type=AVC msg=audit(1616068620.225:7302): avc: denied { read open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068712.299:7793): avc: denied { search } for pid=35450 comm="node_exporter" name="host" dev="sda1" ino=1839635 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c767 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068962.298:9024): avc: denied { search } for pid=35450 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068860.086:8479): avc: denied { create } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069032.296:9347): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=172379 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069022.573:9321): avc: denied { search } for pid=26785 comm="safe_timer" name="/" dev="overlay" ino=1442290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068932.224:8764): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/etc" dev="sda1" ino=1966099 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068931.375:8752): avc: denied { search } for pid=26380 comm="conmon" name="journal" dev="tmpfs" ino=13382 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068537.950:6897): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068962.297:9009): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=171422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069040.087:9434): avc: denied { setopt } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068872.296:8589): avc: denied { read } for pid=35450 comm="node_exporter" name="entropy_avail" dev="proc" ino=171422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068600.086:7167): avc: denied { connect } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068596.002:7090): avc: denied { search } for pid=26404 comm="safe_timer" name="var" dev="sda1" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c690,c878 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068852.296:8446): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068680.196:7513): avc: denied { search } for pid=46311 comm="safe_timer" name="/" dev="overlay" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c235 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069016.537:9228): avc: denied { getattr } for pid=26785 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068598.002:7145): avc: denied { signal } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068706.846:7746): avc: denied { getattr } for pid=26785 comm="safe_timer" name="os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068602.295:7213): avc: denied { search } for pid=35450 comm="node_exporter" name="7" dev="proc" ino=165324 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068682.296:7565): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068538.002:6901): avc: denied { signal } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068612.295:7256): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=172379 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068934.199:8824): avc: denied { search } for pid=42172 comm="safe_timer" name="/" dev="overlay" ino=1966114 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c165,c594 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068872.297:8593): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069014.691:9198): avc: denied { read } for pid=46311 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068682.295:7556): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="overlay" ino=1837665 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c767 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068602.300:7235): avc: denied { read } for pid=35450 comm="node_exporter" name="file-nr" dev="proc" ino=173267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068932.224:8763): avc: denied { search } for pid=43672 comm="grafana-server" name="/" dev="overlay" ino=1966093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068513.795:6771): avc: denied { search } for pid=26785 comm="safe_timer" name="libpod-722053c3dca6bf5448f2339bb00c594495867f94e3a343d72524ebd087422426.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068772.299:8024): avc: denied { search } for pid=35450 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068602.296:7218): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068682.296:7567): avc: denied { open } for pid=35450 comm="node_exporter" path="/sys/class/net" dev="sysfs" ino=20806 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068532.299:6834): avc: denied { getattr } for pid=35450 comm="node_exporter" name="/" dev="tmpfs" ino=12351 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068782.296:8083): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=171422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068865.695:8515): avc: denied { search } for pid=26785 comm="safe_timer" name="etc" dev="sda1" ino=1442299 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069032.310:9362): avc: denied { append } for pid=56529 comm="log" path="/var/log/ceph/ceph-osd.3.log" dev="sda1" ino=395844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068692.296:7645): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068509.098:6683): avc: denied { search } for pid=46311 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c235 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068942.296:8884): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069022.296:9303): avc: denied { read } for pid=35450 comm="node_exporter" name="ce_count" dev="sysfs" ino=48268 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068712.297:7784): avc: denied { read } for pid=35450 comm="node_exporter" name="mounts" dev="proc" ino=172388 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068792.296:8169): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=173267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069016.226:9225): avc: denied { open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068954.231:8961): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068936.067:8846): avc: denied { open } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068932.296:8798): avc: denied { search } for pid=35450 comm="node_exporter" name="fs" dev="proc" ino=173266 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069040.087:9437): avc: denied { write } for pid=44429 comm="prometheus" path="socket:[404524]" dev="sockfs" ino=404524 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068773.225:8032): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068510.087:6710): avc: denied { search } for pid=44429 comm="prometheus" name="etc" dev="sda1" ino=1966159 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068962.297:9011): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068602.295:7213): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=172378 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069032.623:9365): avc: denied { getattr } for pid=26785 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068865.563:8509): avc: denied { write } for pid=26404 comm="fn_monstore" path="pipe:[129746]" dev="pipefs" ino=129746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069032.297:9348): avc: denied { read } for pid=35450 comm="node_exporter" name="sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068597.012:7122): avc: denied { search } for pid=26380 comm="conmon" name="systemd" dev="tmpfs" ino=12359 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068710.087:7758): avc: denied { search } for pid=44429 comm="prometheus" name="/" dev="overlay" ino=1966143 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068781.201:8056): avc: denied { read } for pid=26785 comm="safe_timer" name="meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068540.086:6921): avc: denied { getattr } for pid=44429 comm="prometheus" laddr=172.21.15.45 lport=43993 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068540.991:6924): avc: denied { search } for pid=26404 comm="safe_timer" name="/" dev="overlay" ino=1442271 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c690,c878 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068854.350:8472): avc: denied { write } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068622.297:7349): avc: denied { read } for pid=35450 comm="node_exporter" name="mounts" dev="proc" ino=172388 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068788.037:8121): avc: denied { search } for pid=46311 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069022.296:9303): avc: denied { open } for pid=35450 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=48268 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068512.296:6741): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=172379 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069013.319:9173): avc: denied { read } for pid=75707 comm="msgr-worker-0" path="pipe:[275879]" dev="pipefs" ino=275879 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068542.297:6930): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=172379 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068788.225:8129): avc: denied { open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068792.297:8180): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="tmpfs" ino=12350 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068630.087:7385): avc: denied { connect } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068686.017:7619): avc: denied { search } for pid=26404 comm="safe_timer" name="mon.smithi045" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069042.298:9465): avc: denied { search } for pid=35450 comm="node_exporter" name="kernel" dev="proc" ino=174118 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068622.422:7366): avc: denied { open } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068680.196:7514): avc: denied { open } for pid=46311 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068865.563:8512): avc: denied { search } for pid=26380 comm="conmon" name="journal" dev="tmpfs" ino=13382 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068798.285:8189): avc: denied { write } for pid=26404 comm="rstore_compact" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068599.224:7156): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068513.498:6770): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068515.501:6798): avc: denied { sendto } for pid=26380 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068596.224:7105): avc: denied { search } for pid=43672 comm="grafana-server" name="etc" dev="sda1" ino=1966099 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068712.297:7781): avc: denied { read } for pid=35450 comm="node_exporter" name="entropy_avail" dev="proc" ino=171422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069016.082:9221): avc: denied { getattr } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068621.983:7320): avc: denied { search } for pid=56529 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c95,c734 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068870.086:8539): avc: denied { connect } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068931.066:8743): avc: denied { getattr } for pid=26404 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068852.295:8442): avc: denied { open } for pid=35450 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=30065 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068506.433:6660): avc: denied { write } for pid=51635 comm="msgr-worker-0" laddr=172.21.15.45 lport=33816 faddr=172.21.15.45 fport=6806 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068509.783:6707): avc: denied { open } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068682.297:7573): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=173267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068531.914:6823): avc: denied { getattr } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069019.225:9260): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/etc" dev="sda1" ino=1966099 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068851.225:8400): avc: denied { open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068971.834:9042): avc: denied { read } for pid=101288 comm="pgrep" name="status" dev="proc" ino=131429 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068686.224:7622): avc: denied { search } for pid=43672 comm="grafana-server" name="dashboards" dev="sda1" ino=1444459 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068595.866:7087): avc: denied { read } for pid=75707 comm="msgr-worker-1" path="pipe:[275880]" dev="pipefs" ino=275880 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068680.196:7513): avc: denied { read } for pid=46311 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068690.086:7639): avc: denied { write } for pid=44429 comm="prometheus" path="socket:[326389]" dev="sockfs" ino=326389 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068602.296:7217): avc: denied { search } for pid=35450 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068599.224:7155): avc: denied { read } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068552.296:6957): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/7/net/sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068766.136:7933): avc: denied { search } for pid=46311 comm="safe_timer" name="/" dev="overlay" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c235 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069042.299:9477): avc: denied { search } for pid=35450 comm="node_exporter" name="host" dev="sda1" ino=1839635 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c767 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068790.086:8148): avc: denied { read } for pid=44429 comm="prometheus" path="socket:[354387]" dev="sockfs" ino=354387 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068853.350:8463): avc: denied { write } for pid=26380 comm="conmon" name="socket" dev="tmpfs" ino=13391 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068953.855:8952): avc: denied { read } for pid=26785 comm="msgr-worker-1" path="socket:[147937]" dev="sockfs" ino=147937 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069038.184:9418): avc: denied { sendto } for pid=26380 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068520.087:6804): avc: denied { search } for pid=44429 comm="prometheus" name="etc" dev="sda1" ino=1966159 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068702.820:7706): avc: denied { read } for pid=26785 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069042.295:9452): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/7" dev="proc" ino=165324 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069037.920:9412): avc: denied { search } for pid=42172 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068876.055:8610): avc: denied { search } for pid=26404 comm="safe_timer" name="mon.smithi045" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069020.087:9270): avc: denied { search } for pid=44429 comm="prometheus" name="etc" dev="sda1" ino=1966159 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068506.992:6668): avc: denied { write } for pid=26380 comm="conmon" name="socket" dev="tmpfs" ino=13391 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069032.297:9356): avc: denied { search } for pid=35450 comm="node_exporter" name="user" dev="tmpfs" ino=13457 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068862.297:8497): avc: denied { getattr } for pid=35450 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068848.224:8375): avc: denied { open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068622.422:7367): avc: denied { getattr } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068618.131:7283): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="tmpfs" ino=12350 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068765.116:7916): avc: denied { search } for pid=26785 comm="safe_timer" name="libpod-722053c3dca6bf5448f2339bb00c594495867f94e3a343d72524ebd087422426.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068950.225:8923): avc: denied { read } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068972.422:9061): avc: denied { open } for pid=42172 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069014.537:9195): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069014.199:9187): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="tmpfs" ino=12350 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068965.917:9031): avc: denied { name_connect } for pid=26785 comm="msgr-worker-0" dest=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unreserved_port_t:s0 tclass=tcp_socket permissive=1', 'type=AVC msg=audit(1616068532.295:6826): avc: denied { read } for pid=35450 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068602.318:7237): avc: denied { read } for pid=44429 comm="prometheus" path="pipe:[192927]" dev="pipefs" ino=192927 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068692.296:7641): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="overlay" ino=1837665 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c767 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069034.196:9373): avc: denied { lock } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068512.305:6767): avc: denied { write } for pid=35450 comm="node_exporter" path="socket:[196099]" dev="sockfs" ino=196099 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069013.319:9172): avc: denied { write } for pid=75707 comm="rgw_obj_expirer" path="pipe:[275879]" dev="pipefs" ino=275879 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068803.328:8203): avc: denied { add_name } for pid=43672 comm="grafana-server" name="grafana.db-journal" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068946.068:8900): avc: denied { search } for pid=26404 comm="safe_timer" name="/" dev="overlay" ino=1442271 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c690,c878 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068893.817:8627): avc: denied { write } for pid=43672 comm="grafana-server" path="socket:[352942]" dev="sockfs" ino=352942 scontext=system_u:system_r:spc_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1', 'type=AVC msg=audit(1616068622.422:7366): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="overlay" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068509.771:6706): avc: denied { getattr } for pid=26785 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069044.266:9481): avc: denied { getattr } for pid=26785 comm="msgr-worker-0" laddr=172.21.15.45 lport=6800 faddr=172.21.15.107 fport=47334 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068848.224:8374): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068506.309:6655): avc: denied { append } for pid=46311 comm="log" path="/var/log/ceph/ceph-osd.1.log" dev="sda1" ino=395841 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068692.314:7660): avc: denied { write } for pid=35450 comm="node_exporter" path="socket:[196099]" dev="sockfs" ino=196099 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068871.572:8560): avc: denied { search } for pid=51635 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068536.996:6883): avc: denied { sendto } for pid=26380 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068700.588:7679): avc: denied { search } for pid=26380 comm="conmon" name="journal" dev="tmpfs" ino=13382 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068702.172:7685): avc: denied { search } for pid=42172 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966114 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c165,c594 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068852.295:8433): avc: denied { search } for pid=35450 comm="node_exporter" name="7" dev="proc" ino=165324 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068542.299:6947): avc: denied { search } for pid=35450 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068602.225:7209): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="sda1" ino=1444461 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068865.683:8514): avc: denied { search } for pid=26785 comm="safe_timer" name="libpod-722053c3dca6bf5448f2339bb00c594495867f94e3a343d72524ebd087422426.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068602.296:7226): avc: denied { open } for pid=35450 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068509.771:6705): avc: denied { read } for pid=26785 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068680.196:7513): avc: denied { search } for pid=46311 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069042.296:9460): avc: denied { read } for pid=35450 comm="node_exporter" name="cpuinfo_max_freq" dev="sysfs" ino=30065 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068791.035:8150): avc: denied { dac_read_search } for pid=26404 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068932.295:8791): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=172379 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068942.297:8888): avc: denied { read } for pid=35450 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068683.224:7588): avc: denied { open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/osd-device-details.json" dev="overlay" ino=1444465 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068622.011:7325): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="tmpfs" ino=12350 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068702.297:7698): avc: denied { search } for pid=35450 comm="node_exporter" name="kernel" dev="proc" ino=174118 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068853.350:8463): avc: denied { search } for pid=26380 comm="conmon" name="systemd" dev="tmpfs" ino=12359 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068876.055:8611): avc: denied { getattr } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068952.296:8937): avc: denied { read } for pid=35450 comm="node_exporter" name="stats" dev="sysfs" ino=50083 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068851.806:8405): avc: denied { getattr } for pid=97651 comm="pgrep" path="/proc/26380" dev="proc" ino=131425 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068623.224:7368): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068595.533:7075): avc: denied { write } for pid=26380 comm="conmon" name="socket" dev="tmpfs" ino=13391 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068782.296:8079): avc: denied { read } for pid=35450 comm="node_exporter" name="eno1" dev="sysfs" ino=34342 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068512.297:6764): avc: denied { search } for pid=35450 comm="node_exporter" name="host" dev="sda1" ino=1839635 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c767 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068622.296:7347): avc: denied { read } for pid=35450 comm="node_exporter" name="file-nr" dev="proc" ino=173267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068772.296:8009): avc: denied { search } for pid=35450 comm="node_exporter" name="1" dev="proc" ino=163757 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068791.035:8150): avc: denied { getattr } for pid=26404 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068932.224:8767): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068934.108:8823): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="sda1" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069031.850:9334): avc: denied { open } for pid=104464 comm="pgrep" path="/proc/26404/status" dev="proc" ino=133163 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068952.298:8941): avc: denied { search } for pid=35450 comm="node_exporter" name="user" dev="tmpfs" ino=13457 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068872.224:8567): avc: denied { search } for pid=43672 comm="grafana-server" name="etc" dev="sda1" ino=1966099 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068872.295:8576): avc: denied { search } for pid=35450 comm="node_exporter" name="7" dev="proc" ino=165324 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068515.096:6793): avc: denied { search } for pid=26785 comm="mgr-fin" name="/" dev="overlay" ino=1442290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068522.297:6811): avc: denied { search } for pid=35450 comm="node_exporter" name="1" dev="proc" ino=163757 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068542.298:6937): avc: denied { search } for pid=35450 comm="node_exporter" name="net" dev="proc" ino=165330 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068847.054:8339): avc: denied { sendto } for pid=26380 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068712.298:7786): avc: denied { getattr } for pid=35450 comm="node_exporter" name="/" dev="tmpfs" ino=12351 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068622.271:7332): avc: denied { read } for pid=42172 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068554.512:6959): avc: denied { write } for pid=26380 comm="conmon" name="socket" dev="tmpfs" ino=13391 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068697.636:7664): avc: denied { write } for pid=77709 comm="ceph_timer" path="pipe:[279866]" dev="pipefs" ino=279866 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069014.524:9192): avc: denied { search } for pid=26785 comm="safe_timer" name="/" dev="overlay" ino=1442290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068705.727:7723): avc: denied { read } for pid=46311 comm="msgr-worker-2" path="pipe:[194126]" dev="pipefs" ino=194126 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068931.066:8743): avc: denied { search } for pid=26404 comm="safe_timer" name="/" dev="overlay" ino=1442271 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c690,c878 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068931.066:8746): avc: denied { getattr } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068596.003:7097): avc: denied { getattr } for pid=26404 comm="rstore_compact" path="/sys/dev/block/253:4" dev="sysfs" ino=49630 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068507.759:6675): avc: denied { getattr } for pid=26785 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069037.126:9392): avc: denied { read } for pid=26404 comm="msgr-worker-2" path="socket:[151829]" dev="sockfs" ino=151829 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068597.012:7122): avc: denied { sendto } for pid=26380 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068955.388:8970): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068680.105:7512): avc: denied { read } for pid=26785 comm="mgr-fin" name="localtime" dev="overlay" ino=265527 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069037.225:9393): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068851.051:8397): avc: denied { read } for pid=26404 comm="msgr-worker-2" path="pipe:[132125]" dev="pipefs" ino=132125 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068962.297:9016): avc: denied { getattr } for pid=35450 comm="node_exporter" name="/" dev="tmpfs" ino=12351 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069014.524:9193): avc: denied { search } for pid=26785 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068783.823:8099): avc: denied { search } for pid=26380 comm="conmon" name="journal" dev="tmpfs" ino=13382 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068694.580:7663): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068847.054:8336): avc: denied { use } for pid=26404 comm="fn_monstore" path="pipe:[129746]" dev="pipefs" ino=129746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068932.303:8813): avc: denied { search } for pid=35450 comm="node_exporter" name="host" dev="sda1" ino=1839635 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c767 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068866.053:8519): avc: denied { read } for pid=26404 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068950.225:8924): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068682.295:7558): avc: denied { search } for pid=35450 comm="node_exporter" name="7" dev="proc" ino=165324 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068932.296:8800): avc: denied { read } for pid=35450 comm="node_exporter" name="eno1" dev="sysfs" ino=34342 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069013.319:9175): avc: denied { append } for pid=56529 comm="log" path="/var/log/ceph/ceph-osd.3.log" dev="sda1" ino=395844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068622.298:7352): avc: denied { search } for pid=35450 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068603.523:7242): avc: denied { write } for pid=26404 comm="fn_monstore" path="pipe:[129746]" dev="pipefs" ino=129746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068540.086:6918): avc: denied { setopt } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068931.375:8752): avc: denied { sendto } for pid=26380 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069014.199:9187): avc: denied { search } for pid=26380 comm="conmon" name="systemd" dev="tmpfs" ino=12359 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068595.865:7083): avc: denied { write } for pid=56529 comm="msgr-worker-2" laddr=172.21.15.45 lport=6832 faddr=172.21.15.107 fport=52622 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069037.225:9395): avc: denied { read } for pid=43672 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068930.509:8734): avc: denied { read } for pid=42172 comm="msgr-worker-2" path="socket:[279264]" dev="sockfs" ino=279264 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069032.297:9359): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="overlay" ino=1837665 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c767 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068765.097:7909): avc: denied { read } for pid=26404 comm="msgr-worker-2" path="socket:[169612]" dev="sockfs" ino=169612 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068772.296:8005): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=172379 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068772.296:8005): avc: denied { read } for pid=35450 comm="node_exporter" name="fd" dev="proc" ino=172379 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069031.827:9329): avc: denied { read } for pid=51635 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068542.300:6952): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=48080 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068551.736:6954): avc: denied { open } for pid=84337 comm="pgrep" path="/proc/26380/status" dev="proc" ino=131429 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069016.082:9220): avc: denied { getattr } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068706.585:7735): avc: denied { open } for pid=26380 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069032.623:9367): avc: denied { getattr } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068508.003:6680): avc: denied { signal } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068512.297:6749): avc: denied { read } for pid=35450 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068706.585:7733): avc: denied { use } for pid=26404 comm="fn_monstore" path="pipe:[129746]" dev="pipefs" ino=129746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068787.829:8115): avc: denied { write } for pid=26380 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068595.880:7088): avc: denied { search } for pid=56529 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c95,c734 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068932.096:8761): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="overlay" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068679.825:7501): avc: denied { append } for pid=26785 comm="log" path="/var/log/ceph/ceph-mgr.smithi045.orzrqd.log" dev="sda1" ino=395817 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068602.296:7215): avc: denied { read } for pid=35450 comm="node_exporter" name="mounts" dev="proc" ino=172388 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068955.388:8971): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="tmpfs" ino=12350 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068537.938:6896): avc: denied { getattr } for pid=26785 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068791.792:8155): avc: denied { getattr } for pid=94445 comm="pgrep" path="/proc/26404" dev="proc" ino=133126 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068852.295:8439): avc: denied { search } for pid=35450 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068847.054:8336): avc: denied { write } for pid=26404 comm="fn_monstore" path="pipe:[129746]" dev="pipefs" ino=129746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068853.610:8465): avc: denied { getattr } for pid=26785 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068535.955:6868): avc: denied { read } for pid=56529 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068871.295:8546): avc: denied { write } for pid=26404 comm="msgr-worker-1" laddr=172.21.15.45 lport=3300 faddr=172.21.15.107 fport=41124 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068950.087:8910): avc: denied { create } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068706.585:7736): avc: denied { search } for pid=26380 comm="conmon" name="systemd" dev="tmpfs" ino=12359 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068962.299:9027): avc: denied { search } for pid=35450 comm="node_exporter" name="host" dev="sda1" ino=1839635 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c767 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068965.917:9038): avc: denied { setopt } for pid=26785 comm="msgr-worker-0" laddr=172.21.15.45 lport=6800 faddr=172.21.15.45 fport=40708 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068954.593:8965): avc: denied { search } for pid=46311 comm="safe_timer" name="/" dev="overlay" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c235 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068853.350:8459): avc: denied { write } for pid=26404 comm="fn_monstore" path="pipe:[129746]" dev="pipefs" ino=129746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069042.299:9473): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068536.996:6882): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068852.296:8447): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=172388 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068612.297:7258): avc: denied { search } for pid=35450 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068622.296:7340): avc: denied { read } for pid=35450 comm="node_exporter" name="cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068866.178:8521): avc: denied { search } for pid=56529 comm="safe_timer" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c95,c734 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069036.085:9383): avc: denied { search } for pid=26404 comm="safe_timer" name="var" dev="sda1" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c690,c878 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068937.074:8856): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068953.855:8951): avc: denied { write } for pid=26404 comm="msgr-worker-2" laddr=172.21.15.45 lport=3300 faddr=172.21.15.45 fport=45682 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068853.622:8466): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068962.297:9018): avc: denied { search } for pid=35450 comm="node_exporter" name="net" dev="proc" ino=165330 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068965.917:9040): avc: denied { getattr } for pid=26785 comm="msgr-worker-2" laddr=172.21.15.45 lport=6800 faddr=172.21.15.45 fport=40708 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069016.202:9222): avc: denied { write } for pid=26380 comm="conmon" name="socket" dev="tmpfs" ino=13391 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069016.834:9234): avc: denied { search } for pid=56529 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068772.296:8006): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=171422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068622.297:7349): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=172388 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068599.866:7160): avc: denied { append } for pid=46311 comm="log" path="/var/log/ceph/ceph-osd.1.log" dev="sda1" ino=395841 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068621.791:7315): avc: denied { append } for pid=46311 comm="log" path="/var/log/ceph/ceph-osd.1.log" dev="sda1" ino=395841 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068860.086:8482): avc: denied { connect } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069042.298:9466): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=171422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068847.586:8348): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="overlay" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068848.225:8376): avc: denied { open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/host-details.json" dev="overlay" ino=1444463 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068596.288:7113): avc: denied { search } for pid=26785 comm="safe_timer" name="/" dev="overlay" ino=1442290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068598.312:7149): avc: denied { open } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068702.296:7695): avc: denied { open } for pid=35450 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=20785 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068506.992:6668): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="tmpfs" ino=12350 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068880.086:8614): avc: denied { create } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068617.010:7275): avc: denied { write } for pid=26380 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068932.225:8768): avc: denied { read } for pid=43672 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068853.350:8459): avc: denied { use } for pid=26404 comm="fn_monstore" path="pipe:[129746]" dev="pipefs" ino=129746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068869.719:8532): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068848.224:8370): avc: denied { search } for pid=43672 comm="grafana-server" name="etc" dev="sda1" ino=1966099 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069032.296:9344): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069014.537:9196): avc: denied { getattr } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068767.226:7957): avc: denied { read } for pid=43672 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068803.328:8203): avc: denied { write } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db-journal" dev="overlay" ino=1966086 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068515.988:6800): avc: denied { open } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068522.297:6812): avc: denied { search } for pid=35450 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068595.866:7086): avc: denied { write } for pid=75707 comm="ceph_timer" path="pipe:[275880]" dev="pipefs" ino=275880 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068512.297:6759): avc: denied { read } for pid=35450 comm="node_exporter" name="file-nr" dev="proc" ino=173267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068719.873:7795): avc: denied { getattr } for pid=44429 comm="prometheus" path="/prometheus/queries.active" dev="dm-4" ino=158 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068872.296:8586): avc: denied { read } for pid=35450 comm="node_exporter" name="file-nr" dev="proc" ino=173267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068611.750:7247): avc: denied { read } for pid=87621 comm="pgrep" name="status" dev="proc" ino=131429 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068782.295:8076): avc: denied { open } for pid=35450 comm="node_exporter" path="/sys/class/net" dev="sysfs" ino=20806 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068782.296:8085): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068790.086:8142): avc: denied { search } for pid=44429 comm="prometheus" name="/" dev="overlay" ino=1966143 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068792.296:8178): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068852.295:8439): avc: denied { search } for pid=35450 comm="node_exporter" name="net" dev="proc" ino=165330 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068956.071:8978): avc: denied { read } for pid=26404 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068621.239:7308): avc: denied { search } for pid=42172 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068623.224:7369): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/etc" dev="sda1" ino=1966099 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068787.828:8114): avc: denied { open } for pid=26380 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068803.390:8204): avc: denied { remove_name } for pid=43672 comm="grafana-server" name="grafana.db-journal" dev="sda1" ino=1966086 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068616.005:7269): avc: denied { search } for pid=26404 comm="safe_timer" name="/" dev="overlay" ino=1442271 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c690,c878 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068770.087:7966): avc: denied { signal } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068700.588:7678): avc: denied { read } for pid=26380 comm="conmon" path="pipe:[129746]" dev="pipefs" ino=129746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068782.297:8090): avc: denied { search } for pid=35450 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616068872.296:8579): avc: denied { read } for pid=35450 comm="node_exporter" name="net" dev="sysfs" ino=20806 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068950.122:8918): avc: denied { getattr } for pid=26785 comm="mgr-fin" path="/usr/share/zoneinfo/UTC" dev="sda1" ino=1181438 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068542.296:6927): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="overlay" ino=1837665 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c767 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068798.083:8185): avc: denied { search } for pid=42172 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068853.350:8461): avc: denied { write } for pid=26380 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069022.296:9293): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068850.086:8389): avc: denied { getattr } for pid=44429 comm="prometheus" laddr=172.21.15.45 lport=39121 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068707.225:7749): avc: denied { getattr } for pid=43672 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068617.224:7280): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068682.296:7560): avc: denied { search } for pid=35450 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068598.300:7147): avc: denied { open } for pid=26785 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068616.398:7272): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068772.296:8006): avc: denied { search } for pid=35450 comm="node_exporter" name="kernel" dev="proc" ino=174118 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068767.225:7955): avc: denied { read } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069038.648:9424): avc: denied { search } for pid=26785 comm="safe_timer" name="/" dev="overlay" ino=1442290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068682.297:7573): avc: denied { search } for pid=35450 comm="node_exporter" name="fs" dev="proc" ino=173266 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068682.295:7558): avc: denied { read } for pid=35450 comm="node_exporter" name="stat" dev="proc" ino=172378 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068852.295:8434): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=172379 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069022.573:9322): avc: denied { search } for pid=26785 comm="safe_timer" name="libpod-722053c3dca6bf5448f2339bb00c594495867f94e3a343d72524ebd087422426.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068622.296:7347): avc: denied { search } for pid=35450 comm="node_exporter" name="fs" dev="proc" ino=173266 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068602.296:7228): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069018.561:9257): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="sda1" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069018.799:9258): avc: denied { search } for pid=51635 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c1,c200 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068617.010:7275): avc: denied { open } for pid=26380 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068512.225:6733): avc: denied { read } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068515.501:6797): avc: denied { read } for pid=26380 comm="conmon" path="pipe:[129746]" dev="pipefs" ino=129746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068596.353:7118): avc: denied { search } for pid=51635 comm="safe_timer" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c1,c200 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068765.111:7914): avc: denied { search } for pid=26785 comm="mgr-fin" name="usr" dev="sda1" ino=658316 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068851.051:8395): avc: denied { getattr } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068782.295:8073): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/7" dev="proc" ino=165324 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068535.990:6870): avc: denied { search } for pid=26404 comm="safe_timer" name="mon.smithi045" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068772.296:8018): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/7/net/sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068596.002:7092): avc: denied { getattr } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068681.017:7536): avc: denied { getattr } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068862.295:8493): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="overlay" ino=1837665 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c767 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068680.224:7515): avc: denied { getattr } for pid=43672 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068681.016:7534): avc: denied { search } for pid=26404 comm="safe_timer" name="/" dev="overlay" ino=1442271 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c690,c878 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068537.950:6897): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068680.708:7531): avc: denied { search } for pid=26785 comm="safe_timer" name="libpod-722053c3dca6bf5448f2339bb00c594495867f94e3a343d72524ebd087422426.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068514.196:6786): avc: denied { search } for pid=43672 comm="grafana-server" name="diff" dev="sda1" ino=1966093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068788.003:8120): avc: denied { append } for pid=44429 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068539.225:6909): avc: denied { read } for pid=43672 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068512.297:6758): avc: denied { getattr } for pid=35450 comm="node_exporter" name="/" dev="tmpfs" ino=12351 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068792.295:8158): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068602.296:7223): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068506.226:6651): avc: denied { read } for pid=43672 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069021.083:9284): avc: denied { search } for pid=26404 comm="safe_timer" name="mon.smithi045" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068802.295:8197): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068520.087:6804): avc: denied { search } for pid=44429 comm="prometheus" name="/" dev="overlay" ino=1966143 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068771.164:7997): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069036.982:9388): avc: denied { accept } for pid=26785 comm="msgr-worker-0" lport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069022.296:9295): avc: denied { search } for pid=35450 comm="node_exporter" name="7" dev="proc" ino=165324 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068622.295:7334): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068870.086:8542): avc: denied { write } for pid=44429 comm="prometheus" path="socket:[365084]" dev="sockfs" ino=365084 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068932.224:8763): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068765.800:7921): avc: denied { use } for pid=26404 comm="fn_monstore" path="pipe:[129746]" dev="pipefs" ino=129746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068792.296:8168): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068798.298:8191): avc: denied { read } for pid=26404 comm="rocksdb:high0" name="000022.sst" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068962.297:9013): avc: denied { read } for pid=35450 comm="node_exporter" name="cpufreq" dev="sysfs" ino=29977 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068512.296:6737): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068680.355:7523): avc: denied { write } for pid=26404 comm="fn_monstore" path="pipe:[129746]" dev="pipefs" ino=129746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069022.298:9319): avc: denied { search } for pid=35450 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616069042.296:9457): avc: denied { search } for pid=35450 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068512.297:6755): avc: denied { read } for pid=35450 comm="node_exporter" name="eno1" dev="sysfs" ino=34342 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068972.296:9052): avc: denied { search } for pid=35450 comm="node_exporter" name="1" dev="proc" ino=163757 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068936.006:8844): avc: denied { read } for pid=56529 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068866.053:8518): avc: denied { search } for pid=26404 comm="safe_timer" name="var" dev="sda1" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c690,c878 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068540.991:6925): avc: denied { search } for pid=26404 comm="safe_timer" name="mon.smithi045" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068690.086:7638): avc: denied { getattr } for pid=44429 comm="prometheus" laddr=172.21.15.45 lport=43767 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068512.297:6748): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/7/net/sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068971.889:9048): avc: denied { read } for pid=26404 comm="msgr-worker-1" path="socket:[188603]" dev="sockfs" ino=188603 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069032.623:9367): avc: denied { getattr } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069021.083:9283): avc: denied { getattr } for pid=26404 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068771.808:7999): avc: denied { open } for pid=26380 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068531.914:6822): avc: denied { open } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068692.297:7649): avc: denied { search } for pid=35450 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068772.296:8006): avc: denied { search } for pid=35450 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068535.532:6866): avc: denied { signal } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068680.086:7504): avc: denied { create } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068792.295:8158): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="overlay" ino=1837665 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c767 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068535.990:6870): avc: denied { read } for pid=26404 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069022.296:9305): avc: denied { read } for pid=35450 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068865.492:8507): avc: denied { write } for pid=42172 comm="osd_srv_heartbt" path="pipe:[187397]" dev="pipefs" ino=187397 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068712.298:7790): avc: denied { search } for pid=35450 comm="node_exporter" name="user" dev="tmpfs" ino=13457 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068601.519:7199): avc: denied { read } for pid=26404 comm="msgr-worker-2" path="socket:[169612]" dev="sockfs" ino=169612 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069030.087:9326): avc: denied { search } for pid=44429 comm="prometheus" name="etc" dev="sda1" ino=1966159 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068872.224:8567): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068596.003:7094): avc: denied { open } for pid=26404 comm="rstore_compact" path="/var/lib/ceph/mon/ceph-smithi045/store.db/000015.log" dev="dm-4" ino=137 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068536.996:6883): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="tmpfs" ino=12350 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068803.390:8204): avc: denied { unlink } for pid=43672 comm="grafana-server" name="grafana.db-journal" dev="overlay" ino=1966086 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068622.296:7346): avc: denied { search } for pid=35450 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068787.827:8111): avc: denied { write } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068512.297:6750): avc: denied { open } for pid=35450 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=48268 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068512.225:6735): avc: denied { read open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068611.750:7249): avc: denied { read } for pid=87621 comm="pgrep" name="status" dev="proc" ino=133163 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068532.299:6835): avc: denied { search } for pid=35450 comm="node_exporter" name="user" dev="tmpfs" ino=13457 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068852.080:8425): avc: denied { open } for pid=56529 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068612.298:7260): avc: denied { search } for pid=35450 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068931.375:8751): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068690.086:7636): avc: denied { setopt } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068506.226:6652): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="sda1" ino=1444461 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068602.225:7208): avc: denied { open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068537.501:6889): avc: denied { search } for pid=46311 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c235 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068621.983:7320): avc: denied { read } for pid=56529 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068846.438:8334): avc: denied { read } for pid=46311 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068849.978:8383): avc: denied { read } for pid=26785 comm="msgr-worker-0" path="socket:[210809]" dev="sockfs" ino=210809 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068971.834:9044): avc: denied { read } for pid=101288 comm="pgrep" name="status" dev="proc" ino=133163 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068779.201:8036): avc: denied { search } for pid=26785 comm="safe_timer" name="usr" dev="sda1" ino=658316 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068852.296:8447): avc: denied { search } for pid=35450 comm="node_exporter" name="1" dev="proc" ino=163757 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068858.292:8478): avc: denied { getattr } for pid=26785 comm="mgr-fin" path="/usr/lib64/python3.6" dev="overlay" ino=919830 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068680.355:7526): avc: denied { write } for pid=26380 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068782.296:8080): avc: denied { search } for pid=35450 comm="node_exporter" name="net" dev="proc" ino=165330 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068972.327:9060): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="overlay" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069014.195:9181): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068847.586:8348): avc: denied { getattr } for pid=26785 comm="safe_timer" name="os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068692.299:7658): avc: denied { search } for pid=35450 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616069042.296:9456): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068956.071:8978): avc: denied { open } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068792.295:8161): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=172379 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069038.660:9427): avc: denied { open } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068510.087:6717): avc: denied { read } for pid=44429 comm="prometheus" path="socket:[297987]" dev="sockfs" ino=297987 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068789.249:8140): avc: denied { search } for pid=26785 comm="safe_timer" name="etc" dev="sda1" ino=1442299 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069032.091:9338): avc: denied { use } for pid=26404 comm="fn_monstore" path="pipe:[129746]" dev="pipefs" ino=129746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069014.198:9183): avc: denied { search } for pid=51635 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c1,c200 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068954.594:8966): avc: denied { open } for pid=46311 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068596.224:7105): avc: denied { search } for pid=43672 comm="grafana-server" name="/" dev="overlay" ino=1966093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068788.225:8131): avc: denied { read } for pid=43672 comm="grafana-server" name="radosgw-sync-overview.json" dev="sda1" ino=1444471 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068788.224:8124): avc: denied { search } for pid=43672 comm="grafana-server" name="dashboards" dev="sda1" ino=1444459 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068872.308:8601): avc: denied { append } for pid=44429 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069040.225:9444): avc: denied { read open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068779.225:8038): avc: denied { read open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068719.873:7796): avc: denied { getattr } for pid=44429 comm="prometheus" path="/prometheus/wal" dev="dm-4" ino=8388752 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068871.572:8559): avc: denied { search } for pid=51635 comm="safe_timer" name="diff" dev="sda1" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068702.296:7693): avc: denied { search } for pid=35450 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068854.195:8469): avc: denied { read } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068962.297:9014): avc: denied { open } for pid=35450 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=30065 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068951.383:8929): avc: denied { write } for pid=26380 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068712.298:7787): avc: denied { read } for pid=35450 comm="node_exporter" name="dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069038.004:9413): avc: denied { append } for pid=44429 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068870.086:8541): avc: denied { getattr } for pid=44429 comm="prometheus" laddr=172.21.15.45 lport=36996 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069016.226:9225): avc: denied { read open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068622.296:7346): avc: denied { search } for pid=35450 comm="node_exporter" name="net" dev="proc" ino=165330 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068932.301:8803): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068872.295:8577): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=172379 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068621.006:7303): avc: denied { getattr } for pid=26404 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068692.296:7644): avc: denied { read } for pid=35450 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068766.032:7932): avc: denied { getattr } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068522.296:6807): avc: denied { search } for pid=35450 comm="node_exporter" name="7" dev="proc" ino=165324 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068510.087:6711): avc: denied { create } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068531.498:6818): avc: denied { write } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db/000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068680.225:7520): avc: denied { read open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068852.296:8447): avc: denied { read } for pid=35450 comm="node_exporter" name="mounts" dev="proc" ino=172388 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068772.299:8023): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="tmpfs" ino=12350 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068537.236:6888): avc: denied { open } for pid=51635 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069038.184:9416): avc: denied { read } for pid=26380 comm="conmon" path="pipe:[129746]" dev="pipefs" ino=129746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068783.823:8099): avc: denied { search } for pid=26380 comm="conmon" name="systemd" dev="tmpfs" ino=12359 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069040.225:9440): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/etc" dev="sda1" ino=1966099 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068788.224:8124): avc: denied { search } for pid=43672 comm="grafana-server" name="/" dev="overlay" ino=1966093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069018.142:9238): avc: denied { append } for pid=26404 comm="log" path="/var/log/ceph/ceph-mon.smithi045.log" dev="sda1" ino=395815 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069038.184:9417): avc: denied { write } for pid=26380 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068855.353:8474): avc: denied { write } for pid=26380 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068863.224:8502): avc: denied { read } for pid=43672 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068872.303:8599): avc: denied { read } for pid=35450 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068602.324:7240): avc: denied { search } for pid=26785 comm="safe_timer" name="etc" dev="sda1" ino=1442299 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068510.987:6720): avc: denied { search } for pid=26404 comm="safe_timer" name="mon.smithi045" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068789.237:8139): avc: denied { getattr } for pid=26785 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068932.303:8812): avc: denied { search } for pid=35450 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616068803.771:8211): avc: denied { read } for pid=43672 comm="grafana-server" path="socket:[352942]" dev="sockfs" ino=352942 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068680.355:7525): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068532.295:6824): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="overlay" ino=1837665 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c767 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068510.087:6716): avc: denied { write } for pid=44429 comm="prometheus" path="socket:[295652]" dev="sockfs" ino=295652 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068782.297:8091): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068851.610:8404): avc: denied { search } for pid=26785 comm="safe_timer" name="etc" dev="sda1" ino=1442299 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068872.296:8589): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=171422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068712.297:7775): avc: denied { open } for pid=35450 comm="node_exporter" path="/sys/class/hwmon" dev="sysfs" ino=20770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068952.296:8932): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=172378 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069042.299:9474): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="tmpfs" ino=12350 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068602.224:7206): avc: denied { search } for pid=43672 comm="grafana-server" name="dashboards" dev="sda1" ino=1444459 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068846.438:8334): avc: denied { open } for pid=46311 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068602.318:7236): avc: denied { write } for pid=44429 comm="prometheus" path="pipe:[192927]" dev="pipefs" ino=192927 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068510.987:6721): avc: denied { getattr } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068765.111:7914): avc: denied { getattr } for pid=26785 comm="mgr-fin" name="UTC" dev="sda1" ino=1181438 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068692.297:7651): avc: denied { search } for pid=35450 comm="node_exporter" name="net" dev="proc" ino=165330 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069019.225:9259): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068622.298:7357): avc: denied { search } for pid=35450 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068792.297:8181): avc: denied { search } for pid=35450 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068537.983:6900): avc: denied { search } for pid=56529 comm="safe_timer" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c95,c734 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068965.917:9036): avc: denied { read } for pid=26785 comm="msgr-worker-1" path="socket:[387562]" dev="sockfs" ino=387562 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068772.299:8020): avc: denied { search } for pid=35450 comm="node_exporter" name="fs" dev="proc" ino=173266 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068766.032:7929): avc: denied { search } for pid=26404 comm="safe_timer" name="/" dev="overlay" ino=1442271 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c690,c878 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068596.224:7106): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/etc" dev="sda1" ino=1966099 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069031.850:9333): avc: denied { getattr } for pid=104464 comm="pgrep" path="/proc/26404" dev="proc" ino=133126 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068706.672:7741): avc: denied { search } for pid=56529 comm="safe_timer" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c95,c734 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068847.052:8335): avc: denied { write } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068536.991:6875): avc: denied { write } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db/000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068602.225:7208): avc: denied { read open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068621.006:7304): avc: denied { read } for pid=26404 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068510.087:6714): avc: denied { connect } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068684.722:7594): avc: denied { getattr } for pid=26785 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068780.087:8052): avc: denied { read } for pid=44429 comm="prometheus" path="socket:[349899]" dev="sockfs" ino=349899 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069021.148:9286): avc: denied { search } for pid=56529 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068512.297:6759): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=173267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068800.224:8193): avc: denied { lock } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069037.225:9393): avc: denied { search } for pid=43672 comm="grafana-server" name="/" dev="overlay" ino=1966093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068965.917:9031): avc: denied { connect } for pid=26785 comm="msgr-worker-0" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069038.660:9427): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068803.328:8203): avc: denied { write } for pid=43672 comm="grafana-server" name="grafana" dev="sda1" ino=1966137 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069044.266:9478): avc: denied { shutdown } for pid=26785 comm="msgr-worker-0" laddr=172.21.15.45 lport=6800 faddr=172.21.15.107 fport=46776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068554.623:6961): avc: denied { write } for pid=26761 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068782.003:8062): avc: denied { read } for pid=56529 comm="msgr-worker-2" path="pipe:[222631]" dev="pipefs" ino=222631 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068702.296:7694): avc: denied { search } for pid=35450 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068782.224:8070): avc: denied { search } for pid=43672 comm="grafana-server" name="/" dev="overlay" ino=1966093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068601.520:7200): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068872.296:8591): avc: denied { read } for pid=35450 comm="node_exporter" name="mounts" dev="proc" ino=172388 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068706.846:7746): avc: denied { open } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068509.783:6708): avc: denied { getattr } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068601.520:7201): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="tmpfs" ino=12350 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068706.833:7744): avc: denied { read } for pid=26785 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068869.350:8531): avc: denied { write } for pid=26380 comm="conmon" name="socket" dev="tmpfs" ino=13391 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068597.012:7122): avc: denied { write } for pid=26380 comm="conmon" name="socket" dev="tmpfs" ino=13391 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068932.303:8811): avc: denied { search } for pid=35450 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068682.295:7558): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=172378 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068596.288:7114): avc: denied { search } for pid=26785 comm="safe_timer" name="libpod-722053c3dca6bf5448f2339bb00c594495867f94e3a343d72524ebd087422426.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068872.224:8569): avc: denied { lock } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068938.225:8864): avc: denied { read open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068940.086:8876): avc: denied { write } for pid=44429 comm="prometheus" path="socket:[379902]" dev="sockfs" ino=379902 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068596.225:7111): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="sda1" ino=1444461 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068788.128:8123): avc: denied { search } for pid=56529 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068954.231:8961): avc: denied { search } for pid=26785 comm="safe_timer" name="etc" dev="sda1" ino=1442299 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068956.226:8984): avc: denied { open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/host-details.json" dev="overlay" ino=1444463 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068942.423:8898): avc: denied { search } for pid=56529 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c95,c734 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069035.786:9382): avc: denied { search } for pid=51635 comm="safe_timer" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c1,c200 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068849.978:8382): avc: denied { write } for pid=51635 comm="msgr-worker-0" laddr=172.21.15.45 lport=39340 faddr=172.21.15.45 fport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068950.088:8917): avc: denied { append } for pid=44429 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068930.509:8735): avc: denied { append } for pid=42172 comm="log" path="/var/log/ceph/ceph-osd.0.log" dev="sda1" ino=395837 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068942.295:8878): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="overlay" ino=1837665 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c767 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068617.224:7279): avc: denied { read } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068932.295:8787): avc: denied { signal } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068622.011:7325): avc: denied { write } for pid=26380 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068537.950:6897): avc: denied { search } for pid=26785 comm="safe_timer" name="etc" dev="sda1" ino=1442299 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068622.422:7366): avc: denied { getattr } for pid=26785 comm="safe_timer" name="os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068712.297:7775): avc: denied { read } for pid=35450 comm="node_exporter" name="hwmon" dev="sysfs" ino=20770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068772.296:8006): avc: denied { read } for pid=35450 comm="node_exporter" name="entropy_avail" dev="proc" ino=171422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068706.846:7746): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069014.195:9178): avc: denied { lock } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068781.034:8054): avc: denied { search } for pid=26404 comm="safe_timer" name="mon.smithi045" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069015.542:9217): avc: denied { append } for pid=44429 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068782.296:8084): avc: denied { search } for pid=35450 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069031.850:9331): avc: denied { getattr } for pid=104464 comm="pgrep" path="/proc/26380" dev="proc" ino=131425 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068851.598:8403): avc: denied { search } for pid=26785 comm="safe_timer" name="libpod-722053c3dca6bf5448f2339bb00c594495867f94e3a343d72524ebd087422426.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069014.195:9179): avc: denied { search } for pid=43672 comm="grafana-server" name="/" dev="overlay" ino=1966093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068612.082:7253): avc: denied { search } for pid=56529 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c95,c734 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068972.422:9061): avc: denied { read } for pid=42172 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068871.352:8552): avc: denied { read } for pid=26380 comm="conmon" path="pipe:[129746]" dev="pipefs" ino=129746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069018.204:9239): avc: denied { write } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068600.086:7170): avc: denied { read } for pid=44429 comm="prometheus" path="socket:[316110]" dev="sockfs" ino=316110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068622.295:7336): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=172378 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069038.182:9414): avc: denied { write } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068630.087:7387): avc: denied { write } for pid=44429 comm="prometheus" path="socket:[321733]" dev="sockfs" ino=321733 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068851.347:8401): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068962.297:9020): avc: denied { read } for pid=35450 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069036.086:9385): avc: denied { getattr } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068598.312:7149): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068853.350:8463): avc: denied { sendto } for pid=26380 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068682.296:7570): avc: denied { read } for pid=35450 comm="node_exporter" name="addr_assign_type" dev="sysfs" ino=34350 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068556.046:6966): avc: denied { read } for pid=26785 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068953.926:8953): avc: denied { open } for pid=56529 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068622.296:7343): avc: denied { read } for pid=35450 comm="node_exporter" name="cpufreq" dev="sysfs" ino=29977 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068962.296:9003): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/7" dev="proc" ino=165324 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068507.759:6674): avc: denied { open } for pid=26785 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068871.719:8563): avc: denied { getattr } for pid=26785 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068522.299:6814): avc: denied { search } for pid=35450 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068611.750:7247): avc: denied { open } for pid=87621 comm="pgrep" path="/proc/26380/status" dev="proc" ino=131429 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068536.996:6880): avc: denied { use } for pid=26404 comm="fn_monstore" path="pipe:[129746]" dev="pipefs" ino=129746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068851.051:8394): avc: denied { read } for pid=26404 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068542.297:6929): avc: denied { read } for pid=35450 comm="node_exporter" name="stat" dev="proc" ino=172378 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068847.879:8350): avc: denied { search } for pid=51635 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c1,c200 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068623.225:7373): avc: denied { open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068689.224:7631): avc: denied { search } for pid=43672 comm="grafana-server" name="etc" dev="sda1" ino=1966099 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068621.006:7304): avc: denied { search } for pid=26404 comm="safe_timer" name="mon.smithi045" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068865.563:8512): avc: denied { sendto } for pid=26380 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069032.091:9340): avc: denied { open } for pid=26380 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068611.750:7247): avc: denied { search } for pid=87621 comm="pgrep" name="26380" dev="proc" ino=131425 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068772.296:8017): avc: denied { open } for pid=35450 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/net/eno1/addr_assign_type" dev="sysfs" ino=34350 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068522.296:6810): avc: denied { open } for pid=35450 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=20785 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068931.375:8750): avc: denied { read } for pid=26380 comm="conmon" path="pipe:[129746]" dev="pipefs" ino=129746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069032.298:9361): avc: denied { search } for pid=35450 comm="node_exporter" name="host" dev="sda1" ino=1839635 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c767 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069013.332:9177): avc: denied { read } for pid=56529 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068847.054:8339): avc: denied { write } for pid=26380 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069022.298:9315): avc: denied { search } for pid=35450 comm="node_exporter" name="fs" dev="proc" ino=173266 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068880.086:8620): avc: denied { read } for pid=44429 comm="prometheus" path="socket:[372981]" dev="sockfs" ino=372981 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068932.301:8807): avc: denied { read } for pid=35450 comm="node_exporter" name="mounts" dev="proc" ino=172388 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068852.295:8432): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/7" dev="proc" ino=165324 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068682.296:7564): avc: denied { read } for pid=35450 comm="node_exporter" name="mounts" dev="proc" ino=172388 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068932.084:8759): avc: denied { search } for pid=26785 comm="safe_timer" name="libpod-722053c3dca6bf5448f2339bb00c594495867f94e3a343d72524ebd087422426.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068852.295:8433): avc: denied { read } for pid=35450 comm="node_exporter" name="stat" dev="proc" ino=172378 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068871.352:8553): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068551.736:6956): avc: denied { open } for pid=84337 comm="pgrep" path="/proc/26404/status" dev="proc" ino=133163 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068872.225:8573): avc: denied { open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-overview.json" dev="overlay" ino=1444470 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068540.991:6924): avc: denied { getattr } for pid=26404 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068512.296:6740): avc: denied { read } for pid=35450 comm="node_exporter" name="stat" dev="proc" ino=4026532033 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068791.791:8154): avc: denied { read } for pid=94445 comm="pgrep" name="status" dev="proc" ino=131429 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068772.296:8018): avc: denied { read } for pid=35450 comm="node_exporter" name="sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068510.987:6720): avc: denied { read } for pid=26404 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068692.297:7649): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=173267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068962.296:9005): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=172379 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068787.745:8108): avc: denied { read } for pid=78707 comm="msgr-worker-0" path="pipe:[285709]" dev="pipefs" ino=285709 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069032.623:9366): avc: denied { open } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068956.226:8983): avc: denied { read open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068512.297:6744): avc: denied { read } for pid=35450 comm="node_exporter" name="entropy_avail" dev="proc" ino=171422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068931.375:8749): avc: denied { write } for pid=26404 comm="fn_monstore" path="pipe:[129746]" dev="pipefs" ino=129746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068765.111:7914): avc: denied { search } for pid=26785 comm="mgr-fin" name="diff" dev="sda1" ino=1442290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068680.086:7503): avc: denied { search } for pid=44429 comm="prometheus" name="etc" dev="sda1" ino=1966159 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068932.681:8815): avc: denied { append } for pid=42172 comm="log" path="/var/log/ceph/ceph-osd.0.log" dev="sda1" ino=395837 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068783.212:8095): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="overlay" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068622.271:7332): avc: denied { open } for pid=42172 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068847.221:8344): avc: denied { search } for pid=42172 comm="safe_timer" name="/" dev="overlay" ino=1966114 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c165,c594 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068765.800:7924): avc: denied { sendto } for pid=26380 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068680.355:7523): avc: denied { use } for pid=26404 comm="fn_monstore" path="pipe:[129746]" dev="pipefs" ino=129746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068602.296:7219): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069038.184:9418): avc: denied { search } for pid=26380 comm="conmon" name="journal" dev="tmpfs" ino=13382 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069040.225:9443): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068876.055:8609): avc: denied { dac_read_search } for pid=26404 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068706.846:7746): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="sda1" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068932.225:8768): avc: denied { open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069042.299:9472): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068798.285:8189): avc: denied { open } for pid=26404 comm="rstore_compact" path="/var/lib/ceph/mon/ceph-smithi045/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068602.225:7208): avc: denied { read } for pid=43672 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068972.296:9051): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=20785 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068602.296:7229): avc: denied { search } for pid=35450 comm="node_exporter" name="user" dev="tmpfs" ino=13457 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068622.298:7354): avc: denied { getattr } for pid=35450 comm="node_exporter" name="/" dev="tmpfs" ino=12351 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068702.296:7693): avc: denied { read } for pid=35450 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068616.005:7269): avc: denied { dac_read_search } for pid=26404 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068685.532:7614): avc: denied { signal } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068692.297:7648): avc: denied { open } for pid=35450 comm="node_exporter" path="/sys/fs/xfs/dm-4/stats/stats" dev="sysfs" ino=50083 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068802.296:8200): avc: denied { read } for pid=35450 comm="node_exporter" name="file-nr" dev="proc" ino=173267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068962.297:9006): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/7/net/dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068514.196:6786): avc: denied { search } for pid=43672 comm="grafana-server" name="var" dev="sda1" ino=1966089 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068781.034:8055): avc: denied { getattr } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068680.355:7525): avc: denied { write } for pid=26380 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068682.295:7559): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=172379 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068950.087:8916): avc: denied { read } for pid=44429 comm="prometheus" path="socket:[383570]" dev="sockfs" ino=383570 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068862.295:8494): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068973.390:9063): avc: denied { read } for pid=26380 comm="conmon" path="pipe:[129746]" dev="pipefs" ino=129746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069044.266:9479): avc: denied { accept } for pid=26785 comm="msgr-worker-0" lport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068512.297:6745): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=20785 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068679.810:7498): avc: denied { read } for pid=46311 comm="msgr-worker-1" path="pipe:[194125]" dev="pipefs" ino=194125 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069022.090:9288): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069015.411:9216): avc: denied { search } for pid=42172 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966114 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c165,c594 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068702.297:7701): avc: denied { search } for pid=35450 comm="node_exporter" name="user" dev="tmpfs" ino=13457 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069037.614:9398): avc: denied { read } for pid=42172 comm="msgr-worker-2" path="pipe:[187397]" dev="pipefs" ino=187397 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068871.351:8547): avc: denied { append } for pid=26404 comm="log" path="/var/log/ceph/ceph-mon.smithi045.log" dev="sda1" ino=395815 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068510.088:6718): avc: denied { append } for pid=44429 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068932.301:8805): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068692.297:7653): avc: denied { read } for pid=35450 comm="node_exporter" name="entropy_avail" dev="proc" ino=171422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068512.296:6740): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/stat" dev="proc" ino=4026532033 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068512.296:6739): avc: denied { search } for pid=35450 comm="node_exporter" name="7" dev="proc" ino=165324 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068767.225:7953): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/etc" dev="sda1" ino=1966099 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068684.734:7595): avc: denied { open } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068880.086:8615): avc: denied { create } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068540.086:6914): avc: denied { search } for pid=44429 comm="prometheus" name="etc" dev="sda1" ino=1966159 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068706.022:7731): avc: denied { write } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068542.297:6935): avc: denied { read } for pid=35450 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068960.087:8997): avc: denied { setopt } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068613.017:7261): avc: denied { open } for pid=56529 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068683.224:7587): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069022.298:9317): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="tmpfs" ino=12350 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068852.299:8453): avc: denied { getattr } for pid=35450 comm="node_exporter" name="/" dev="tmpfs" ino=12348 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068932.224:8766): avc: denied { read } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068712.297:7784): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=172388 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068507.771:6676): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="overlay" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068682.296:7567): avc: denied { read } for pid=35450 comm="node_exporter" name="net" dev="sysfs" ino=20806 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068706.021:7727): avc: denied { search } for pid=26404 comm="safe_timer" name="var" dev="sda1" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c690,c878 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068955.388:8970): avc: denied { open } for pid=26380 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068865.683:8513): avc: denied { search } for pid=26785 comm="safe_timer" name="/" dev="overlay" ino=1442290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068542.298:6936): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068682.296:7568): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/sys/class/net/ens1f1" dev="sysfs" ino=37772 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068539.224:6907): avc: denied { read } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068509.783:6707): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068772.296:8012): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/sys/class/net/ens1f1" dev="sysfs" ino=37772 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068535.748:6867): avc: denied { search } for pid=42172 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966114 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c165,c594 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068682.295:7559): avc: denied { read } for pid=35450 comm="node_exporter" name="fd" dev="proc" ino=172379 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069024.866:9324): avc: denied { fork } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069042.295:9450): avc: denied { signal } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069865.917:9571): avc: denied { shutdown } for pid=26785 comm="msgr-worker-0" laddr=172.21.15.45 lport=40708 faddr=172.21.15.45 fport=6800 scontext=system_u:system_r:spc_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1', 'type=AVC msg=audit(1616068866.224:8523): avc: denied { search } for pid=43672 comm="grafana-server" name="/" dev="overlay" ino=1966093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069040.087:9438): avc: denied { read } for pid=44429 comm="prometheus" path="socket:[399898]" dev="sockfs" ino=399898 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068772.296:8002): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="overlay" ino=1837665 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c767 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068596.003:7094): avc: denied { add_name } for pid=26404 comm="rstore_compact" name="000015.log" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068610.086:7243): avc: denied { search } for pid=44429 comm="prometheus" name="etc" dev="sda1" ino=1966159 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068510.046:6709): avc: denied { search } for pid=42172 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966114 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c165,c594 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068772.299:8025): avc: denied { search } for pid=35450 comm="node_exporter" name="net" dev="proc" ino=165330 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068955.388:8970): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068765.097:7912): avc: denied { write } for pid=26404 comm="ms_dispatch" path="pipe:[132125]" dev="pipefs" ino=132125 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068514.998:6792): avc: denied { search } for pid=46311 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c137,c235 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068507.971:6679): avc: denied { open } for pid=56529 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068680.224:7519): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068533.503:6854): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="tmpfs" ino=12350 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068602.296:7217): avc: denied { read } for pid=35450 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068872.224:8572): avc: denied { open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068851.806:8406): avc: denied { read } for pid=97651 comm="pgrep" name="status" dev="proc" ino=131429 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068932.301:8807): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=172388 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068765.800:7924): avc: denied { write } for pid=26380 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068626.007:7378): avc: denied { search } for pid=26404 comm="safe_timer" name="mon.smithi045" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068683.224:7585): avc: denied { lock } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069038.184:9418): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="tmpfs" ino=12350 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068940.086:8872): avc: denied { create } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068772.296:8007): avc: denied { read } for pid=35450 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068880.086:8617): avc: denied { connect } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069034.269:9379): avc: denied { search } for pid=56529 comm="safe_timer" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c95,c734 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068630.087:7383): avc: denied { create } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068626.007:7377): avc: denied { dac_read_search } for pid=26404 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068622.296:7339): avc: denied { read } for pid=35450 comm="node_exporter" name="net" dev="sysfs" ino=20806 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068682.296:7564): avc: denied { search } for pid=35450 comm="node_exporter" name="1" dev="proc" ino=163757 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068952.297:8940): avc: denied { read } for pid=35450 comm="node_exporter" name="file-nr" dev="proc" ino=173267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068871.731:8564): avc: denied { getattr } for pid=26785 comm="safe_timer" name="os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068705.728:7725): avc: denied { write } for pid=46311 comm="msgr-worker-0" laddr=172.21.15.45 lport=33754 faddr=172.21.15.45 fport=6806 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068782.297:8091): avc: denied { read } for pid=35450 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068600.086:7169): avc: denied { write } for pid=44429 comm="prometheus" path="socket:[316110]" dev="sockfs" ino=316110 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069013.332:9177): avc: denied { search } for pid=56529 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c95,c734 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068596.224:7110): avc: denied { open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068682.296:7560): avc: denied { read } for pid=35450 comm="node_exporter" name="entropy_avail" dev="proc" ino=171422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068972.296:9055): avc: denied { read } for pid=35450 comm="node_exporter" name="eno1" dev="sysfs" ino=34342 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068680.355:7526): avc: denied { search } for pid=26380 comm="conmon" name="journal" dev="tmpfs" ino=13382 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068620.225:7302): avc: denied { read } for pid=43672 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069016.082:9218): avc: denied { search } for pid=26404 comm="safe_timer" name="var" dev="sda1" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c690,c878 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068942.295:8880): avc: denied { search } for pid=35450 comm="node_exporter" name="7" dev="proc" ino=165324 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069041.086:9447): avc: denied { search } for pid=26404 comm="safe_timer" name="var" dev="sda1" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c690,c878 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069038.660:9427): avc: denied { open } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068621.006:7305): avc: denied { getattr } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069031.850:9332): avc: denied { open } for pid=104464 comm="pgrep" path="/proc/26380/status" dev="proc" ino=131429 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068622.011:7325): avc: denied { search } for pid=26380 comm="conmon" name="systemd" dev="tmpfs" ino=12359 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069044.266:9480): avc: denied { setopt } for pid=26785 comm="msgr-worker-0" laddr=172.21.15.45 lport=6800 faddr=172.21.15.107 fport=47334 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068682.299:7580): avc: denied { search } for pid=35450 comm="node_exporter" name="host" dev="sda1" ino=1839635 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c767 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068506.225:6649): avc: denied { read } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068932.096:8761): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069040.087:9431): avc: denied { search } for pid=44429 comm="prometheus" name="/" dev="overlay" ino=1966143 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068598.003:7146): avc: denied { append } for pid=44429 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068710.087:7763): avc: denied { connect } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068686.579:7626): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="tmpfs" ino=12350 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068712.298:7790): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="tmpfs" ino=12350 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068680.105:7512): avc: denied { search } for pid=26785 comm="mgr-fin" name="/" dev="overlay" ino=1442290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068772.299:8024): avc: denied { search } for pid=35450 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069036.086:9384): avc: denied { open } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068682.299:7579): avc: denied { search } for pid=35450 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616068686.579:7626): avc: denied { write } for pid=26380 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068772.296:8014): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068962.296:9002): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="overlay" ino=1837665 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c767 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068942.296:8881): avc: denied { read } for pid=35450 comm="node_exporter" name="fd" dev="proc" ino=172379 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068542.297:6931): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=20785 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068596.002:7090): avc: denied { search } for pid=26404 comm="safe_timer" name="/" dev="overlay" ino=1442271 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c690,c878 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068932.224:8763): avc: denied { getattr } for pid=43672 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069022.092:9289): avc: denied { write } for pid=26404 comm="fn_monstore" path="pipe:[132125]" dev="pipefs" ino=132125 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068702.297:7699): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=172388 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068542.299:6945): avc: denied { search } for pid=35450 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068772.297:8019): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=48268 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069038.184:9415): avc: denied { write } for pid=26404 comm="fn_monstore" path="pipe:[129746]" dev="pipefs" ino=129746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068596.003:7101): avc: denied { open } for pid=26404 comm="rstore_compact" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068787.237:8103): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068863.224:8501): avc: denied { getattr } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068950.207:8921): avc: denied { open } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068510.987:6720): avc: denied { open } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068602.224:7206): avc: denied { search } for pid=43672 comm="grafana-server" name="etc" dev="sda1" ino=1966099 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068682.296:7571): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=20785 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068971.889:9045): avc: denied { write } for pid=42172 comm="safe_timer" path="pipe:[187396]" dev="pipefs" ino=187396 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068706.833:7743): avc: denied { search } for pid=26785 comm="safe_timer" name="/" dev="overlay" ino=1442290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068533.926:6860): avc: denied { search } for pid=26785 comm="safe_timer" name="etc" dev="sda1" ino=1442299 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068700.087:7674): avc: denied { search } for pid=44429 comm="prometheus" name="diff" dev="sda1" ino=1966143 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068866.053:8518): avc: denied { search } for pid=26404 comm="safe_timer" name="/" dev="overlay" ino=1442271 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c690,c878 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068939.376:8865): avc: denied { sendto } for pid=26380 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068765.800:7923): avc: denied { write } for pid=26380 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068962.299:9025): avc: denied { search } for pid=35450 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616068789.249:8140): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068622.295:7337): avc: denied { read } for pid=35450 comm="node_exporter" name="fd" dev="proc" ino=172379 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068542.298:6941): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=173267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068935.931:8837): avc: denied { read } for pid=42172 comm="msgr-worker-0" path="socket:[274885]" dev="sockfs" ino=274885 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068959.875:8990): avc: denied { search } for pid=44429 comm="prometheus" name="/" dev="overlay" ino=1966143 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c167,c308 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068960.087:8996): avc: denied { setopt } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068622.011:7324): avc: denied { write } for pid=26380 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068702.297:7699): avc: denied { search } for pid=35450 comm="node_exporter" name="1" dev="proc" ino=163757 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068872.224:8572): avc: denied { read } for pid=43672 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068596.224:7108): avc: denied { read } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069014.197:9182): avc: denied { write } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068807.346:8214): avc: denied { read } for pid=26785 comm="safe_timer" name="os-release" dev="sda1" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068616.398:7272): avc: denied { open } for pid=26785 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069022.296:9297): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069018.561:9257): avc: denied { getattr } for pid=26785 comm="safe_timer" name="os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068680.225:7520): avc: denied { read } for pid=43672 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068539.225:6909): avc: denied { read open } for pid=43672 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068702.820:7706): avc: denied { open } for pid=26785 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068702.296:7689): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=172378 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068680.196:7513): avc: denied { open } for pid=46311 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068512.297:6765): avc: denied { read } for pid=35450 comm="node_exporter" name="eno2" dev="sysfs" ino=37022 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069037.836:9410): avc: denied { read } for pid=56529 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068847.574:8346): avc: denied { search } for pid=26785 comm="safe_timer" name="libpod-722053c3dca6bf5448f2339bb00c594495867f94e3a343d72524ebd087422426.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068932.295:8790): avc: denied { open } for pid=35450 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=172378 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068622.297:7348): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068705.728:7726): avc: denied { read } for pid=42172 comm="msgr-worker-0" path="socket:[194524]" dev="sockfs" ino=194524 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068507.759:6674): avc: denied { search } for pid=26785 comm="safe_timer" name="libpod-722053c3dca6bf5448f2339bb00c594495867f94e3a343d72524ebd087422426.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068596.001:7089): avc: denied { write } for pid=26404 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi045/store.db/000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068685.081:7612): avc: denied { append } for pid=26404 comm="log" path="/var/log/ceph/ceph-mon.smithi045.log" dev="sda1" ino=395815 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069032.091:9340): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068765.111:7914): avc: denied { search } for pid=26785 comm="mgr-fin" name="/" dev="overlay" ino=1442290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c473,c849 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068617.010:7276): avc: denied { write } for pid=26380 comm="conmon" name="socket" dev="tmpfs" ino=13391 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068962.298:9024): avc: denied { search } for pid=35450 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068956.591:8988): avc: denied { search } for pid=51635 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c1,c200 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068542.298:6940): avc: denied { read } for pid=35450 comm="node_exporter" name="mounts" dev="proc" ino=172388 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068710.173:7768): avc: denied { search } for pid=42172 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966114 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c165,c594 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068542.299:6942): avc: denied { search } for pid=35450 comm="node_exporter" name="kernel" dev="proc" ino=174118 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068937.074:8855): avc: denied { read } for pid=26380 comm="conmon" path="pipe:[129746]" dev="pipefs" ino=129746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068506.992:6668): avc: denied { search } for pid=26380 comm="conmon" name="systemd" dev="tmpfs" ino=12359 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068542.298:6940): avc: denied { search } for pid=35450 comm="node_exporter" name="1" dev="proc" ino=163757 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068599.224:7155): avc: denied { read } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068601.009:7192): avc: denied { write open } for pid=26404 comm="rstore_compact" path="/var/lib/ceph/mon/ceph-smithi045/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068942.297:8889): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068515.501:6796): avc: denied { write } for pid=26404 comm="fn_monstore" path="pipe:[129746]" dev="pipefs" ino=129746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068932.096:8761): avc: denied { search } for pid=26785 comm="safe_timer" name="usr" dev="sda1" ino=658316 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068766.032:7929): avc: denied { getattr } for pid=26404 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068537.236:6888): avc: denied { search } for pid=51635 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068792.296:8177): avc: denied { getattr } for pid=35450 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069018.205:9241): avc: denied { write } for pid=26380 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068771.152:7996): avc: denied { getattr } for pid=26785 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069040.225:9442): avc: denied { read } for pid=43672 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c188,c455 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068596.288:7114): avc: denied { read } for pid=26785 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068531.499:6819): avc: denied { search } for pid=26380 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616069022.298:9315): avc: denied { read } for pid=35450 comm="node_exporter" name="file-nr" dev="proc" ino=173267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616069042.296:9460): avc: denied { open } for pid=35450 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=30065 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068871.352:8554): avc: denied { sendto } for pid=26380 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616068600.086:7165): avc: denied { create } for pid=44429 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616068771.152:7995): avc: denied { read } for pid=26785 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"']

pass 5976800 2021-03-18 10:16:47 2021-03-18 11:34:30 2021-03-18 12:32:42 0:58:12 0:51:02 0:07:10 smithi master rhel 8.3 rados/monthrash/{ceph clusters/9-mons mon_election/classic msgr-failures/mon-delay msgr/async objectstore/filestore-xfs rados supported-random-distro$/{rhel_8} thrashers/sync workloads/rados_mon_osdmap_prune} 2
pass 5976801 2021-03-18 10:16:48 2021-03-18 11:35:20 2021-03-18 12:06:14 0:30:54 0:22:00 0:08:54 smithi master centos 8.3 rados/thrash-erasure-code/{ceph clusters/{fixed-2 openstack} fast/fast mon_election/connectivity msgr-failures/few objectstore/filestore-xfs rados recovery-overrides/{more-active-recovery} supported-random-distro$/{centos_8} thrashers/minsize_recovery thrashosds-health workloads/ec-rados-plugin=jerasure-k=2-m=1} 2
pass 5976802 2021-03-18 10:16:49 2021-03-18 11:35:31 2021-03-18 12:10:06 0:34:35 0:22:52 0:11:43 smithi master ubuntu 18.04 rados/thrash-erasure-code-big/{ceph cluster/{12-osds openstack} mon_election/classic msgr-failures/few objectstore/filestore-xfs rados recovery-overrides/{more-active-recovery} supported-random-distro$/{ubuntu_latest} thrashers/mapgap thrashosds-health workloads/ec-rados-plugin=jerasure-k=4-m=2} 3
pass 5976803 2021-03-18 10:16:50 2021-03-18 11:36:11 2021-03-18 12:13:36 0:37:25 0:27:08 0:10:17 smithi master centos 8.3 rados/verify/{centos_latest ceph clusters/{fixed-2 openstack} d-thrash/default/{default thrashosds-health} mon_election/classic msgr-failures/few msgr/async objectstore/filestore-xfs rados tasks/mon_recovery validater/valgrind} 2
pass 5976804 2021-03-18 10:16:51 2021-03-18 11:36:32 2021-03-18 12:12:06 0:35:34 0:26:10 0:09:24 smithi master ubuntu 18.04 rados/thrash-erasure-code-isa/{arch/x86_64 ceph clusters/{fixed-2 openstack} mon_election/classic msgr-failures/osd-delay objectstore/bluestore-bitmap rados recovery-overrides/{default} supported-random-distro$/{ubuntu_latest} thrashers/default thrashosds-health workloads/ec-rados-plugin=isa-k=2-m=1} 2
pass 5976805 2021-03-18 10:16:52 2021-03-18 11:36:32 2021-03-18 11:55:05 0:18:33 0:10:28 0:08:05 smithi master rhel 8.3 rados/singleton/{all/admin-socket mon_election/connectivity msgr-failures/many msgr/async-v2only objectstore/bluestore-comp-snappy rados supported-random-distro$/{rhel_8}} 1
pass 5976806 2021-03-18 10:16:53 2021-03-18 11:40:27 2021-03-18 12:26:25 0:45:58 0:33:51 0:12:07 smithi master ubuntu 18.04 rados/cephadm/with-work/{0-distro/ubuntu_18.04 fixed-2 mode/root mon_election/classic msgr/async-v2only start tasks/rados_api_tests} 2
pass 5976807 2021-03-18 10:16:54 2021-03-18 11:42:38 2021-03-18 13:37:40 1:55:02 1:43:22 0:11:40 smithi master ubuntu 18.04 rados/thrash-old-clients/{0-size-min-size-overrides/3-size-2-min-size 1-install/nautilus backoff/peering_and_degraded ceph clusters/{openstack three-plus-one} d-balancer/crush-compat distro$/{ubuntu_18.04} mon_election/classic msgr-failures/few rados thrashers/default thrashosds-health workloads/radosbench} 3
pass 5976808 2021-03-18 10:16:55 2021-03-18 11:43:28 2021-03-18 12:04:57 0:21:29 0:14:31 0:06:58 smithi master rhel 8.3 rados/standalone/{mon_election/classic supported-random-distro$/{rhel_8} workloads/mgr} 1
pass 5976809 2021-03-18 10:16:56 2021-03-18 11:43:48 2021-03-18 12:02:03 0:18:15 0:07:22 0:10:53 smithi master centos 8.3 rados/singleton-nomsgr/{all/export-after-evict mon_election/connectivity rados supported-random-distro$/{centos_8}} 1
pass 5976810 2021-03-18 10:16:57 2021-03-18 11:44:09 2021-03-18 11:57:22 0:13:13 0:05:01 0:08:12 smithi master ubuntu 20.04 rados/cephadm/workunits/{0-distro/ubuntu_20.04_kubic_testing mon_election/connectivity task/test_cephadm_repos} 1
pass 5976811 2021-03-18 10:16:58 2021-03-18 11:44:09 2021-03-18 12:07:02 0:22:53 0:11:25 0:11:28 smithi master ubuntu 18.04 rados/perf/{ceph mon_election/connectivity objectstore/bluestore-low-osd-mem-target openstack scheduler/wpq_default_shards settings/optimized ubuntu_18.04 workloads/radosbench_4K_rand_read} 1
pass 5976812 2021-03-18 10:16:59 2021-03-18 11:45:59 2021-03-18 12:21:08 0:35:09 0:25:53 0:09:16 smithi master centos 8.3 rados/thrash/{0-size-min-size-overrides/3-size-2-min-size 1-pg-log-overrides/short_pg_log 2-recovery-overrides/{more-async-partial-recovery} backoff/peering_and_degraded ceph clusters/{fixed-2 openstack} crc-failures/default d-balancer/on mon_election/connectivity msgr-failures/few msgr/async-v1only objectstore/bluestore-comp-zstd rados supported-random-distro$/{centos_8} thrashers/careful thrashosds-health workloads/snaps-few-objects-balanced} 2
pass 5976813 2021-03-18 10:17:00 2021-03-18 11:46:00 2021-03-18 12:02:44 0:16:44 0:11:13 0:05:31 smithi master rhel 8.3 rados/singleton/{all/deduptool mon_election/classic msgr-failures/none msgr/async objectstore/bluestore-comp-zlib rados supported-random-distro$/{rhel_8}} 1
pass 5976814 2021-03-18 10:17:01 2021-03-18 11:46:00 2021-03-18 12:14:05 0:28:05 0:16:05 0:12:00 smithi master ubuntu 20.04 rados/cephadm/smoke/{distro/ubuntu_20.04 fixed-2 mon_election/connectivity start} 2
pass 5976815 2021-03-18 10:17:02 2021-03-18 11:46:40 2021-03-18 12:05:20 0:18:40 0:12:56 0:05:44 smithi master rhel 8.3 rados/multimon/{clusters/3 mon_election/connectivity msgr-failures/few msgr/async-v1only no_pools objectstore/bluestore-stupid rados supported-random-distro$/{rhel_8} tasks/mon_recovery} 2
pass 5976816 2021-03-18 10:17:03 2021-03-18 11:46:42 2021-03-18 12:09:57 0:23:15 0:11:22 0:11:53 smithi master centos 8.3 rados/thrash-erasure-code-shec/{ceph clusters/{fixed-4 openstack} mon_election/connectivity msgr-failures/few objectstore/bluestore-comp-zstd rados recovery-overrides/{more-async-partial-recovery} supported-random-distro$/{centos_8} thrashers/careful thrashosds-health workloads/ec-rados-plugin=shec-k=4-m=3-c=2} 4
pass 5976817 2021-03-18 10:17:04 2021-03-18 11:47:02 2021-03-18 12:37:00 0:49:58 0:38:39 0:11:19 smithi master ubuntu 20.04 rados/cephadm/thrash/{0-distro/ubuntu_20.04_kubic_stable 1-start 2-thrash 3-tasks/snaps-few-objects fixed-2 msgr/async-v1only root} 2
pass 5976818 2021-03-18 10:17:04 2021-03-18 11:47:32 2021-03-18 12:06:21 0:18:49 0:11:50 0:06:59 smithi master rhel 8.3 rados/singleton-nomsgr/{all/full-tiering mon_election/classic rados supported-random-distro$/{rhel_8}} 1
pass 5976819 2021-03-18 10:17:05 2021-03-18 11:47:43 2021-03-18 12:25:07 0:37:24 0:25:38 0:11:46 smithi master ubuntu 20.04 rados/cephadm/upgrade/{1-start-distro/1-start-ubuntu_20.04-15.2.9 2-repo_digest/repo_digest 3-start-upgrade 4-wait mon_election/connectivity} 2
pass 5976820 2021-03-18 10:17:06 2021-03-18 11:49:43 2021-03-18 12:09:48 0:20:05 0:13:15 0:06:50 smithi master rhel 8.3 rados/mgr/{clusters/{2-node-mgr} debug/mgr mon_election/classic objectstore/filestore-xfs supported-random-distro$/{rhel_8} tasks/crash} 2
pass 5976821 2021-03-18 10:17:07 2021-03-18 11:50:03 2021-03-18 12:26:12 0:36:09 0:24:34 0:11:35 smithi master centos 8.3 rados/thrash/{0-size-min-size-overrides/2-size-2-min-size 1-pg-log-overrides/normal_pg_log 2-recovery-overrides/{more-active-recovery} backoff/normal ceph clusters/{fixed-2 openstack} crc-failures/bad_map_crc_failure d-balancer/crush-compat mon_election/classic msgr-failures/osd-delay msgr/async-v2only objectstore/bluestore-hybrid rados supported-random-distro$/{centos_8} thrashers/default thrashosds-health workloads/snaps-few-objects-localized} 2
pass 5976822 2021-03-18 10:17:08 2021-03-18 11:51:04 2021-03-18 12:10:08 0:19:04 0:11:54 0:07:10 smithi master rhel 8.3 rados/singleton/{all/divergent_priors mon_election/connectivity msgr-failures/few msgr/async-v1only objectstore/bluestore-comp-zstd rados supported-random-distro$/{rhel_8}} 1
fail 5976823 2021-03-18 10:17:09 2021-03-18 11:51:04 2021-03-18 12:13:14 0:22:10 0:10:31 0:11:39 smithi master ubuntu 20.04 rados/cephadm/dashboard/{0-distro/ubuntu_20.04_kubic_stable task/test_e2e} 2
Failure Reason:

Command failed on smithi112 with status 1: 'sudo /home/ubuntu/cephtest/cephadm --image quay.ceph.io/ceph-ci/ceph:0d3df9b9599b6294f204ae84913a36061e78fb76 shell -c /etc/ceph/ceph.conf -k /etc/ceph/ceph.client.admin.keyring --fsid adb8b7b2-87e2-11eb-9097-001a4aab830c -- ceph orch host ls --format=json'

pass 5976824 2021-03-18 10:17:10 2021-03-18 11:51:54 2021-03-18 12:21:07 0:29:13 0:16:16 0:12:57 smithi master ubuntu 20.04 rados/cephadm/smoke/{distro/ubuntu_20.04_kubic_stable fixed-2 mon_election/classic start} 2
pass 5976825 2021-03-18 10:17:11 2021-03-18 11:53:05 2021-03-18 12:12:53 0:19:48 0:12:29 0:07:19 smithi master rhel 8.3 rados/singleton-nomsgr/{all/health-warnings mon_election/connectivity rados supported-random-distro$/{rhel_8}} 1
pass 5976826 2021-03-18 10:17:12 2021-03-18 11:53:35 2021-03-18 12:13:53 0:20:18 0:11:46 0:08:32 smithi master rhel 8.3 rados/basic/{ceph clusters/{fixed-2 openstack} mon_election/connectivity msgr-failures/many msgr/async objectstore/bluestore-low-osd-mem-target rados supported-random-distro$/{rhel_8} tasks/rados_striper} 2
pass 5976827 2021-03-18 10:17:13 2021-03-18 11:54:26 2021-03-18 12:31:51 0:37:25 0:27:43 0:09:42 smithi master ubuntu 18.04 rados/standalone/{mon_election/connectivity supported-random-distro$/{ubuntu_latest} workloads/misc} 1
pass 5976828 2021-03-18 10:17:14 2021-03-18 11:54:26 2021-03-18 12:11:17 0:16:51 0:08:25 0:08:26 smithi master ubuntu 18.04 rados/singleton/{all/divergent_priors2 mon_election/classic msgr-failures/many msgr/async-v2only objectstore/bluestore-hybrid rados supported-random-distro$/{ubuntu_latest}} 1
pass 5976829 2021-03-18 10:17:15 2021-03-18 11:54:26 2021-03-18 12:13:15 0:18:49 0:10:17 0:08:32 smithi master ubuntu 18.04 rados/perf/{ceph mon_election/classic objectstore/bluestore-stupid openstack scheduler/dmclock_1Shard_16Threads settings/optimized ubuntu_18.04 workloads/radosbench_4K_seq_read} 1
pass 5976830 2021-03-18 10:17:16 2021-03-18 11:54:26 2021-03-18 12:20:35 0:26:09 0:16:25 0:09:44 smithi master ubuntu 18.04 rados/cephadm/smoke-roleless/{1-start 2-services/{basic rgw} 3-final distro/ubuntu_18.04} 2
pass 5976831 2021-03-18 10:17:17 2021-03-18 11:55:17 2021-03-18 12:31:13 0:35:56 0:27:40 0:08:16 smithi master rhel 8.3 rados/thrash/{0-size-min-size-overrides/3-size-2-min-size 1-pg-log-overrides/short_pg_log 2-recovery-overrides/{more-async-partial-recovery} backoff/peering ceph clusters/{fixed-2 openstack} crc-failures/default d-balancer/on mon_election/connectivity msgr-failures/fastclose msgr/async objectstore/bluestore-low-osd-mem-target rados supported-random-distro$/{rhel_8} thrashers/mapgap thrashosds-health workloads/snaps-few-objects} 2
pass 5976832 2021-03-18 10:17:18 2021-03-18 11:56:17 2021-03-18 12:11:29 0:15:12 0:06:24 0:08:48 smithi master ubuntu 18.04 rados/objectstore/{backends/filejournal supported-random-distro$/{ubuntu_latest}} 1
pass 5976833 2021-03-18 10:17:19 2021-03-18 11:56:18 2021-03-18 12:19:23 0:23:05 0:14:09 0:08:56 smithi master centos 8.3 rados/monthrash/{ceph clusters/3-mons mon_election/connectivity msgr-failures/few msgr/async objectstore/bluestore-bitmap rados supported-random-distro$/{centos_8} thrashers/force-sync-many workloads/pool-create-delete} 2
pass 5976834 2021-03-18 10:17:20 2021-03-18 11:56:28 2021-03-18 12:43:41 0:47:13 0:36:04 0:11:09 smithi master centos 8.3 rados/thrash-erasure-code/{ceph clusters/{fixed-2 openstack} fast/normal mon_election/classic msgr-failures/osd-delay objectstore/bluestore-bitmap rados recovery-overrides/{more-async-partial-recovery} supported-random-distro$/{centos_8} thrashers/morepggrow thrashosds-health workloads/ec-rados-plugin=jerasure-k=3-m=1} 2
pass 5976835 2021-03-18 10:17:21 2021-03-18 11:58:39 2021-03-18 12:22:23 0:23:44 0:12:58 0:10:46 smithi master centos 8.3 rados/thrash-erasure-code-big/{ceph cluster/{12-osds openstack} mon_election/connectivity msgr-failures/few objectstore/bluestore-bitmap rados recovery-overrides/{more-async-recovery} supported-random-distro$/{centos_8} thrashers/careful thrashosds-health workloads/ec-rados-plugin=lrc-k=4-m=2-l=3} 3
pass 5976836 2021-03-18 10:17:21 2021-03-18 11:59:09 2021-03-18 12:21:16 0:22:07 0:11:04 0:11:03 smithi master centos 8.3 rados/verify/{centos_latest ceph clusters/{fixed-2 openstack} d-thrash/none mon_election/connectivity msgr-failures/few msgr/async objectstore/bluestore-bitmap rados tasks/mon_recovery validater/lockdep} 2
pass 5976837 2021-03-18 10:17:22 2021-03-18 11:59:59 2021-03-18 12:36:04 0:36:05 0:23:32 0:12:33 smithi master ubuntu 20.04 rados/cephadm/with-work/{0-distro/ubuntu_20.04 fixed-2 mode/packaged mon_election/connectivity msgr/async start tasks/rados_python} 2
pass 5976838 2021-03-18 10:17:23 2021-03-18 12:02:50 2021-03-18 12:40:41 0:37:51 0:30:11 0:07:40 smithi master rhel 8.3 rados/thrash-erasure-code-isa/{arch/x86_64 ceph clusters/{fixed-2 openstack} mon_election/connectivity msgr-failures/fastclose objectstore/bluestore-comp-lz4 rados recovery-overrides/{more-active-recovery} supported-random-distro$/{rhel_8} thrashers/mapgap thrashosds-health workloads/ec-rados-plugin=isa-k=2-m=1} 2
pass 5976839 2021-03-18 10:17:24 2021-03-18 12:02:50 2021-03-18 12:40:36 0:37:46 0:25:35 0:12:11 smithi master ubuntu 18.04 rados/thrash-old-clients/{0-size-min-size-overrides/2-size-2-min-size 1-install/octopus backoff/normal ceph clusters/{openstack three-plus-one} d-balancer/on distro$/{ubuntu_18.04} mon_election/connectivity msgr-failures/osd-delay rados thrashers/mapgap thrashosds-health workloads/rbd_cls} 3
pass 5976840 2021-03-18 10:17:25 2021-03-18 12:05:01 2021-03-18 12:22:13 0:17:12 0:11:11 0:06:01 smithi master rhel 8.3 rados/singleton-nomsgr/{all/large-omap-object-warnings mon_election/classic rados supported-random-distro$/{rhel_8}} 1
fail 5976841 2021-03-18 10:17:26 2021-03-18 12:05:21 2021-03-18 12:41:52 0:36:31 0:28:04 0:08:27 smithi master centos 8.2 rados/cephadm/workunits/{0-distro/centos_8.2_kubic_stable mon_election/classic task/test_orch_cli} 1
Failure Reason:

Test failure: test_cephfs_mirror (tasks.cephadm_cases.test_cli.TestCephadmCLI)

pass 5976842 2021-03-18 10:17:27 2021-03-18 12:05:21 2021-03-18 12:25:15 0:19:54 0:09:13 0:10:41 smithi master centos 8.3 rados/singleton/{all/dump-stuck mon_election/connectivity msgr-failures/none msgr/async objectstore/bluestore-low-osd-mem-target rados supported-random-distro$/{centos_8}} 1
pass 5976843 2021-03-18 12:06:22 2021-03-18 12:06:22 2021-03-18 12:29:11 0:22:49 0:13:20 0:09:29 smithi master ubuntu 18.04 rados/thrash/{0-size-min-size-overrides/2-size-2-min-size 1-pg-log-overrides/normal_pg_log 2-recovery-overrides/{more-async-recovery} backoff/peering_and_degraded ceph clusters/{fixed-2 openstack} crc-failures/bad_map_crc_failure d-balancer/crush-compat mon_election/classic msgr-failures/few msgr/async-v1only objectstore/bluestore-stupid rados supported-random-distro$/{ubuntu_latest} thrashers/morepggrow thrashosds-health workloads/write_fadvise_dontneed} 2
pass 5976844 2021-03-18 10:17:29 2021-03-18 12:06:22 2021-03-18 12:43:37 0:37:15 0:24:54 0:12:21 smithi master rados/upgrade/pacific-x/rgw-multisite/{clusters frontend overrides realm tasks upgrade/primary} 2
pass 5976845 2021-03-18 10:17:30 2021-03-18 12:08:02 2021-03-18 12:35:19 0:27:17 0:15:52 0:11:25 smithi master ubuntu 20.04 rados/cephadm/smoke/{distro/ubuntu_20.04_kubic_testing fixed-2 mon_election/connectivity start} 2
pass 5976846 2021-03-18 10:17:31 2021-03-18 12:08:03 2021-03-18 12:42:43 0:34:40 0:27:27 0:07:13 smithi master rhel 8.3 rados/thrash-erasure-code-overwrites/{bluestore-bitmap ceph clusters/{fixed-2 openstack} fast/fast mon_election/classic msgr-failures/osd-delay rados recovery-overrides/{default} supported-random-distro$/{rhel_8} thrashers/careful thrashosds-health workloads/ec-small-objects-fast-read-overwrites} 2
pass 5976847 2021-03-18 10:17:32 2021-03-18 12:09:03 2021-03-18 12:58:16 0:49:13 0:37:14 0:11:59 smithi master ubuntu 20.04 rados/cephadm/thrash/{0-distro/ubuntu_20.04_kubic_testing 1-start 2-thrash 3-tasks/rados_api_tests fixed-2 msgr/async-v2only root} 2
pass 5976848 2021-03-18 10:17:33 2021-03-18 12:09:43 2021-03-18 12:27:56 0:18:13 0:06:22 0:11:51 smithi master ubuntu 18.04 rados/multimon/{clusters/6 mon_election/classic msgr-failures/many msgr/async-v2only no_pools objectstore/filestore-xfs rados supported-random-distro$/{ubuntu_latest} tasks/mon_clock_no_skews} 2
pass 5976849 2021-03-18 10:17:34 2021-03-18 12:09:54 2021-03-18 12:31:34 0:21:40 0:10:31 0:11:09 smithi master ubuntu 18.04 rados/thrash-erasure-code-shec/{ceph clusters/{fixed-4 openstack} mon_election/classic msgr-failures/osd-delay objectstore/bluestore-hybrid rados recovery-overrides/{more-active-recovery} supported-random-distro$/{ubuntu_latest} thrashers/default thrashosds-health workloads/ec-rados-plugin=shec-k=4-m=3-c=2} 4
pass 5976850 2021-03-18 10:17:35 2021-03-18 12:10:04 2021-03-18 12:27:23 0:17:19 0:11:44 0:05:35 smithi master rhel 8.3 rados/singleton-nomsgr/{all/lazy_omap_stats_output mon_election/connectivity rados supported-random-distro$/{rhel_8}} 1
pass 5976851 2021-03-18 10:17:36 2021-03-18 12:10:14 2021-03-18 13:29:13 1:18:59 1:10:57 0:08:02 smithi master centos 8.3 rados/singleton/{all/ec-lost-unfound mon_election/classic msgr-failures/few msgr/async-v1only objectstore/bluestore-stupid rados supported-random-distro$/{centos_8}} 1
pass 5976852 2021-03-18 10:17:37 2021-03-18 12:10:15 2021-03-18 12:55:37 0:45:22 0:34:56 0:10:26 smithi master ubuntu 20.04 rados/cephadm/with-work/{0-distro/ubuntu_20.04_kubic_stable fixed-2 mode/root mon_election/classic msgr/async-v1only start tasks/rados_api_tests} 2
pass 5976853 2021-03-18 10:17:38 2021-03-18 12:10:15 2021-03-18 12:30:10 0:19:55 0:10:19 0:09:36 smithi master ubuntu 18.04 rados/perf/{ceph mon_election/connectivity objectstore/bluestore-basic-min-osd-mem-target openstack scheduler/dmclock_default_shards settings/optimized ubuntu_18.04 workloads/radosbench_4M_rand_read} 1
pass 5976854 2021-03-18 10:17:39 2021-03-18 12:11:25 2021-03-18 12:33:46 0:22:21 0:14:57 0:07:24 smithi master rhel 8.3 rados/mgr/{clusters/{2-node-mgr} debug/mgr mon_election/connectivity objectstore/bluestore-bitmap supported-random-distro$/{rhel_8} tasks/failover} 2
pass 5976855 2021-03-18 10:17:40 2021-03-18 12:12:16 2021-03-18 12:35:25 0:23:09 0:17:03 0:06:06 smithi master rhel 8.3 rados/thrash/{0-size-min-size-overrides/3-size-2-min-size 1-pg-log-overrides/short_pg_log 2-recovery-overrides/{default} backoff/normal ceph clusters/{fixed-2 openstack} crc-failures/default d-balancer/on mon_election/connectivity msgr-failures/osd-delay msgr/async-v2only objectstore/filestore-xfs rados supported-random-distro$/{rhel_8} thrashers/none thrashosds-health workloads/admin_socket_objecter_requests} 2
pass 5976856 2021-03-18 10:17:41 2021-03-18 12:12:36 2021-03-18 12:58:11 0:45:35 0:36:06 0:09:29 smithi master centos 8.2 rados/cephadm/smoke/{distro/centos_8.2_kubic_stable fixed-2 mon_election/connectivity start} 2
pass 5976857 2021-03-18 10:17:42 2021-03-18 12:12:56 2021-03-18 13:08:12 0:55:16 0:48:51 0:06:25 smithi master rhel 8.3 rados/standalone/{mon_election/classic supported-random-distro$/{rhel_8} workloads/mon} 1
pass 5976858 2021-03-18 10:17:43 2021-03-18 12:13:07 2021-03-18 12:52:12 0:39:05 0:33:31 0:05:34 smithi master rhel 8.3 rados/basic/{ceph clusters/{fixed-2 openstack} mon_election/classic msgr-failures/few msgr/async-v1only objectstore/bluestore-stupid rados supported-random-distro$/{rhel_8} tasks/rados_workunit_loadgen_big} 2
pass 5976859 2021-03-18 10:17:43 2021-03-18 12:13:17 2021-03-18 12:30:37 0:17:20 0:07:46 0:09:34 smithi master ubuntu 18.04 rados/singleton-nomsgr/{all/librados_hello_world mon_election/classic rados supported-random-distro$/{ubuntu_latest}} 1
pass 5976860 2021-03-18 10:17:44 2021-03-18 12:13:17 2021-03-18 12:42:58 0:29:41 0:18:01 0:11:40 smithi master ubuntu 20.04 rados/cephadm/smoke-roleless/{1-start 2-services/{basic rgw} 3-final distro/ubuntu_20.04} 2
pass 5976861 2021-03-18 10:17:45 2021-03-18 12:13:38 2021-03-18 12:29:43 0:16:05 0:05:34 0:10:31 smithi master ubuntu 18.04 rados/singleton/{all/erasure-code-nonregression mon_election/connectivity msgr-failures/many msgr/async-v2only objectstore/filestore-xfs rados supported-random-distro$/{ubuntu_latest}} 1
pass 5976862 2021-03-18 12:13:58 2021-03-18 12:13:58 2021-03-18 12:49:29 0:35:31 0:24:39 0:10:52 smithi master ubuntu 20.04 rados/cephadm/upgrade/{1-start-distro/1-start-ubuntu_20.04 2-repo_digest/defaut 3-start-upgrade 4-wait mon_election/classic} 2
pass 5976863 2021-03-18 10:17:47 2021-03-18 12:14:08 2021-03-18 12:47:03 0:32:55 0:26:45 0:06:10 smithi master rhel 8.3 rados/thrash/{0-size-min-size-overrides/2-size-2-min-size 1-pg-log-overrides/normal_pg_log 2-recovery-overrides/{default} backoff/peering ceph clusters/{fixed-2 openstack} crc-failures/bad_map_crc_failure d-balancer/crush-compat mon_election/classic msgr-failures/fastclose msgr/async objectstore/bluestore-bitmap rados supported-random-distro$/{rhel_8} thrashers/pggrow thrashosds-health workloads/cache-agent-big} 2
pass 5976864 2021-03-18 10:17:48 2021-03-18 12:14:18 2021-03-18 12:31:57 0:17:39 0:07:59 0:09:40 smithi master ubuntu 20.04 rados/cephadm/workunits/{0-distro/ubuntu_20.04_kubic_stable mon_election/connectivity task/test_adoption} 1
pass 5976865 2021-03-18 10:17:49 2021-03-18 12:14:19 2021-03-18 12:37:02 0:22:43 0:13:00 0:09:43 smithi master centos 8.3 rados/singleton-nomsgr/{all/msgr mon_election/connectivity rados supported-random-distro$/{centos_8}} 1
pass 5976866 2021-03-18 10:17:50 2021-03-18 12:15:59 2021-03-18 12:38:28 0:22:29 0:09:17 0:13:12 smithi master centos 8.3 rados/monthrash/{ceph clusters/9-mons mon_election/classic msgr-failures/mon-delay msgr/async-v1only objectstore/bluestore-comp-lz4 rados supported-random-distro$/{centos_8} thrashers/many workloads/rados_5925} 2
pass 5976867 2021-03-18 10:17:51 2021-03-18 12:19:30 2021-03-18 14:17:36 1:58:06 1:51:04 0:07:02 smithi master rhel 8.3 rados/thrash-erasure-code/{ceph clusters/{fixed-2 openstack} fast/fast mon_election/connectivity msgr-failures/fastclose objectstore/bluestore-comp-lz4 rados recovery-overrides/{more-async-partial-recovery} supported-random-distro$/{rhel_8} thrashers/pggrow thrashosds-health workloads/ec-radosbench} 2
pass 5976868 2021-03-18 10:17:52 2021-03-18 12:20:40 2021-03-18 12:58:44 0:38:04 0:30:27 0:07:37 smithi master rhel 8.3 rados/thrash-erasure-code-big/{ceph cluster/{12-osds openstack} mon_election/classic msgr-failures/osd-delay objectstore/bluestore-comp-lz4 rados recovery-overrides/{more-partial-recovery} supported-random-distro$/{rhel_8} thrashers/default thrashosds-health workloads/ec-rados-plugin=jerasure-k=4-m=2} 3
pass 5976869 2021-03-18 10:17:53 2021-03-18 12:21:11 2021-03-18 13:30:57 1:09:46 0:59:02 0:10:44 smithi master centos 8.3 rados/verify/{centos_latest ceph clusters/{fixed-2 openstack} d-thrash/default/{default thrashosds-health} mon_election/classic msgr-failures/few msgr/async-v1only objectstore/bluestore-comp-lz4 rados tasks/rados_api_tests validater/valgrind} 2
pass 5976870 2021-03-18 10:17:54 2021-03-18 12:21:11 2021-03-18 13:59:18 1:38:07 1:28:07 0:10:00 smithi master ubuntu 18.04 rados/singleton/{all/lost-unfound-delete mon_election/classic msgr-failures/none msgr/async objectstore/bluestore-bitmap rados supported-random-distro$/{ubuntu_latest}} 1
pass 5976871 2021-03-18 10:17:55 2021-03-18 12:21:21 2021-03-18 13:16:13 0:54:52 0:41:35 0:13:17 smithi master ubuntu 18.04 rados/thrash-old-clients/{0-size-min-size-overrides/3-size-2-min-size 1-install/pacific backoff/peering ceph clusters/{openstack three-plus-one} d-balancer/crush-compat distro$/{ubuntu_18.04} mon_election/classic msgr-failures/fastclose rados thrashers/morepggrow thrashosds-health workloads/snaps-few-objects} 3
pass 5976872 2021-03-18 10:17:56 2021-03-18 12:22:32 2021-03-18 13:01:13 0:38:41 0:32:06 0:06:35 smithi master rhel 8.3 rados/thrash-erasure-code-isa/{arch/x86_64 ceph clusters/{fixed-2 openstack} mon_election/classic msgr-failures/few objectstore/bluestore-comp-snappy rados recovery-overrides/{more-async-partial-recovery} supported-random-distro$/{rhel_8} thrashers/morepggrow thrashosds-health workloads/ec-rados-plugin=isa-k=2-m=1} 2
pass 5976873 2021-03-18 10:17:57 2021-03-18 12:22:32 2021-03-18 13:13:42 0:51:10 0:42:09 0:09:01 smithi master rhel 8.3 rados/cephadm/smoke/{distro/rhel_8.3_kubic_stable fixed-2 mon_election/classic start} 2
pass 5976874 2021-03-18 10:17:58 2021-03-18 12:24:13 2021-03-18 14:51:36 2:27:23 2:18:00 0:09:23 smithi master centos 8.3 rados/objectstore/{backends/filestore-idempotent-aio-journal supported-random-distro$/{centos_8}} 1
pass 5976875 2021-03-18 10:17:59 2021-03-18 12:24:33 2021-03-18 12:53:52 0:29:19 0:19:00 0:10:19 smithi master centos 8.3 rados/valgrind-leaks/{1-start 2-inject-leak/none centos_latest} 1
pass 5976876 2021-03-18 10:17:59 2021-03-18 12:24:33 2021-03-18 12:44:28 0:19:55 0:09:05 0:10:50 smithi master ubuntu 18.04 rados/perf/{ceph mon_election/classic objectstore/bluestore-bitmap openstack scheduler/wpq_default_shards settings/optimized ubuntu_18.04 workloads/radosbench_4M_seq_read} 1
pass 5976877 2021-03-18 10:18:00 2021-03-18 12:25:14 2021-03-18 12:58:51 0:33:37 0:23:49 0:09:48 smithi master ubuntu 20.04 rados/cephadm/with-work/{0-distro/ubuntu_20.04_kubic_testing fixed-2 mode/packaged mon_election/connectivity msgr/async-v2only start tasks/rados_python} 2
pass 5976878 2021-03-18 10:18:01 2021-03-18 12:25:24 2021-03-18 12:47:43 0:22:19 0:12:14 0:10:05 smithi master ubuntu 18.04 rados/thrash/{0-size-min-size-overrides/3-size-2-min-size 1-pg-log-overrides/short_pg_log 2-recovery-overrides/{default} backoff/peering_and_degraded ceph clusters/{fixed-2 openstack} crc-failures/default d-balancer/on mon_election/connectivity msgr-failures/few msgr/async-v1only objectstore/bluestore-comp-lz4 rados supported-random-distro$/{ubuntu_latest} thrashers/careful thrashosds-health workloads/cache-agent-small} 2
pass 5976879 2021-03-18 10:18:02 2021-03-18 12:26:14 2021-03-18 13:05:25 0:39:11 0:29:42 0:09:29 smithi master centos 8.3 rados/singleton-bluestore/{all/cephtool mon_election/connectivity msgr-failures/few msgr/async-v1only objectstore/bluestore-bitmap rados supported-random-distro$/{centos_8}} 1
pass 5976880 2021-03-18 10:18:03 2021-03-18 12:26:25 2021-03-18 14:03:59 1:37:34 1:28:10 0:09:24 smithi master centos 8.2 rados/cephadm/thrash/{0-distro/centos_8.2_kubic_stable 1-start 2-thrash 3-tasks/radosbench fixed-2 msgr/async root} 2
pass 5976881 2021-03-18 10:18:04 2021-03-18 12:26:35 2021-03-18 12:57:50 0:31:15 0:20:22 0:10:53 smithi master centos 8.3 rados/singleton-nomsgr/{all/multi-backfill-reject mon_election/classic rados supported-random-distro$/{centos_8}} 2
pass 5976882 2021-03-18 10:18:05 2021-03-18 12:26:55 2021-03-18 13:30:26 1:03:31 0:54:31 0:09:00 smithi master ubuntu 18.04 rados/singleton/{all/lost-unfound mon_election/connectivity msgr-failures/few msgr/async-v1only objectstore/bluestore-comp-lz4 rados supported-random-distro$/{ubuntu_latest}} 1
pass 5976883 2021-03-18 10:18:06 2021-03-18 12:26:55 2021-03-18 12:50:53 0:23:58 0:14:30 0:09:28 smithi master rhel 8.3 rados/thrash-erasure-code-shec/{ceph clusters/{fixed-4 openstack} mon_election/connectivity msgr-failures/fastclose objectstore/bluestore-low-osd-mem-target rados recovery-overrides/{more-partial-recovery} supported-random-distro$/{rhel_8} thrashers/careful thrashosds-health workloads/ec-rados-plugin=shec-k=4-m=3-c=2} 4
pass 5976884 2021-03-18 10:18:07 2021-03-18 12:29:06 2021-03-18 15:51:04 3:21:58 3:15:16 0:06:42 smithi master rhel 8.3 rados/standalone/{mon_election/connectivity supported-random-distro$/{rhel_8} workloads/osd} 1
pass 5976885 2021-03-18 10:18:08 2021-03-18 12:29:06 2021-03-18 12:46:25 0:17:19 0:10:58 0:06:21 smithi master rhel 8.3 rados/multimon/{clusters/9 mon_election/connectivity msgr-failures/few msgr/async no_pools objectstore/bluestore-bitmap rados supported-random-distro$/{rhel_8} tasks/mon_clock_with_skews} 3
fail 5976886 2021-03-18 10:18:09 2021-03-18 12:29:17 2021-03-18 12:54:02 0:24:45 0:12:54 0:11:51 smithi master ubuntu 20.04 rados/cephadm/dashboard/{0-distro/ubuntu_20.04_kubic_testing task/test_e2e} 2
Failure Reason:

Command failed (workunit test cephadm/create_iscsi_disks.sh) on smithi171 with status 1: 'mkdir -p -- /home/ubuntu/cephtest/mnt.1/client.1/tmp && cd -- /home/ubuntu/cephtest/mnt.1/client.1/tmp && CEPH_CLI_TEST_DUP_COMMAND=1 CEPH_REF=88df47230b5ad85e95b0be2eca6f5763914b175c TESTDIR="/home/ubuntu/cephtest" CEPH_ARGS="--cluster ceph" CEPH_ID="1" PATH=$PATH:/usr/sbin CEPH_BASE=/home/ubuntu/cephtest/clone.client.1 CEPH_ROOT=/home/ubuntu/cephtest/clone.client.1 adjust-ulimits ceph-coverage /home/ubuntu/cephtest/archive/coverage timeout 3h /home/ubuntu/cephtest/clone.client.1/qa/workunits/cephadm/create_iscsi_disks.sh'

pass 5976887 2021-03-18 10:18:10 2021-03-18 12:30:17 2021-03-18 13:00:20 0:30:03 0:19:13 0:10:50 smithi master centos 8.3 rados/basic/{ceph clusters/{fixed-2 openstack} mon_election/connectivity msgr-failures/many msgr/async-v2only objectstore/filestore-xfs rados supported-random-distro$/{centos_8} tasks/rados_workunit_loadgen_mix} 2
pass 5976888 2021-03-18 10:18:11 2021-03-18 12:31:17 2021-03-18 13:09:05 0:37:48 0:27:12 0:10:36 smithi master ubuntu 18.04 rados/thrash/{0-size-min-size-overrides/2-size-2-min-size 1-pg-log-overrides/normal_pg_log 2-recovery-overrides/{more-async-partial-recovery} backoff/normal ceph clusters/{fixed-2 openstack} crc-failures/bad_map_crc_failure d-balancer/crush-compat mon_election/classic msgr-failures/osd-delay msgr/async-v2only objectstore/bluestore-comp-snappy rados supported-random-distro$/{ubuntu_latest} thrashers/default thrashosds-health workloads/cache-pool-snaps-readproxy} 2
pass 5976889 2021-03-18 10:18:12 2021-03-18 12:31:39 2021-03-18 12:51:03 0:19:24 0:10:04 0:09:20 smithi master ubuntu 18.04 rados/mgr/{clusters/{2-node-mgr} debug/mgr mon_election/classic objectstore/bluestore-comp-lz4 supported-random-distro$/{ubuntu_latest} tasks/insights} 2
pass 5976890 2021-03-18 10:18:13 2021-03-18 12:31:39 2021-03-18 12:57:42 0:26:03 0:14:42 0:11:21 smithi master ubuntu 18.04 rados/cephadm/smoke/{distro/ubuntu_18.04 fixed-2 mon_election/connectivity start} 2
pass 5976891 2021-03-18 10:18:14 2021-03-18 12:31:59 2021-03-18 12:48:55 0:16:56 0:07:37 0:09:19 smithi master centos 8.3 rados/singleton/{all/max-pg-per-osd.from-mon mon_election/classic msgr-failures/many msgr/async-v2only objectstore/bluestore-comp-snappy rados supported-random-distro$/{centos_8}} 1
pass 5976892 2021-03-18 10:18:14 2021-03-18 12:32:00 2021-03-18 12:58:39 0:26:39 0:16:21 0:10:18 smithi master ubuntu 18.04 rados/singleton-nomsgr/{all/osd_stale_reads mon_election/connectivity rados supported-random-distro$/{ubuntu_latest}} 1
pass 5976893 2021-03-18 10:18:15 2021-03-18 12:32:50 2021-03-18 13:03:20 0:30:30 0:20:00 0:10:30 smithi master ubuntu 20.04 rados/cephadm/smoke-roleless/{1-start 2-services/{basic rgw} 3-final distro/ubuntu_20.04_kubic_stable} 2
pass 5976894 2021-03-18 10:18:16 2021-03-18 12:33:50 2021-03-18 13:00:35 0:26:45 0:16:04 0:10:41 smithi master ubuntu 20.04 rados/cephadm/workunits/{0-distro/ubuntu_20.04_kubic_testing mon_election/classic task/test_cephadm} 1
pass 5976895 2021-03-18 10:18:17 2021-03-18 12:35:21 2021-03-18 13:08:57 0:33:36 0:22:33 0:11:03 smithi master centos 8.3 rados/thrash-erasure-code-overwrites/{bluestore-bitmap ceph clusters/{fixed-2 openstack} fast/normal mon_election/connectivity msgr-failures/fastclose rados recovery-overrides/{default} supported-random-distro$/{centos_8} thrashers/default thrashosds-health workloads/ec-small-objects-overwrites} 2
pass 5976896 2021-03-18 10:18:18 2021-03-18 12:35:31 2021-03-18 12:52:40 0:17:09 0:08:51 0:08:18 smithi master ubuntu 18.04 rados/perf/{ceph mon_election/connectivity objectstore/bluestore-comp openstack scheduler/dmclock_1Shard_16Threads settings/optimized ubuntu_18.04 workloads/radosbench_4M_write} 1
pass 5976897 2021-03-18 10:18:19 2021-03-18 12:35:32 2021-03-18 13:13:08 0:37:36 0:27:43 0:09:53 smithi master centos 8.3 rados/thrash/{0-size-min-size-overrides/3-size-2-min-size 1-pg-log-overrides/short_pg_log 2-recovery-overrides/{more-partial-recovery} backoff/peering ceph clusters/{fixed-2 openstack} crc-failures/default d-balancer/on mon_election/connectivity msgr-failures/fastclose msgr/async objectstore/bluestore-comp-zlib rados supported-random-distro$/{centos_8} thrashers/mapgap thrashosds-health workloads/cache-pool-snaps} 2
pass 5976898 2021-03-18 10:18:20 2021-03-18 12:36:12 2021-03-18 13:04:24 0:28:12 0:16:07 0:12:05 smithi master ubuntu 20.04 rados/cephadm/smoke/{distro/ubuntu_20.04 fixed-2 mon_election/classic start} 2
pass 5976899 2021-03-18 10:18:21 2021-03-18 12:37:02 2021-03-18 12:58:05 0:21:03 0:14:34 0:06:29 smithi master rhel 8.3 rados/singleton/{all/max-pg-per-osd.from-primary mon_election/connectivity msgr-failures/none msgr/async objectstore/bluestore-comp-zlib rados supported-random-distro$/{rhel_8}} 1
pass 5976900 2021-03-18 10:18:22 2021-03-18 12:37:03 2021-03-18 12:52:47 0:15:44 0:06:21 0:09:23 smithi master ubuntu 18.04 rados/singleton-nomsgr/{all/pool-access mon_election/classic rados supported-random-distro$/{ubuntu_latest}} 1
pass 5976901 2021-03-18 10:18:23 2021-03-18 12:37:03 2021-03-18 13:09:23 0:32:20 0:21:36 0:10:44 smithi master centos 8.3 rados/cephadm/upgrade/{1-start-distro/1-start-centos_8.3-octopus 2-repo_digest/repo_digest 3-start-upgrade 4-wait mon_election/connectivity} 2
pass 5976902 2021-03-18 10:18:24 2021-03-18 12:38:45 2021-03-18 13:20:40 0:41:55 0:32:23 0:09:32 smithi master rhel 8.3 rados/monthrash/{ceph clusters/3-mons mon_election/connectivity msgr-failures/few msgr/async-v2only objectstore/bluestore-comp-snappy rados supported-random-distro$/{rhel_8} thrashers/one workloads/rados_api_tests} 2
pass 5976903 2021-03-18 10:18:24 2021-03-18 12:41:53 2021-03-18 13:10:45 0:28:52 0:19:47 0:09:05 smithi master ubuntu 18.04 rados/thrash-erasure-code/{ceph clusters/{fixed-2 openstack} fast/normal mon_election/classic msgr-failures/few objectstore/bluestore-comp-snappy rados recovery-overrides/{more-async-partial-recovery} supported-random-distro$/{ubuntu_latest} thrashers/careful thrashosds-health workloads/ec-small-objects-balanced} 2
pass 5976904 2021-03-18 10:18:25 2021-03-18 12:41:54 2021-03-18 13:01:32 0:19:38 0:09:39 0:09:59 smithi master ubuntu 18.04 rados/thrash-erasure-code-big/{ceph cluster/{12-osds openstack} mon_election/connectivity msgr-failures/fastclose objectstore/bluestore-comp-snappy rados recovery-overrides/{default} supported-random-distro$/{ubuntu_latest} thrashers/fastread thrashosds-health workloads/ec-rados-plugin=lrc-k=4-m=2-l=3} 3
pass 5976905 2021-03-18 10:18:26 2021-03-18 12:41:54 2021-03-18 13:16:42 0:34:48 0:23:14 0:11:34 smithi master ubuntu 18.04 rados/thrash-old-clients/{0-size-min-size-overrides/2-size-2-min-size 1-install/luminous-v1only backoff/peering_and_degraded ceph clusters/{openstack three-plus-one} d-balancer/on distro$/{ubuntu_18.04} mon_election/connectivity msgr-failures/few rados thrashers/careful thrashosds-health workloads/test_rbd_api} 3
pass 5976906 2021-03-18 10:18:27 2021-03-18 12:43:05 2021-03-18 13:08:48 0:25:43 0:15:00 0:10:43 smithi master centos 8.3 rados/verify/{centos_latest ceph clusters/{fixed-2 openstack} d-thrash/none mon_election/connectivity msgr-failures/few msgr/async-v2only objectstore/bluestore-comp-snappy rados tasks/rados_cls_all validater/lockdep} 2
pass 5976907 2021-03-18 10:18:28 2021-03-18 12:43:45 2021-03-18 13:18:55 0:35:10 0:27:54 0:07:16 smithi master rhel 8.3 rados/thrash-erasure-code-isa/{arch/x86_64 ceph clusters/{fixed-2 openstack} mon_election/connectivity msgr-failures/osd-delay objectstore/bluestore-comp-zlib rados recovery-overrides/{more-async-partial-recovery} supported-random-distro$/{rhel_8} thrashers/none thrashosds-health workloads/ec-rados-plugin=isa-k=2-m=1} 2
pass 5976908 2021-03-18 10:18:29 2021-03-18 12:43:45 2021-03-18 14:43:23 1:59:38 1:53:53 0:05:45 smithi master rhel 8.3 rados/standalone/{mon_election/classic supported-random-distro$/{rhel_8} workloads/scrub} 1
pass 5976909 2021-03-18 10:18:30 2021-03-18 12:43:46 2021-03-18 13:50:53 1:07:07 0:55:13 0:11:54 smithi master centos 8.2 rados/cephadm/with-work/{0-distro/centos_8.2_kubic_stable fixed-2 mode/root mon_election/classic msgr/async-v2only start tasks/rados_api_tests} 2
pass 5976910 2021-03-18 10:18:31 2021-03-18 12:45:46 2021-03-18 13:19:11 0:33:25 0:23:43 0:09:42 smithi master ubuntu 18.04 rados/thrash/{0-size-min-size-overrides/2-size-2-min-size 1-pg-log-overrides/normal_pg_log 2-recovery-overrides/{more-partial-recovery} backoff/peering_and_degraded ceph clusters/{fixed-2 openstack} crc-failures/bad_map_crc_failure d-balancer/crush-compat mon_election/classic msgr-failures/few msgr/async-v1only objectstore/bluestore-comp-zstd rados supported-random-distro$/{ubuntu_latest} thrashers/morepggrow thrashosds-health workloads/cache-snaps-balanced} 2
pass 5976911 2021-03-18 10:18:32 2021-03-18 12:45:46 2021-03-18 13:05:59 0:20:13 0:10:33 0:09:40 smithi master ubuntu 18.04 rados/singleton/{all/max-pg-per-osd.from-replica mon_election/classic msgr-failures/few msgr/async-v1only objectstore/bluestore-comp-zstd rados supported-random-distro$/{ubuntu_latest}} 1
pass 5976912 2021-03-18 10:18:33 2021-03-18 12:46:27 2021-03-18 13:24:51 0:38:24 0:29:02 0:09:22 smithi master centos 8.3 rados/singleton-nomsgr/{all/recovery-unfound-found mon_election/connectivity rados supported-random-distro$/{centos_8}} 1
fail 5976913 2021-03-18 10:18:34 2021-03-18 12:46:27 2021-03-18 13:06:12 0:19:45 0:08:51 0:10:54 smithi master ubuntu 20.04 rados/cephadm/smoke/{distro/ubuntu_20.04_kubic_stable fixed-2 mon_election/connectivity start} 2
Failure Reason:

Command failed on smithi180 with status 1: 'sudo /home/ubuntu/cephtest/cephadm --image quay.ceph.io/ceph-ci/ceph:0d3df9b9599b6294f204ae84913a36061e78fb76 shell -c /etc/ceph/ceph.conf -k /etc/ceph/ceph.client.admin.keyring --fsid 22a73e2a-87ea-11eb-9099-001a4aab830c -- ceph orch host ls --format=json'

pass 5976914 2021-03-18 10:18:35 2021-03-18 12:47:07 2021-03-18 15:32:07 2:45:00 2:35:36 0:09:24 smithi master ubuntu 18.04 rados/objectstore/{backends/filestore-idempotent supported-random-distro$/{ubuntu_latest}} 1
pass 5976915 2021-03-18 10:18:36 2021-03-18 12:47:08 2021-03-18 13:10:49 0:23:41 0:13:53 0:09:48 smithi master rhel 8.3 rados/thrash-erasure-code-shec/{ceph clusters/{fixed-4 openstack} mon_election/classic msgr-failures/few objectstore/bluestore-stupid rados recovery-overrides/{more-active-recovery} supported-random-distro$/{rhel_8} thrashers/default thrashosds-health workloads/ec-rados-plugin=shec-k=4-m=3-c=2} 4
pass 5976916 2021-03-18 10:18:37 2021-03-18 12:49:38 2021-03-18 13:21:50 0:32:12 0:20:32 0:11:40 smithi master ubuntu 20.04 rados/cephadm/smoke-roleless/{1-start 2-services/{basic rgw} 3-final distro/ubuntu_20.04_kubic_testing} 2
pass 5976917 2021-03-18 10:18:38 2021-03-18 12:50:29 2021-03-18 13:30:44 0:40:15 0:29:28 0:10:47 smithi master centos 8.3 rados/basic/{ceph clusters/{fixed-2 openstack} mon_election/classic msgr-failures/few msgr/async objectstore/bluestore-bitmap rados supported-random-distro$/{centos_8} tasks/rados_workunit_loadgen_mostlyread} 2
pass 5976918 2021-03-18 10:18:39 2021-03-18 12:50:59 2021-03-18 13:19:52 0:28:53 0:22:49 0:06:04 smithi master rhel 8.3 rados/multimon/{clusters/21 mon_election/classic msgr-failures/many msgr/async-v1only no_pools objectstore/bluestore-comp-lz4 rados supported-random-distro$/{rhel_8} tasks/mon_recovery} 3
pass 5976919 2021-03-18 10:18:40 2021-03-18 12:50:59 2021-03-18 13:08:08 0:17:09 0:11:35 0:05:34 smithi master rhel 8.3 rados/singleton/{all/mon-auth-caps mon_election/connectivity msgr-failures/many msgr/async-v2only objectstore/bluestore-hybrid rados supported-random-distro$/{rhel_8}} 1
pass 5976920 2021-03-18 10:18:40 2021-03-18 12:51:10 2021-03-18 13:35:53 0:44:43 0:33:18 0:11:25 smithi master ubuntu 20.04 rados/cephadm/thrash/{0-distro/ubuntu_20.04_kubic_stable 1-start 2-thrash 3-tasks/small-objects fixed-2 msgr/async-v1only root} 2
pass 5976921 2021-03-18 10:18:41 2021-03-18 12:52:20 2021-03-18 13:35:41 0:43:21 0:33:13 0:10:08 smithi master ubuntu 18.04 rados/perf/{ceph mon_election/classic objectstore/bluestore-low-osd-mem-target openstack scheduler/dmclock_default_shards settings/optimized ubuntu_18.04 workloads/radosbench_omap_write} 1
pass 5976922 2021-03-18 10:18:42 2021-03-18 12:52:20 2021-03-18 13:22:10 0:29:50 0:22:10 0:07:40 smithi master rhel 8.3 rados/thrash/{0-size-min-size-overrides/3-size-2-min-size 1-pg-log-overrides/short_pg_log 2-recovery-overrides/{more-partial-recovery} backoff/normal ceph clusters/{fixed-2 openstack} crc-failures/default d-balancer/on mon_election/connectivity msgr-failures/osd-delay msgr/async-v2only objectstore/bluestore-hybrid rados supported-random-distro$/{rhel_8} thrashers/none thrashosds-health workloads/cache-snaps} 2
pass 5976923 2021-03-18 10:18:43 2021-03-18 12:52:51 2021-03-18 13:25:33 0:32:42 0:27:21 0:05:21 smithi master rhel 8.3 rados/mgr/{clusters/{2-node-mgr} debug/mgr mon_election/connectivity objectstore/bluestore-comp-snappy supported-random-distro$/{rhel_8} tasks/module_selftest} 2
pass 5976924 2021-03-18 10:18:45 2021-03-18 12:52:51 2021-03-18 13:10:07 0:17:16 0:07:12 0:10:04 smithi master ubuntu 18.04 rados/singleton-nomsgr/{all/version-number-sanity mon_election/classic rados supported-random-distro$/{ubuntu_latest}} 1
pass 5976925 2021-03-18 10:18:46 2021-03-18 12:52:51 2021-03-18 13:15:36 0:22:45 0:11:34 0:11:11 smithi master centos 8.2 rados/cephadm/workunits/{0-distro/centos_8.2_kubic_stable mon_election/connectivity task/test_cephadm_repos} 1
pass 5976926 2021-03-18 10:18:47 2021-03-18 12:52:52 2021-03-18 13:51:30 0:58:38 0:51:23 0:07:15 smithi master rhel 8.3 rados/cephadm/with-work/{0-distro/rhel_8.3_kubic_stable fixed-2 mode/packaged mon_election/connectivity msgr/async start tasks/rados_python} 2
pass 5976927 2021-03-18 10:18:48 2021-03-18 12:54:12 2021-03-18 13:13:21 0:19:09 0:12:26 0:06:43 smithi master rhel 8.3 rados/singleton/{all/mon-config-key-caps mon_election/classic msgr-failures/none msgr/async objectstore/bluestore-low-osd-mem-target rados supported-random-distro$/{rhel_8}} 1
pass 5976928 2021-03-18 10:18:49 2021-03-18 12:54:12 2021-03-18 13:16:28 0:22:16 0:10:29 0:11:47 smithi master centos 8.3 rados/thrash/{0-size-min-size-overrides/2-size-2-min-size 1-pg-log-overrides/normal_pg_log 2-recovery-overrides/{default} backoff/peering ceph clusters/{fixed-2 openstack} crc-failures/bad_map_crc_failure d-balancer/crush-compat mon_election/classic msgr-failures/fastclose msgr/async objectstore/bluestore-low-osd-mem-target rados supported-random-distro$/{centos_8} thrashers/pggrow thrashosds-health workloads/cache} 2
pass 5976929 2021-03-18 10:18:49 2021-03-18 12:55:43 2021-03-18 13:24:02 0:28:19 0:15:51 0:12:28 smithi master ubuntu 20.04 rados/cephadm/smoke/{distro/ubuntu_20.04_kubic_testing fixed-2 mon_election/classic start} 2
pass 5976930 2021-03-18 10:18:50 2021-03-18 12:56:33 2021-03-18 14:05:25 1:08:52 0:57:12 0:11:40 smithi master centos 8.3 rados/dashboard/{clusters/{2-node-mgr} debug/mgr mon_election/connectivity random-objectstore$/{bluestore-comp-zstd} supported-random-distro$/{centos_8} tasks/dashboard} 2
pass 5976931 2021-03-18 10:18:51 2021-03-18 12:57:44 2021-03-18 13:20:47 0:23:03 0:15:02 0:08:01 smithi master centos 8.3 rados/singleton-nomsgr/{all/admin_socket_output mon_election/connectivity rados supported-random-distro$/{centos_8}} 1
pass 5976932 2021-03-18 10:18:52 2021-03-18 12:57:54 2021-03-18 13:18:48 0:20:54 0:12:19 0:08:35 smithi master centos 8.3 rados/standalone/{mon_election/connectivity supported-random-distro$/{centos_8} workloads/crush} 1
fail 5976933 2021-03-18 10:18:53 2021-03-18 12:57:54 2021-03-18 13:42:00 0:44:06 0:31:54 0:12:12 smithi master ubuntu 20.04 rados/upgrade/pacific-x/parallel/{0-start 1-tasks distro1$/{ubuntu_20.04} mon_election/connectivity upgrade-sequence workload/{ec-rados-default rados_api rados_loadgenbig rbd_import_export test_rbd_api test_rbd_python}} 2
Failure Reason:

Command failed on smithi155 with status 128: 'rm -rf /home/ubuntu/cephtest/clone.client.0 && git clone --depth 1 --branch pacific https://github.com/sseshasa/ceph.git /home/ubuntu/cephtest/clone.client.0 && cd /home/ubuntu/cephtest/clone.client.0'

fail 5976934 2021-03-18 10:18:54 2021-03-18 12:58:15 2021-03-18 13:34:36 0:36:21 0:25:23 0:10:58 smithi master centos 8.2 rados/cephadm/dashboard/{0-distro/centos_8.2_kubic_stable task/test_e2e} 2
Failure Reason:

Command failed (workunit test cephadm/test_dashboard_e2e.sh) on smithi035 with status 1: 'mkdir -p -- /home/ubuntu/cephtest/mnt.0/client.0/tmp && cd -- /home/ubuntu/cephtest/mnt.0/client.0/tmp && CEPH_CLI_TEST_DUP_COMMAND=1 CEPH_REF=88df47230b5ad85e95b0be2eca6f5763914b175c TESTDIR="/home/ubuntu/cephtest" CEPH_ARGS="--cluster ceph" CEPH_ID="0" PATH=$PATH:/usr/sbin CEPH_BASE=/home/ubuntu/cephtest/clone.client.0 CEPH_ROOT=/home/ubuntu/cephtest/clone.client.0 adjust-ulimits ceph-coverage /home/ubuntu/cephtest/archive/coverage timeout 3h /home/ubuntu/cephtest/clone.client.0/qa/workunits/cephadm/test_dashboard_e2e.sh'

dead 5976935 2021-03-18 10:18:56 2021-03-18 12:58:25 2021-03-18 13:44:36 0:46:11 smithi master ubuntu 18.04 rados/thrash-old-clients/{0-size-min-size-overrides/3-size-2-min-size 1-install/luminous backoff/normal ceph clusters/{openstack three-plus-one} d-balancer/crush-compat distro$/{ubuntu_18.04} mon_election/classic msgr-failures/osd-delay rados thrashers/default thrashosds-health workloads/cache-snaps} 3
pass 5976936 2021-03-18 10:18:57 2021-03-18 12:58:45 2021-03-18 13:22:13 0:23:28 0:16:10 0:07:18 smithi master rhel 8.3 rados/singleton/{all/mon-config-keys mon_election/connectivity msgr-failures/few msgr/async-v1only objectstore/bluestore-stupid rados supported-random-distro$/{rhel_8}} 1
pass 5976937 2021-03-18 10:18:58 2021-03-18 12:58:45 2021-03-18 13:20:20 0:21:35 0:09:52 0:11:43 smithi master ubuntu 20.04 rados/cephadm/orchestrator_cli/{2-node-mgr orchestrator_cli random-distro$/{ubuntu_20.04}} 2
pass 5976938 2021-03-18 10:18:59 2021-03-18 12:58:56 2021-03-18 13:58:06 0:59:10 0:49:11 0:09:59 smithi master centos 8.3 rados/monthrash/{ceph clusters/9-mons mon_election/classic msgr-failures/mon-delay msgr/async objectstore/bluestore-comp-zlib rados supported-random-distro$/{centos_8} thrashers/sync-many workloads/rados_mon_osdmap_prune} 2
pass 5976939 2021-03-18 10:19:00 2021-03-18 12:58:56 2021-03-18 13:31:52 0:32:56 0:20:31 0:12:25 smithi master ubuntu 18.04 rados/thrash-erasure-code/{ceph clusters/{fixed-2 openstack} fast/fast mon_election/connectivity msgr-failures/osd-delay objectstore/bluestore-comp-zlib rados recovery-overrides/{more-partial-recovery} supported-random-distro$/{ubuntu_latest} thrashers/default thrashosds-health workloads/ec-small-objects-fast-read} 2
pass 5976940 2021-03-18 10:19:01 2021-03-18 13:00:27 2021-03-18 13:40:12 0:39:45 0:29:26 0:10:19 smithi master centos 8.3 rados/thrash-erasure-code-big/{ceph cluster/{12-osds openstack} mon_election/classic msgr-failures/few objectstore/bluestore-comp-zlib rados recovery-overrides/{default} supported-random-distro$/{centos_8} thrashers/mapgap thrashosds-health workloads/ec-rados-plugin=jerasure-k=4-m=2} 3
pass 5976941 2021-03-18 10:19:02 2021-03-18 13:01:17 2021-03-18 13:40:49 0:39:32 0:28:33 0:10:59 smithi master centos 8.3 rados/verify/{centos_latest ceph clusters/{fixed-2 openstack} d-thrash/default/{default thrashosds-health} mon_election/classic msgr-failures/few msgr/async objectstore/bluestore-comp-zlib rados tasks/mon_recovery validater/valgrind} 2
pass 5976942 2021-03-18 10:19:03 2021-03-18 13:01:38 2021-03-18 13:40:54 0:39:16 0:27:06 0:12:10 smithi master ubuntu 18.04 rados/thrash-erasure-code-isa/{arch/x86_64 ceph clusters/{fixed-2 openstack} mon_election/classic msgr-failures/fastclose objectstore/bluestore-comp-zstd rados recovery-overrides/{more-active-recovery} supported-random-distro$/{ubuntu_latest} thrashers/pggrow thrashosds-health workloads/ec-rados-plugin=isa-k=2-m=1} 2
pass 5976943 2021-03-18 10:19:04 2021-03-18 13:03:28 2021-03-18 13:25:05 0:21:37 0:11:58 0:09:39 smithi master ubuntu 18.04 rados/perf/{ceph mon_election/connectivity objectstore/bluestore-stupid openstack scheduler/wpq_default_shards settings/optimized ubuntu_18.04 workloads/sample_fio} 1
pass 5976944 2021-03-18 10:19:05 2021-03-18 13:03:28 2021-03-18 13:41:23 0:37:55 0:30:23 0:07:32 smithi master rhel 8.3 rados/thrash/{0-size-min-size-overrides/3-size-2-min-size 1-pg-log-overrides/short_pg_log 2-recovery-overrides/{more-async-partial-recovery} backoff/peering_and_degraded ceph clusters/{fixed-2 openstack} crc-failures/default d-balancer/on mon_election/connectivity msgr-failures/few msgr/async-v1only objectstore/bluestore-stupid rados supported-random-distro$/{rhel_8} thrashers/careful thrashosds-health workloads/pool-snaps-few-objects} 2
pass 5976945 2021-03-18 10:19:06 2021-03-18 13:04:29 2021-03-18 13:24:22 0:19:53 0:09:08 0:10:45 smithi master centos 8.3 rados/singleton-nomsgr/{all/balancer mon_election/classic rados supported-random-distro$/{centos_8}} 1
pass 5976946 2021-03-18 10:19:07 2021-03-18 13:05:29 2021-03-18 13:53:03 0:47:34 0:36:53 0:10:41 smithi master centos 8.2 rados/cephadm/smoke/{distro/centos_8.2_kubic_stable fixed-2 mon_election/classic start} 2
pass 5976947 2021-03-18 10:19:08 2021-03-18 13:06:20 2021-03-18 13:29:44 0:23:24 0:10:39 0:12:45 smithi master ubuntu 18.04 rados/basic/{ceph clusters/{fixed-2 openstack} mon_election/connectivity msgr-failures/many msgr/async-v1only objectstore/bluestore-comp-lz4 rados supported-random-distro$/{ubuntu_latest} tasks/readwrite} 2
pass 5976948 2021-03-18 10:19:09 2021-03-18 13:08:10 2021-03-18 13:30:08 0:21:58 0:13:25 0:08:33 smithi master rhel 8.3 rados/thrash-erasure-code-shec/{ceph clusters/{fixed-4 openstack} mon_election/connectivity msgr-failures/osd-delay objectstore/filestore-xfs rados recovery-overrides/{default} supported-random-distro$/{rhel_8} thrashers/careful thrashosds-health workloads/ec-rados-plugin=shec-k=4-m=3-c=2} 4
pass 5976949 2021-03-18 10:19:10 2021-03-18 13:09:01 2021-03-18 13:44:04 0:35:03 0:29:07 0:05:56 smithi master rhel 8.3 rados/thrash-erasure-code-overwrites/{bluestore-bitmap ceph clusters/{fixed-2 openstack} fast/fast mon_election/classic msgr-failures/few rados recovery-overrides/{more-async-recovery} supported-random-distro$/{rhel_8} thrashers/fastread thrashosds-health workloads/ec-snaps-few-objects-overwrites} 2
fail 5976950 2021-03-18 10:19:11 2021-03-18 13:09:11 2021-03-18 14:44:31 1:35:20 1:24:05 0:11:15 smithi master centos 8.2 rados/cephadm/smoke-roleless/{1-start 2-services/{basic rgw} 3-final distro/centos_8.2_kubic_stable} 2
Failure Reason:

SELinux denials found on ubuntu@smithi070.front.sepia.ceph.com: ['type=AVC msg=audit(1616074401.826:7080): avc: denied { read } for pid=44849 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074598.067:8057): avc: denied { sendto } for pid=25025 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074667.090:8399): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074337.092:6782): avc: denied { getattr } for pid=34011 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074678.484:8452): avc: denied { signal } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074732.828:8716): avc: denied { read } for pid=25430 comm="mgr-fin" name="lib" dev="sda1" ino=394927 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074457.169:7373): avc: denied { read } for pid=74123 comm="msgr-worker-1" path="pipe:[265803]" dev="pipefs" ino=265803 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074757.090:8862): avc: denied { search } for pid=34011 comm="node_exporter" name="kernel" dev="proc" ino=165243 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074477.090:7463): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074522.460:7627): avc: denied { read } for pid=25049 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074395.396:7027): avc: denied { signal } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074694.912:8525): avc: denied { read } for pid=25430 comm="safe_timer" name="os-release" dev="overlay" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074625.338:8154): avc: denied { remove_name } for pid=42158 comm="grafana-server" name="grafana.db-journal" dev="overlay" ino=1970756 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074471.735:7422): avc: denied { write } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074591.066:7919): avc: denied { write } for pid=25430 comm="safe_timer" path="pipe:[139132]" dev="pipefs" ino=139132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074477.091:7471): avc: denied { read } for pid=34011 comm="node_exporter" name="entropy_avail" dev="proc" ino=161409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074594.041:7976): avc: denied { search } for pid=25430 comm="mgr-fin" name="usr" dev="sda1" ino=789157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074335.640:6741): avc: denied { write } for pid=25025 comm="conmon" name="socket" dev="tmpfs" ino=14322 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074467.449:7400): avc: denied { search } for pid=25049 comm="safe_timer" name="var" dev="sda1" ino=1443987 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c220,c900 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074477.091:7473): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074327.091:6704): avc: denied { search } for pid=34011 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616074617.090:8142): avc: denied { search } for pid=34011 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616074475.396:7444): avc: denied { signal } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074540.816:7766): avc: denied { read } for pid=42158 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074731.126:8683): avc: denied { search } for pid=25430 comm="safe_timer" name="etc" dev="sda1" ino=1444007 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074317.091:6635): avc: denied { search } for pid=34011 comm="node_exporter" name="1" dev="proc" ino=160800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074595.396:8008): avc: denied { create } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074677.089:8431): avc: denied { search } for pid=34011 comm="node_exporter" name="7" dev="proc" ino=153578 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074609.041:8083): avc: denied { search } for pid=25430 comm="mgr-fin" name="/" dev="overlay" ino=1443998 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074731.126:8683): avc: denied { read } for pid=25430 comm="safe_timer" name="os-release" dev="overlay" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074457.089:7347): avc: denied { search } for pid=34011 comm="node_exporter" name="7" dev="proc" ino=153578 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074397.090:7045): avc: denied { read } for pid=34011 comm="node_exporter" name="addr_assign_type" dev="sysfs" ino=35292 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074471.347:7407): avc: denied { write } for pid=25430 comm="safe_timer" path="pipe:[139132]" dev="pipefs" ino=139132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074477.091:7471): avc: denied { search } for pid=34011 comm="node_exporter" name="kernel" dev="proc" ino=165243 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074667.090:8390): avc: denied { search } for pid=34011 comm="node_exporter" name="1" dev="proc" ino=160800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074453.816:7292): avc: denied { search } for pid=42158 comm="grafana-server" name="/" dev="overlay" ino=1968511 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074336.817:6756): avc: denied { open } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/rbd-details.json" dev="overlay" ino=1574987 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074397.089:7040): avc: denied { search } for pid=34011 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074521.919:7605): avc: denied { search } for pid=25430 comm="safe_timer" name="etc" dev="sda1" ino=1444007 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074609.486:8085): avc: denied { write } for pid=25049 comm="fn_monstore" path="pipe:[122606]" dev="pipefs" ino=122606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074746.816:8797): avc: denied { read } for pid=40720 comm="msgr-worker-0" path="socket:[224027]" dev="sockfs" ino=224027 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074452.447:7254): avc: denied { getattr } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074677.793:8446): avc: denied { write } for pid=56060 comm="tp_osd_tp" path="pipe:[220215]" dev="pipefs" ino=220215 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074677.089:8435): avc: denied { read } for pid=34011 comm="node_exporter" name="ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074457.599:7379): avc: denied { getattr } for pid=25430 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074617.090:8141): avc: denied { search } for pid=34011 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074522.816:7639): avc: denied { lock } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074386.067:6919): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074539.992:7749): avc: denied { read } for pid=25430 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074737.497:8766): avc: denied { getattr } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074477.090:7465): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=43630 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074455.396:7324): avc: denied { search } for pid=42970 comm="prometheus" name="/" dev="overlay" ino=1968522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c364 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074386.438:6925): avc: denied { read } for pid=56060 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074399.816:7061): avc: denied { lock } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074455.396:7331): avc: denied { write } for pid=42970 comm="prometheus" path="socket:[307026]" dev="sockfs" ino=307026 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074539.992:7749): avc: denied { open } for pid=25430 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074317.090:6627): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/7/net/arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074592.284:7946): avc: denied { open } for pid=25430 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074674.045:8425): avc: denied { read } for pid=25430 comm="mgr-fin" name="localtime" dev="sda1" ino=394696 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074456.067:7334): avc: denied { lock } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074677.090:8436): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/sys/fs/xfs/stats/stats" dev="sysfs" ino=45563 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074397.089:7040): avc: denied { read } for pid=34011 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074729.568:8642): avc: denied { write } for pid=25049 comm="fn_monstore" path="pipe:[122606]" dev="pipefs" ino=122606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074729.708:8650): avc: denied { open } for pid=56060 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074402.816:7096): avc: denied { read open } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074747.197:8814): avc: denied { read } for pid=25049 comm="msgr-worker-1" path="socket:[269736]" dev="sockfs" ino=269736 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074747.816:8836): avc: denied { getattr } for pid=42158 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074318.816:6667): avc: denied { lock } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074729.855:8662): avc: denied { search } for pid=44849 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970624 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c792,c938 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074401.664:7074): avc: denied { search } for pid=25025 comm="conmon" name="systemd" dev="tmpfs" ino=14032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074663.833:8372): avc: denied { signal } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074472.457:7435): avc: denied { search } for pid=40720 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970655 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c69,c600 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074605.397:8062): avc: denied { append } for pid=42970 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c364 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074677.793:8448): avc: denied { write } for pid=40720 comm="msgr-worker-1" laddr=172.21.15.70 lport=6802 faddr=172.21.15.103 fport=44140 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074594.308:7996): avc: denied { read } for pid=25430 comm="safe_timer" name="os-release" dev="overlay" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074609.486:8087): avc: denied { sendto } for pid=25025 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074540.816:7764): avc: denied { read } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074407.093:7141): avc: denied { read } for pid=34011 comm="node_exporter" name="file-nr" dev="proc" ino=163278 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074335.639:6738): avc: denied { write } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db/000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074595.396:8012): avc: denied { getattr } for pid=42970 comm="prometheus" laddr=172.21.15.70 lport=48479 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074747.199:8815): avc: denied { append } for pid=25430 comm="log" path="/var/log/ceph/ceph-mgr.smithi070.farums.log" dev="sda1" ino=396140 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074325.396:6689): avc: denied { search } for pid=42970 comm="prometheus" name="etc" dev="sda1" ino=1970616 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c364 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074757.090:8865): avc: denied { read } for pid=34011 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074452.447:7252): avc: denied { search } for pid=25049 comm="safe_timer" name="mon.smithi070" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074471.661:7416): avc: denied { read } for pid=25430 comm="safe_timer" name="meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074594.816:7999): avc: denied { read } for pid=42158 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074316.879:6602): avc: denied { read } for pid=25430 comm="safe_timer" name="os-release" dev="overlay" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074747.090:8805): avc: denied { search } for pid=34011 comm="node_exporter" name="user" dev="tmpfs" ino=2237 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074475.396:7446): avc: denied { create } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074337.092:6783): avc: denied { getattr } for pid=34011 comm="node_exporter" name="/" dev="tmpfs" ino=14024 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074313.492:6556): avc: denied { open } for pid=44849 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074527.090:7709): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=162545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074522.813:7632): avc: denied { write } for pid=25025 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074387.089:6929): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074592.296:7948): avc: denied { open } for pid=25430 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074324.816:6686): avc: denied { search } for pid=42158 comm="grafana-server" name="etc" dev="sda1" ino=1968517 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074536.815:7730): avc: denied { sendto } for pid=25025 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074403.335:7102): avc: denied { getattr } for pid=25430 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074407.090:7121): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=43630 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074627.090:8168): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074597.090:8030): avc: denied { read } for pid=34011 comm="node_exporter" name="mounts" dev="proc" ino=162545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074608.617:8073): avc: denied { read } for pid=25049 comm="msgr-worker-1" path="socket:[164284]" dev="sockfs" ino=164284 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074323.349:6680): avc: denied { write } for pid=74123 comm="msgr-worker-0" laddr=172.21.15.70 lport=55044 faddr=172.21.15.103 fport=6808 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074527.090:7699): avc: denied { read } for pid=34011 comm="node_exporter" name="mc" dev="sysfs" ino=21498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074335.396:6732): avc: denied { getattr } for pid=42970 comm="prometheus" laddr=172.21.15.70 lport=59738 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074757.090:8862): avc: denied { search } for pid=34011 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074625.212:8153): avc: denied { dac_override } for pid=42158 comm="grafana-server" capability=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074459.816:7386): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074456.067:7336): avc: denied { read } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074612.475:8107): avc: denied { getattr } for pid=25049 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074457.090:7367): avc: denied { search } for pid=34011 comm="node_exporter" name="host" dev="sda1" ino=1970499 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c602,c840 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074317.091:6638): avc: denied { getattr } for pid=34011 comm="node_exporter" name="/" dev="tmpfs" ino=14024 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074467.648:7402): avc: denied { search } for pid=25430 comm="safe_timer" name="etc" dev="sda1" ino=1444007 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074317.419:6656): avc: denied { search } for pid=25049 comm="safe_timer" name="/" dev="overlay" ino=1443979 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c220,c900 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074678.277:8451): avc: denied { open } for pid=44849 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074660.816:8311): avc: denied { read } for pid=42158 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074592.059:7940): avc: denied { write } for pid=25025 comm="conmon" name="socket" dev="tmpfs" ino=14322 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074660.816:8311): avc: denied { read } for pid=42158 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074625.212:8153): avc: denied { write } for pid=42158 comm="grafana-server" name="grafana" dev="sda1" ino=1970633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074524.815:7671): avc: denied { use } for pid=25049 comm="fn_monstore" path="pipe:[122606]" dev="pipefs" ino=122606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074317.089:6622): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc/7" dev="proc" ino=153578 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074477.091:7471): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=161409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074471.816:7424): avc: denied { getattr } for pid=42158 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074527.090:7704): avc: denied { read } for pid=34011 comm="node_exporter" name="hwmon0" dev="sysfs" ino=35483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074678.277:8450): avc: denied { read } for pid=44849 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074386.067:6918): avc: denied { read } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074593.901:7972): avc: denied { write } for pid=50591 comm="tp_osd_tp" path="pipe:[202353]" dev="pipefs" ino=202353 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074387.089:6936): avc: denied { open } for pid=34011 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074660.705:8304): avc: denied { getattr } for pid=25430 comm="safe_timer" name="os-release" dev="sda1" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074547.091:7801): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/sys/class/net/eno1" dev="sysfs" ino=35284 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074335.095:6718): avc: denied { search } for pid=40720 comm="safe_timer" name="/" dev="overlay" ino=1970655 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c69,c600 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074617.089:8136): avc: denied { read } for pid=34011 comm="node_exporter" name="arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074527.461:7718): avc: denied { read } for pid=25049 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074667.090:8395): avc: denied { read } for pid=34011 comm="node_exporter" name="mc" dev="sysfs" ino=21498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074387.091:6953): avc: denied { read } for pid=34011 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074456.816:7342): avc: denied { read } for pid=42158 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074687.089:8500): avc: denied { search } for pid=34011 comm="node_exporter" name="7" dev="proc" ino=153578 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074401.719:7079): avc: denied { open } for pid=44849 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074385.653:6910): avc: denied { search } for pid=25025 comm="conmon" name="journal" dev="tmpfs" ino=14310 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074336.816:6752): avc: denied { getattr } for pid=42158 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074395.396:7028): avc: denied { search } for pid=42970 comm="prometheus" name="etc" dev="sda1" ino=1970616 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c364 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074407.092:7138): avc: denied { search } for pid=34011 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074521.907:7603): avc: denied { read } for pid=25430 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074313.426:6546): avc: denied { read } for pid=25049 comm="msgr-worker-2" path="pipe:[123409]" dev="pipefs" ino=123409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074667.090:8396): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074747.498:8823): avc: denied { search } for pid=25049 comm="safe_timer" name="/" dev="overlay" ino=1443979 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c220,c900 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074387.090:6940): avc: denied { read } for pid=34011 comm="node_exporter" name="stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074685.395:8494): avc: denied { connect } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074737.089:8740): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=161399 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074323.425:6683): avc: denied { search } for pid=25025 comm="conmon" name="journal" dev="tmpfs" ino=14310 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074591.193:7925): avc: denied { read } for pid=50591 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074315.396:6568): avc: denied { getattr } for pid=42970 comm="prometheus" path="/etc/hosts" dev="tmpfs" ino=186485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074615.396:8112): avc: denied { create } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074677.089:8432): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=161399 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074457.090:7370): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074395.396:7032): avc: denied { getattr } for pid=42970 comm="prometheus" laddr=172.21.15.70 lport=42785 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074667.090:8398): avc: denied { search } for pid=34011 comm="node_exporter" name="fs" dev="proc" ino=163277 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074747.816:8841): avc: denied { open } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074594.308:7997): avc: denied { getattr } for pid=25430 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074389.274:7017): avc: denied { read } for pid=25430 comm="safe_timer" name="os-release" dev="sda1" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074591.816:7930): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/etc" dev="sda1" ino=1968517 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074595.363:8005): avc: denied { search } for pid=56060 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c563,c789 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074625.211:8151): avc: denied { search } for pid=42158 comm="grafana-server" name="var" dev="sda1" ino=1968527 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074735.816:8736): avc: denied { read } for pid=42158 comm="grafana-server" name="pool-overview.json" dev="sda1" ino=1574983 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074729.816:8660): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="sda1" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074315.396:6569): avc: denied { create } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074407.090:7127): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074521.919:7606): avc: denied { getattr } for pid=25430 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074665.396:8375): avc: denied { search } for pid=42970 comm="prometheus" name="etc" dev="sda1" ino=1970616 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c364 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074678.816:8465): avc: denied { getattr } for pid=42158 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074678.277:8450): avc: denied { search } for pid=44849 comm="safe_timer" name="/" dev="overlay" ino=1970624 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c792,c938 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074453.587:7290): avc: denied { read } for pid=25430 comm="safe_timer" name="os-release" dev="sda1" ino=394714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074402.816:7091): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074313.431:6551): avc: denied { write } for pid=25025 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074452.447:7251): avc: denied { dac_read_search } for pid=25049 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074747.197:8811): avc: denied { read } for pid=74575 comm="msgr-worker-0" path="pipe:[270595]" dev="pipefs" ino=270595 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074397.091:7052): avc: denied { getattr } for pid=34011 comm="node_exporter" name="/" dev="tmpfs" ino=14024 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074337.090:6770): avc: denied { open } for pid=34011 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074452.242:7243): avc: denied { search } for pid=50591 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1970693 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074747.091:8808): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/7/net/sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074335.396:6734): avc: denied { read } for pid=42970 comm="prometheus" path="socket:[291872]" dev="sockfs" ino=291872 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074523.919:7662): avc: denied { search } for pid=25430 comm="safe_timer" name="/" dev="overlay" ino=1443998 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074387.816:6992): avc: denied { read open } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074385.653:6910): avc: denied { write } for pid=25025 comm="conmon" name="socket" dev="tmpfs" ino=14322 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074528.484:7725): avc: denied { signal } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074757.093:8876): avc: denied { search } for pid=34011 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074594.816:7999): avc: denied { read open } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074483.831:7482): avc: denied { getattr } for pid=42970 comm="prometheus" path="/prometheus/queries.active" dev="dm-4" ino=158 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c364 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074540.816:7765): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074315.816:6582): avc: denied { read } for pid=42158 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074679.500:8474): avc: denied { sendto } for pid=25025 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074731.126:8683): avc: denied { open } for pid=25430 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074523.919:7662): avc: denied { search } for pid=25430 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074457.090:7351): avc: denied { search } for pid=34011 comm="node_exporter" name="1" dev="proc" ino=160800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074337.089:6765): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=161399 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074679.500:8474): avc: denied { search } for pid=25025 comm="conmon" name="journal" dev="tmpfs" ino=14310 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074313.492:6557): avc: denied { open } for pid=44849 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074547.090:7794): avc: denied { read } for pid=34011 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074522.817:7642): avc: denied { read open } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074665.397:8385): avc: denied { append } for pid=42970 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c364 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074315.396:6570): avc: denied { setopt } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074402.816:7096): avc: denied { read } for pid=42158 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074337.089:6765): avc: denied { read } for pid=34011 comm="node_exporter" name="fd" dev="proc" ino=161399 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074317.419:6659): avc: denied { getattr } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074596.320:8022): avc: denied { getattr } for pid=25430 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074678.801:8461): avc: denied { read } for pid=25430 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074747.498:8823): avc: denied { dac_read_search } for pid=25049 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074747.197:8812): avc: denied { write } for pid=74123 comm="msgr-worker-1" laddr=172.21.15.70 lport=37938 faddr=172.21.15.70 fport=3300 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074747.089:8804): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074744.816:8784): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074745.396:8787): avc: denied { create } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074527.090:7709): avc: denied { search } for pid=34011 comm="node_exporter" name="1" dev="proc" ino=160800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074617.090:8141): avc: denied { search } for pid=34011 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074677.089:8435): avc: denied { open } for pid=34011 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074667.089:8387): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc/7" dev="proc" ino=153578 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074594.296:7994): avc: denied { read } for pid=25430 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074387.090:6939): avc: denied { search } for pid=34011 comm="node_exporter" name="net" dev="proc" ino=153584 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074668.753:8416): avc: denied { search } for pid=25430 comm="safe_timer" name="usr" dev="sda1" ino=789157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074627.089:8166): avc: denied { read } for pid=34011 comm="node_exporter" name="arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074315.816:6582): avc: denied { open } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074737.582:8768): avc: denied { sendto } for pid=25025 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074667.089:8389): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=161399 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074314.023:6562): avc: denied { getattr } for pid=25430 comm="mgr-fin" path="/usr/share/zoneinfo/UTC" dev="overlay" ino=1312328 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074597.090:8040): avc: denied { read } for pid=34011 comm="node_exporter" name="stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074677.497:8441): avc: denied { search } for pid=25025 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074592.472:7950): avc: denied { search } for pid=25049 comm="safe_timer" name="/" dev="overlay" ino=1443979 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c220,c900 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074609.704:8093): avc: denied { read } for pid=40720 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074397.091:7054): avc: denied { search } for pid=34011 comm="node_exporter" name="/" dev="tmpfs" ino=14023 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074733.138:8723): avc: denied { read } for pid=25430 comm="safe_timer" name="os-release" dev="overlay" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074677.793:8444): avc: denied { append } for pid=40720 comm="log" path="/var/log/ceph/ceph-osd.0.log" dev="sda1" ino=396207 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074747.816:8840): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074547.091:7805): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=161409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074397.091:7056): avc: denied { search } for pid=34011 comm="node_exporter" name="host" dev="sda1" ino=1970499 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c602,c840 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074395.396:7034): avc: denied { read } for pid=42970 comm="prometheus" path="socket:[294901]" dev="sockfs" ino=294901 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074596.065:8016): avc: denied { use } for pid=25049 comm="fn_monstore" path="pipe:[122606]" dev="pipefs" ino=122606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074527.089:7692): avc: denied { read } for pid=34011 comm="node_exporter" name="fd" dev="proc" ino=161399 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074407.089:7117): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=161398 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074317.092:6642): avc: denied { search } for pid=34011 comm="node_exporter" name="/" dev="overlay" ino=1970490 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c602,c840 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074471.661:7418): avc: denied { read } for pid=25430 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074609.041:8083): avc: denied { search } for pid=25430 comm="mgr-fin" name="usr" dev="sda1" ino=789157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074609.816:8094): avc: denied { search } for pid=42158 comm="grafana-server" name="etc" dev="sda1" ino=1968517 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074547.091:7806): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074663.817:8368): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074317.089:6623): avc: denied { search } for pid=34011 comm="node_exporter" name="7" dev="proc" ino=153578 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074402.816:7093): avc: denied { lock } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074457.090:7365): avc: denied { search } for pid=34011 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074387.680:6989): avc: denied { search } for pid=44849 comm="safe_timer" name="diff" dev="sda1" ino=1970624 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074545.396:7779): avc: denied { search } for pid=42970 comm="prometheus" name="etc" dev="sda1" ino=1970616 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c364 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074678.582:8459): avc: denied { search } for pid=40720 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970655 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c69,c600 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074591.816:7929): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074336.999:6761): avc: denied { getattr } for pid=25430 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074315.816:6577): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074597.091:8050): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=161409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074674.045:8425): avc: denied { read } for pid=25430 comm="mgr-fin" name="localtime" dev="overlay" ino=394696 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074609.486:8087): avc: denied { search } for pid=25025 comm="conmon" name="journal" dev="tmpfs" ino=14310 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074471.816:7426): avc: denied { lock } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074617.088:8126): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074667.090:8392): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074453.587:7290): avc: denied { getattr } for pid=25430 comm="safe_timer" name="os-release" dev="sda1" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074337.090:6773): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=43630 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074471.261:7406): avc: denied { append } for pid=40720 comm="log" path="/var/log/ceph/ceph-osd.0.log" dev="sda1" ino=396207 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074617.088:8120): avc: denied { search } for pid=34011 comm="node_exporter" name="/" dev="overlay" ino=1970490 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c602,c840 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074453.816:7295): avc: denied { read } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074617.089:8134): avc: denied { open } for pid=34011 comm="node_exporter" path="/sys/devices/system/cpu/cpu0/topology/physical_package_id" dev="sysfs" ino=28908 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074591.070:7922): avc: denied { read } for pid=40720 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074678.813:8463): avc: denied { read } for pid=25430 comm="safe_timer" name="os-release" dev="sda1" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074521.919:7605): avc: denied { read } for pid=25430 comm="safe_timer" name="os-release" dev="sda1" ino=394714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074545.396:7785): avc: denied { getattr } for pid=42970 comm="prometheus" laddr=172.21.15.70 lport=54370 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074592.472:7950): avc: denied { search } for pid=25049 comm="safe_timer" name="var" dev="sda1" ino=1443987 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c220,c900 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074525.816:7687): avc: denied { read open } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074591.193:7925): avc: denied { open } for pid=50591 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074472.450:7431): avc: denied { search } for pid=25049 comm="safe_timer" name="/" dev="overlay" ino=1443979 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c220,c900 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074453.817:7297): avc: denied { read open } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074592.058:7937): avc: denied { write } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074592.059:7940): avc: denied { write } for pid=25025 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074597.090:8042): avc: denied { getattr } for pid=34011 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074747.197:8810): avc: denied { write } for pid=74123 comm="safe_timer" path="pipe:[265803]" dev="pipefs" ino=265803 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074337.090:6771): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/sys/fs/xfs/stats/stats" dev="sysfs" ino=45563 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074457.089:7346): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc/7" dev="proc" ino=153578 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074471.661:7415): avc: denied { search } for pid=44849 comm="safe_timer" name="/" dev="overlay" ino=1970624 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c792,c938 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074609.816:8094): avc: denied { search } for pid=42158 comm="grafana-server" name="/" dev="overlay" ino=1968511 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074659.613:8292): avc: denied { write } for pid=25025 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074402.435:7083): avc: denied { read } for pid=25049 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074452.681:7259): avc: denied { search } for pid=56060 comm="safe_timer" name="/" dev="overlay" ino=1970712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c563,c789 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074592.472:7950): avc: denied { dac_read_search } for pid=25049 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074452.447:7255): avc: denied { write } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074595.396:8007): avc: denied { search } for pid=42970 comm="prometheus" name="/" dev="overlay" ino=1968522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c364 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074667.089:8389): avc: denied { read } for pid=34011 comm="node_exporter" name="fd" dev="proc" ino=161399 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074387.091:6952): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=161409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074387.091:6943): avc: denied { getattr } for pid=34011 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074527.090:7706): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074617.088:8125): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=163278 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074317.090:6629): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074477.090:7469): avc: denied { read } for pid=34011 comm="node_exporter" name="mounts" dev="proc" ino=162545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074540.810:7756): avc: denied { search } for pid=25025 comm="conmon" name="/" dev="tmpfs" ino=14023 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074733.138:8723): avc: denied { open } for pid=25430 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074315.816:6577): avc: denied { search } for pid=42158 comm="grafana-server" name="/" dev="overlay" ino=1968511 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074522.816:7637): avc: denied { getattr } for pid=42158 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074387.656:6988): avc: denied { search } for pid=25025 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074337.090:6776): avc: denied { search } for pid=34011 comm="node_exporter" name="kernel" dev="proc" ino=165243 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074527.092:7715): avc: denied { search } for pid=34011 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616074729.816:8661): avc: denied { read } for pid=42158 comm="grafana-server" name="osds-overview.json" dev="sda1" ino=1574981 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074477.090:7466): avc: denied { read } for pid=34011 comm="node_exporter" name="hwmon0" dev="sysfs" ino=35483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074665.396:8383): avc: denied { write } for pid=42970 comm="prometheus" path="socket:[348524]" dev="sockfs" ino=348524 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074687.090:8512): avc: denied { search } for pid=34011 comm="node_exporter" name="net" dev="proc" ino=153584 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074674.777:8428): avc: denied { open } for pid=25430 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074317.090:6626): avc: denied { read } for pid=34011 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074747.816:8841): avc: denied { read } for pid=42158 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074471.816:7424): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074324.630:6685): avc: denied { search } for pid=44849 comm="safe_timer" name="/" dev="overlay" ino=1970624 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c792,c938 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074729.423:8638): avc: denied { read } for pid=25430 comm="msgr-worker-0" path="socket:[271715]" dev="sockfs" ino=271715 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074387.261:6958): avc: denied { search } for pid=25430 comm="safe_timer" name="libpod-6a25c082565bd3ed2efe9bc44b0985e4ada790df478c338ace111c62aac839e4.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074527.090:7696): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=21498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074747.089:8803): avc: denied { read } for pid=34011 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074402.435:7085): avc: denied { getattr } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074659.369:8279): avc: denied { open } for pid=50591 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074337.089:6764): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=161398 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074603.833:8058): avc: denied { read } for pid=42970 comm="prometheus" name="data" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c364 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074399.816:7063): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074317.581:6661): avc: denied { open } for pid=44849 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074527.089:7692): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=161399 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074333.816:6710): avc: denied { read open } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074522.816:7637): avc: denied { search } for pid=42158 comm="grafana-server" name="/" dev="overlay" ino=1968511 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074387.089:6931): avc: denied { read } for pid=34011 comm="node_exporter" name="stat" dev="proc" ino=161398 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074729.816:8654): avc: denied { getattr } for pid=42158 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074687.090:8502): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074407.091:7132): avc: denied { read } for pid=34011 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074405.396:7109): avc: denied { setopt } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074336.987:6758): avc: denied { read } for pid=25430 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074477.090:7459): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/7/net/sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074731.978:8702): avc: denied { search } for pid=56060 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1970712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074477.090:7468): avc: denied { open } for pid=34011 comm="node_exporter" path="/sys/fs/xfs/dm-4/stats/stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074527.092:7711): avc: denied { search } for pid=34011 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074457.599:7380): avc: denied { read } for pid=25430 comm="safe_timer" name="os-release" dev="sda1" ino=394714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074317.635:6662): avc: denied { sendto } for pid=25025 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074337.091:6780): avc: denied { read } for pid=34011 comm="node_exporter" name="file-nr" dev="proc" ino=163278 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074609.041:8083): avc: denied { getattr } for pid=25430 comm="mgr-fin" name="UTC" dev="sda1" ino=1312328 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074332.421:6706): avc: denied { read } for pid=25049 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074665.396:8380): avc: denied { connect } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074453.816:7296): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074591.070:7922): avc: denied { search } for pid=40720 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970655 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c69,c600 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074336.067:6749): avc: denied { read } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074522.816:7640): avc: denied { read } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074545.396:7783): avc: denied { setopt } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074392.433:7025): avc: denied { dac_read_search } for pid=25049 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074402.751:7090): avc: denied { search } for pid=56060 comm="safe_timer" name="/" dev="overlay" ino=1970712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c563,c789 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074744.816:8783): avc: denied { read } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074337.089:6762): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074452.681:7260): avc: denied { search } for pid=56060 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074685.395:8495): avc: denied { getattr } for pid=42970 comm="prometheus" laddr=172.21.15.70 lport=34922 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074660.693:8301): avc: denied { search } for pid=25430 comm="safe_timer" name="/" dev="overlay" ino=1443998 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074615.396:8116): avc: denied { getattr } for pid=42970 comm="prometheus" laddr=172.21.15.70 lport=37044 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074385.652:6906): avc: denied { write } for pid=25049 comm="msgr-worker-2" laddr=172.21.15.70 lport=3300 faddr=172.21.15.103 fport=47758 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074687.090:8514): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074387.089:6936): avc: denied { read } for pid=34011 comm="node_exporter" name="xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074539.993:7750): avc: denied { getattr } for pid=25430 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074540.816:7766): avc: denied { open } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074477.090:7462): avc: denied { search } for pid=34011 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074678.816:8468): avc: denied { read } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074317.090:6626): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074663.480:8358): avc: denied { search } for pid=40720 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970655 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c69,c600 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074729.816:8661): avc: denied { open } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/osds-overview.json" dev="overlay" ino=1574981 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074471.661:7417): avc: denied { search } for pid=44849 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074457.089:7347): avc: denied { read } for pid=34011 comm="node_exporter" name="stat" dev="proc" ino=161398 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074667.485:8413): avc: denied { read } for pid=25049 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074687.093:8522): avc: denied { search } for pid=34011 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074527.092:7713): avc: denied { search } for pid=34011 comm="node_exporter" name="/" dev="tmpfs" ino=14023 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074407.091:7134): avc: denied { search } for pid=34011 comm="node_exporter" name="kernel" dev="proc" ino=165243 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074678.816:8469): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074737.090:8753): avc: denied { open } for pid=34011 comm="node_exporter" path="/sys/fs/xfs/dm-4/stats/stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074735.580:8734): avc: denied { search } for pid=25025 comm="conmon" name="/" dev="tmpfs" ino=14023 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074747.199:8817): avc: denied { search } for pid=25430 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074524.815:7671): avc: denied { write } for pid=25049 comm="fn_monstore" path="pipe:[122606]" dev="pipefs" ino=122606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074660.816:8307): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/etc" dev="sda1" ino=1968517 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074457.090:7364): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=161409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074592.296:7948): avc: denied { read } for pid=25430 comm="safe_timer" name="os-release" dev="overlay" ino=394714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074625.211:8150): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/var/lib/grafana/png" dev="overlay" ino=1968520 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074737.090:8743): avc: denied { search } for pid=34011 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074591.816:7934): avc: denied { read } for pid=42158 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074522.460:7627): avc: denied { open } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074387.089:6934): avc: denied { read } for pid=34011 comm="node_exporter" name="mounts" dev="proc" ino=162545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074336.817:6756): avc: denied { read } for pid=42158 comm="grafana-server" name="rbd-details.json" dev="sda1" ino=1574987 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074453.587:7291): avc: denied { getattr } for pid=25430 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074547.089:7790): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc/7" dev="proc" ino=153578 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074457.448:7375): avc: denied { open } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074387.261:6960): avc: denied { search } for pid=25430 comm="safe_timer" name="usr" dev="sda1" ino=789157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074747.596:8831): avc: denied { search } for pid=25025 comm="conmon" name="systemd" dev="tmpfs" ino=14032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074667.090:8408): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=161409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074335.410:6736): avc: denied { search } for pid=56060 comm="safe_timer" name="/" dev="overlay" ino=1970712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c563,c789 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074683.253:8484): avc: denied { getattr } for pid=98027 comm="pgrep" path="/proc/25025" dev="proc" ino=121537 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074545.396:7787): avc: denied { read } for pid=42970 comm="prometheus" path="socket:[325225]" dev="sockfs" ino=325225 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074335.396:6729): avc: denied { setopt } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074679.500:8472): avc: denied { write } for pid=25049 comm="fn_monstore" path="pipe:[122606]" dev="pipefs" ino=122606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074672.547:8419): avc: denied { write } for pid=30367 comm="ssh" path="pipe:[147605]" dev="pipefs" ino=147605 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074737.090:8747): avc: denied { read } for pid=34011 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074617.088:8125): avc: denied { search } for pid=34011 comm="node_exporter" name="fs" dev="proc" ino=163277 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074395.396:7028): avc: denied { search } for pid=42970 comm="prometheus" name="/" dev="overlay" ino=1968522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c364 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074471.347:7408): avc: denied { read } for pid=25430 comm="msgr-worker-1" path="pipe:[139132]" dev="pipefs" ino=139132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074597.473:8055): avc: denied { search } for pid=25049 comm="safe_timer" name="var" dev="sda1" ino=1443987 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c220,c900 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074737.090:8752): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074678.816:8465): avc: denied { search } for pid=42158 comm="grafana-server" name="/" dev="overlay" ino=1968511 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074457.090:7368): avc: denied { search } for pid=34011 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074597.090:8030): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=162545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074314.853:6564): avc: denied { read } for pid=25430 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074522.816:7638): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/etc" dev="sda1" ino=1968517 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074477.091:7470): avc: denied { search } for pid=34011 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074402.434:7082): avc: denied { search } for pid=25049 comm="safe_timer" name="var" dev="sda1" ino=1443987 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c220,c900 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074334.987:6715): avc: denied { read } for pid=25430 comm="safe_timer" name="os-release" dev="sda1" ino=394714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074659.613:8290): avc: denied { use } for pid=25049 comm="fn_monstore" path="pipe:[122606]" dev="pipefs" ino=122606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074315.396:6571): avc: denied { connect } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074682.488:8480): avc: denied { search } for pid=25049 comm="safe_timer" name="/" dev="overlay" ino=1443979 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c220,c900 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074387.261:6960): avc: denied { getattr } for pid=25430 comm="safe_timer" name="os-release" dev="sda1" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074521.907:7603): avc: denied { search } for pid=25430 comm="safe_timer" name="libpod-6a25c082565bd3ed2efe9bc44b0985e4ada790df478c338ace111c62aac839e4.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074455.396:7325): avc: denied { create } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074745.396:8788): avc: denied { setopt } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074458.719:7383): avc: denied { write } for pid=25049 comm="fn_monstore" path="pipe:[122606]" dev="pipefs" ino=122606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074457.090:7355): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/hwmon/hwmon0" dev="sysfs" ino=35479 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074592.296:7949): avc: denied { getattr } for pid=25430 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074747.199:8820): avc: denied { getattr } for pid=25430 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074687.090:8502): avc: denied { read } for pid=34011 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074731.126:8684): avc: denied { getattr } for pid=25430 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074659.369:8283): avc: denied { write } for pid=50591 comm="msgr-worker-1" laddr=172.21.15.70 lport=50512 faddr=172.21.15.70 fport=6808 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074467.449:7400): avc: denied { search } for pid=25049 comm="safe_timer" name="/" dev="overlay" ino=1443979 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c220,c900 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074667.090:8393): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/7/net/sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074386.696:6926): avc: denied { search } for pid=44849 comm="safe_timer" name="/" dev="overlay" ino=1970624 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c792,c938 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074542.463:7770): avc: denied { search } for pid=25049 comm="safe_timer" name="/" dev="overlay" ino=1443979 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c220,c900 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074336.999:6760): avc: denied { read } for pid=25430 comm="safe_timer" name="os-release" dev="sda1" ino=394714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074477.089:7455): avc: denied { search } for pid=34011 comm="node_exporter" name="/" dev="overlay" ino=1970490 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c602,c840 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074454.714:7314): avc: denied { search } for pid=25025 comm="conmon" name="journal" dev="tmpfs" ino=14310 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074595.396:8011): avc: denied { connect } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074317.581:6661): avc: denied { read } for pid=44849 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074452.242:7245): avc: denied { write } for pid=50591 comm="osd_srv_heartbt" path="pipe:[202352]" dev="pipefs" ino=202352 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074397.606:7058): avc: denied { read } for pid=50591 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074317.419:6656): avc: denied { search } for pid=25049 comm="safe_timer" name="var" dev="sda1" ino=1443987 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c220,c900 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074625.212:8153): avc: denied { write open } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db-journal" dev="sda1" ino=1970756 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074667.090:8391): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074389.274:7017): avc: denied { open } for pid=25430 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074663.816:8364): avc: denied { search } for pid=42158 comm="grafana-server" name="etc" dev="sda1" ino=1968517 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074337.091:6780): avc: denied { search } for pid=34011 comm="node_exporter" name="fs" dev="proc" ino=163277 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074591.816:7934): avc: denied { open } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074687.090:8508): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=43630 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074402.434:7082): avc: denied { getattr } for pid=25049 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074747.199:8819): avc: denied { read } for pid=25430 comm="safe_timer" name="os-release" dev="sda1" ino=394714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074609.816:8098): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074744.816:8782): avc: denied { lock } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074317.089:6625): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=161399 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074591.070:7922): avc: denied { search } for pid=40720 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074337.092:6781): avc: denied { search } for pid=34011 comm="node_exporter" name="1" dev="proc" ino=160800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074471.816:7427): avc: denied { read } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074595.396:8014): avc: denied { read } for pid=42970 comm="prometheus" path="socket:[334275]" dev="sockfs" ino=334275 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074542.463:7770): avc: denied { getattr } for pid=25049 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074336.067:6748): avc: denied { search } for pid=42158 comm="grafana-server" name="var" dev="sda1" ino=1968527 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074387.089:6935): avc: denied { read } for pid=34011 comm="node_exporter" name="file-nr" dev="proc" ino=163278 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074452.242:7243): avc: denied { open } for pid=50591 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074337.092:6781): avc: denied { read } for pid=34011 comm="node_exporter" name="mounts" dev="proc" ino=162545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074317.094:6648): avc: denied { search } for pid=34011 comm="node_exporter" name="user" dev="tmpfs" ino=2237 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074317.419:6657): avc: denied { open } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074747.199:8819): avc: denied { open } for pid=25430 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074527.089:7691): avc: denied { read } for pid=34011 comm="node_exporter" name="stat" dev="proc" ino=161398 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074747.090:8806): avc: denied { search } for pid=34011 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074327.090:6700): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074665.396:8382): avc: denied { getattr } for pid=42970 comm="prometheus" laddr=172.21.15.70 lport=51599 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074597.090:8033): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074729.708:8650): avc: denied { search } for pid=56060 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074387.091:6946): avc: denied { search } for pid=34011 comm="node_exporter" name="user" dev="tmpfs" ino=2237 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074523.931:7665): avc: denied { read } for pid=25430 comm="safe_timer" name="os-release" dev="overlay" ino=394714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074455.396:7328): avc: denied { connect } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074747.483:8822): avc: denied { open } for pid=44849 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074609.486:8085): avc: denied { use } for pid=25049 comm="fn_monstore" path="pipe:[122606]" dev="pipefs" ino=122606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074337.091:6778): avc: denied { read } for pid=34011 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074737.092:8760): avc: denied { search } for pid=34011 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074733.126:8722): avc: denied { getattr } for pid=25430 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074475.396:7449): avc: denied { connect } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074731.881:8701): avc: denied { read } for pid=40720 comm="msgr-worker-1" path="pipe:[182296]" dev="pipefs" ino=182296 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074452.242:7243): avc: denied { search } for pid=50591 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074456.925:7344): avc: denied { search } for pid=40720 comm="safe_timer" name="/" dev="overlay" ino=1970655 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c69,c600 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074471.816:7430): avc: denied { open } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/osds-overview.json" dev="overlay" ino=1574981 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074687.089:8501): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=161399 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074323.174:6676): avc: denied { getattr } for pid=82408 comm="pgrep" path="/proc/25025" dev="proc" ino=121537 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074594.296:7993): avc: denied { search } for pid=25430 comm="safe_timer" name="/" dev="overlay" ino=1443998 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074597.090:8036): avc: denied { read } for pid=34011 comm="node_exporter" name="hwmon0" dev="sysfs" ino=35483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074523.931:7665): avc: denied { search } for pid=25430 comm="safe_timer" name="usr" dev="sda1" ino=789157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074542.534:7774): avc: denied { search } for pid=44849 comm="safe_timer" name="/" dev="overlay" ino=1970624 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c792,c938 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074626.275:8165): avc: denied { search } for pid=40720 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970655 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c69,c600 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074387.091:6952): avc: denied { search } for pid=34011 comm="node_exporter" name="kernel" dev="proc" ino=165243 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074595.396:8006): avc: denied { signal } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074317.419:6656): avc: denied { dac_read_search } for pid=25049 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074609.484:8084): avc: denied { write } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074663.817:8369): avc: denied { read } for pid=42158 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074317.090:6632): avc: denied { search } for pid=34011 comm="node_exporter" name="fs" dev="proc" ino=163277 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074685.395:8491): avc: denied { setopt } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074527.090:7705): avc: denied { read } for pid=34011 comm="node_exporter" name="arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074615.396:8113): avc: denied { create } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074682.488:8482): avc: denied { getattr } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074313.492:6557): avc: denied { read } for pid=44849 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074547.089:7789): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074660.705:8304): avc: denied { read } for pid=25430 comm="safe_timer" name="os-release" dev="overlay" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074592.059:7940): avc: denied { search } for pid=25025 comm="conmon" name="systemd" dev="tmpfs" ino=14032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074594.296:7994): avc: denied { open } for pid=25430 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074667.090:8403): avc: denied { getattr } for pid=34011 comm="node_exporter" name="/" dev="tmpfs" ino=14024 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074737.089:8737): avc: denied { search } for pid=34011 comm="node_exporter" name="/" dev="overlay" ino=1970490 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c602,c840 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074757.090:8874): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/7/net/dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074324.168:6684): avc: denied { search } for pid=40720 comm="safe_timer" name="/" dev="overlay" ino=1970655 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c69,c600 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074667.090:8395): avc: denied { open } for pid=34011 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=21498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074667.093:8411): avc: denied { search } for pid=34011 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074610.392:8103): avc: denied { getattr } for pid=25430 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074678.277:8450): avc: denied { search } for pid=44849 comm="safe_timer" name="diff" dev="sda1" ino=1970624 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074597.089:8028): avc: denied { read } for pid=34011 comm="node_exporter" name="fd" dev="proc" ino=161399 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074457.089:7347): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=161398 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074477.089:7458): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=161399 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074453.816:7295): avc: denied { read } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074677.090:8438): avc: denied { search } for pid=34011 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074315.816:6578): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/etc" dev="sda1" ino=1968517 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074457.090:7362): avc: denied { read } for pid=34011 comm="node_exporter" name="entropy_avail" dev="proc" ino=161409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074687.093:8520): avc: denied { search } for pid=34011 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074524.886:7675): avc: denied { search } for pid=56060 comm="safe_timer" name="/" dev="overlay" ino=1970712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c563,c789 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074540.006:7751): avc: denied { search } for pid=25430 comm="safe_timer" name="usr" dev="sda1" ino=789157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074547.090:7798): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074609.041:8083): avc: denied { read } for pid=25430 comm="mgr-fin" name="localtime" dev="sda1" ino=394696 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074316.879:6602): avc: denied { open } for pid=25430 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074313.427:6548): avc: denied { read } for pid=25049 comm="msgr-worker-2" path="socket:[164260]" dev="sockfs" ino=164260 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074452.242:7244): avc: denied { append } for pid=50591 comm="log" path="/var/log/ceph/ceph-osd.2.log" dev="sda1" ino=396213 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074403.347:7103): avc: denied { search } for pid=25430 comm="safe_timer" name="etc" dev="sda1" ino=1444007 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074592.059:7940): avc: denied { search } for pid=25025 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074667.485:8413): avc: denied { search } for pid=25049 comm="safe_timer" name="mon.smithi070" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074659.369:8284): avc: denied { read } for pid=40720 comm="msgr-worker-2" path="socket:[207457]" dev="sockfs" ino=207457 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074665.396:8379): avc: denied { setopt } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074687.090:8513): avc: denied { search } for pid=34011 comm="node_exporter" name="kernel" dev="proc" ino=165243 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074386.067:6916): avc: denied { lock } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074397.606:7058): avc: denied { open } for pid=50591 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074682.488:8481): avc: denied { read } for pid=25049 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074527.090:7707): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074527.461:7717): avc: denied { search } for pid=25049 comm="safe_timer" name="/" dev="overlay" ino=1443979 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c220,c900 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074317.090:6632): avc: denied { read } for pid=34011 comm="node_exporter" name="file-nr" dev="proc" ino=163278 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074608.618:8074): avc: denied { append } for pid=25049 comm="log" path="/var/log/ceph/ceph-mon.smithi070.log" dev="sda1" ino=396134 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074402.816:7098): avc: denied { read } for pid=42158 comm="grafana-server" name="cephfs-overview.json" dev="sda1" ino=1574977 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074472.450:7432): avc: denied { search } for pid=25049 comm="safe_timer" name="mon.smithi070" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074542.463:7772): avc: denied { getattr } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074659.613:8292): avc: denied { sendto } for pid=25025 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074757.089:8860): avc: denied { search } for pid=34011 comm="node_exporter" name="7" dev="proc" ino=153578 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074597.090:8047): avc: denied { search } for pid=34011 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616074471.816:7428): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074678.816:8465): avc: denied { search } for pid=42158 comm="grafana-server" name="etc" dev="sda1" ino=1968517 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074679.500:8474): avc: denied { write } for pid=25025 comm="conmon" name="socket" dev="tmpfs" ino=14322 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074387.432:6979): avc: denied { search } for pid=25049 comm="safe_timer" name="/" dev="overlay" ino=1443979 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c220,c900 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074335.640:6741): avc: denied { search } for pid=25025 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074745.396:8793): avc: denied { write } for pid=42970 comm="prometheus" path="socket:[363772]" dev="sockfs" ino=363772 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074737.090:8751): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/sys/fs/xfs/stats/stats" dev="sysfs" ino=45563 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074457.090:7353): avc: denied { open } for pid=34011 comm="node_exporter" path="/sys/class/hwmon" dev="sysfs" ino=21483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074623.240:8147): avc: denied { open } for pid=94962 comm="pgrep" path="/proc/25025/status" dev="proc" ino=121541 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074597.089:8026): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc/7" dev="proc" ino=153578 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074539.969:7743): avc: denied { search } for pid=50591 comm="safe_timer" name="diff" dev="sda1" ino=1970693 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074397.089:7035): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc/7" dev="proc" ino=153578 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074387.089:6930): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc/7" dev="proc" ino=153578 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074669.816:8417): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074737.090:8741): avc: denied { search } for pid=34011 comm="node_exporter" name="1" dev="proc" ino=160800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074757.090:8866): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=161409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074732.816:8715): avc: denied { read } for pid=42158 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074471.673:7420): avc: denied { read } for pid=25430 comm="safe_timer" name="os-release" dev="sda1" ino=394714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074539.969:7743): avc: denied { search } for pid=50591 comm="safe_timer" name="/" dev="overlay" ino=1970693 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c817,c841 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074606.067:8066): avc: denied { read } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074332.421:6706): avc: denied { search } for pid=25049 comm="safe_timer" name="mon.smithi070" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074667.090:8398): avc: denied { search } for pid=34011 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074336.816:6754): avc: denied { read open } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074687.091:8518): avc: denied { search } for pid=34011 comm="node_exporter" name="1" dev="proc" ino=160800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074594.062:7977): avc: denied { write } for pid=25049 comm="fn_monstore" path="pipe:[122606]" dev="pipefs" ino=122606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074659.459:8287): avc: denied { search } for pid=44849 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074678.801:8460): avc: denied { search } for pid=25430 comm="safe_timer" name="/" dev="overlay" ino=1443998 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074729.568:8643): avc: denied { read } for pid=25025 comm="conmon" path="pipe:[122606]" dev="pipefs" ino=122606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074467.090:7394): avc: denied { search } for pid=34011 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074663.816:8366): avc: denied { lock } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074737.092:8763): avc: denied { search } for pid=34011 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616074663.816:8364): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074457.090:7359): avc: denied { open } for pid=34011 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/hwmon/hwmon0/temp1_crit" dev="sysfs" ino=35488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074472.738:7438): avc: denied { write } for pid=25025 comm="conmon" name="socket" dev="tmpfs" ino=14322 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074625.338:8154): avc: denied { unlink } for pid=42158 comm="grafana-server" name="grafana.db-journal" dev="sda1" ino=1970756 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074747.596:8830): avc: denied { read } for pid=25025 comm="conmon" path="pipe:[122606]" dev="pipefs" ino=122606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074737.092:8762): avc: denied { search } for pid=34011 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074729.424:8639): avc: denied { append } for pid=25430 comm="log" path="/var/log/ceph/ceph-mgr.smithi070.farums.log" dev="sda1" ino=396140 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074477.090:7459): avc: denied { read } for pid=34011 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074521.076:7592): avc: denied { read } for pid=40720 comm="msgr-worker-2" path="socket:[267627]" dev="sockfs" ino=267627 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074407.090:7126): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/hwmon/hwmon0/uevent" dev="sysfs" ino=35480 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074453.587:7290): avc: denied { open } for pid=25430 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074617.090:8138): avc: denied { getattr } for pid=34011 comm="node_exporter" name="/" dev="tmpfs" ino=14024 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074755.396:8852): avc: denied { create } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074388.477:7005): avc: denied { search } for pid=50591 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074592.472:7950): avc: denied { getattr } for pid=25049 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074453.575:7289): avc: denied { getattr } for pid=25430 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074457.090:7350): avc: denied { read } for pid=34011 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074733.005:8718): avc: denied { write } for pid=25430 comm="log" path="pipe:[125364]" dev="pipefs" ino=125364 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074455.396:7324): avc: denied { search } for pid=42970 comm="prometheus" name="etc" dev="sda1" ino=1970616 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c364 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074457.090:7350): avc: denied { read } for pid=34011 comm="node_exporter" name="sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074592.296:7948): avc: denied { search } for pid=25430 comm="safe_timer" name="etc" dev="sda1" ino=1444007 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074747.197:8813): avc: denied { read } for pid=25049 comm="msgr-worker-2" path="socket:[269739]" dev="sockfs" ino=269739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074402.816:7091): avc: denied { search } for pid=42158 comm="grafana-server" name="dashboards" dev="sda1" ino=1574974 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074324.816:6687): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/etc" dev="sda1" ino=1968517 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074471.661:7418): avc: denied { open } for pid=25430 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074315.396:6573): avc: denied { write } for pid=42970 comm="prometheus" path="socket:[285083]" dev="sockfs" ino=285083 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074325.396:6697): avc: denied { write } for pid=42970 comm="prometheus" path="socket:[289909]" dev="sockfs" ino=289909 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074456.717:7339): avc: denied { write } for pid=25025 comm="conmon" name="socket" dev="tmpfs" ino=14322 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074523.562:7659): avc: denied { search } for pid=40720 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1970655 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074747.499:8826): avc: denied { getattr } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074757.090:8864): avc: denied { read } for pid=34011 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074757.094:8877): avc: denied { search } for pid=34011 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074477.089:7456): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc/7" dev="proc" ino=153578 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074597.090:8040): avc: denied { open } for pid=34011 comm="node_exporter" path="/sys/fs/xfs/dm-4/stats/stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074540.006:7751): avc: denied { open } for pid=25430 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074623.240:8148): avc: denied { getattr } for pid=94962 comm="pgrep" path="/proc/25049" dev="proc" ino=121656 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074547.089:7792): avc: denied { read } for pid=34011 comm="node_exporter" name="fd" dev="proc" ino=161399 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074757.089:8859): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc/7" dev="proc" ino=153578 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074389.274:7017): avc: denied { open } for pid=25430 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074524.815:7673): avc: denied { search } for pid=25025 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074594.296:7993): avc: denied { search } for pid=25430 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074747.199:8816): avc: denied { search } for pid=25430 comm="safe_timer" name="/" dev="overlay" ino=1443998 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074612.475:8109): avc: denied { getattr } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074678.579:8458): avc: denied { search } for pid=56060 comm="safe_timer" name="/" dev="overlay" ino=1970712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c563,c789 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074525.931:7688): avc: denied { search } for pid=25430 comm="safe_timer" name="libpod-6a25c082565bd3ed2efe9bc44b0985e4ada790df478c338ace111c62aac839e4.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074662.485:8350): avc: denied { search } for pid=25049 comm="safe_timer" name="mon.smithi070" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074457.090:7353): avc: denied { read } for pid=34011 comm="node_exporter" name="hwmon" dev="sysfs" ino=21483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074596.191:8018): avc: denied { signal } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074401.663:7068): avc: denied { write } for pid=25049 comm="safe_timer" path="pipe:[123409]" dev="pipefs" ino=123409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074737.090:8753): avc: denied { read } for pid=34011 comm="node_exporter" name="stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074386.696:6927): avc: denied { search } for pid=44849 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074457.090:7349): avc: denied { search } for pid=34011 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074387.261:6961): avc: denied { getattr } for pid=25430 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074337.091:6779): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074317.090:6630): avc: denied { read } for pid=34011 comm="node_exporter" name="cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074543.831:7776): avc: denied { getattr } for pid=42970 comm="prometheus" path="/prometheus/queries.active" dev="dm-4" ino=158 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c364 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074593.901:7974): avc: denied { read } for pid=50591 comm="msgr-worker-2" path="pipe:[202353]" dev="pipefs" ino=202353 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074456.717:7339): avc: denied { search } for pid=25025 comm="conmon" name="systemd" dev="tmpfs" ino=14032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074663.618:8359): avc: denied { search } for pid=25025 comm="conmon" name="systemd" dev="tmpfs" ino=14032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074678.817:8470): avc: denied { read open } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074592.059:7940): avc: denied { search } for pid=25025 comm="conmon" name="journal" dev="tmpfs" ino=14310 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074522.816:7641): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074604.888:8061): avc: denied { open } for pid=56060 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074314.853:6565): avc: denied { getattr } for pid=25430 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074403.347:7103): avc: denied { read } for pid=25430 comm="safe_timer" name="os-release" dev="overlay" ino=394714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074687.089:8498): avc: denied { search } for pid=34011 comm="node_exporter" name="/" dev="overlay" ino=1970490 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c602,c840 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074325.396:6696): avc: denied { getattr } for pid=42970 comm="prometheus" laddr=172.21.15.70 lport=50942 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074457.089:7348): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=161399 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074477.089:7458): avc: denied { read } for pid=34011 comm="node_exporter" name="fd" dev="proc" ino=161399 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074325.396:6695): avc: denied { connect } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074523.931:7666): avc: denied { getattr } for pid=25430 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074595.396:8007): avc: denied { search } for pid=42970 comm="prometheus" name="etc" dev="sda1" ino=1970616 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c364 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074523.919:7664): avc: denied { getattr } for pid=25430 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074335.397:6735): avc: denied { append } for pid=42970 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c364 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074660.705:8304): avc: denied { open } for pid=25430 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074660.705:8304): avc: denied { read } for pid=25430 comm="safe_timer" name="os-release" dev="overlay" ino=394714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074746.816:8800): avc: denied { write } for pid=50591 comm="msgr-worker-2" laddr=172.21.15.70 lport=6824 faddr=172.21.15.103 fport=40988 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074323.175:6679): avc: denied { search } for pid=82408 comm="pgrep" name="25049" dev="proc" ino=121656 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074607.090:8071): avc: denied { search } for pid=34011 comm="node_exporter" name="host" dev="sda1" ino=1970499 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c602,c840 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074473.918:7443): avc: denied { search } for pid=50591 comm="safe_timer" name="/" dev="overlay" ino=1970693 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c817,c841 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074732.816:8714): avc: denied { getattr } for pid=42158 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074527.090:7697): avc: denied { search } for pid=34011 comm="node_exporter" name="net" dev="proc" ino=153584 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074387.191:6956): avc: denied { search } for pid=40720 comm="safe_timer" name="/" dev="overlay" ino=1970655 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c69,c600 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074313.431:6551): avc: denied { search } for pid=25025 comm="conmon" name="systemd" dev="tmpfs" ino=14032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074685.395:8497): avc: denied { read } for pid=42970 comm="prometheus" path="socket:[352611]" dev="sockfs" ino=352611 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074477.092:7476): avc: denied { search } for pid=34011 comm="node_exporter" name="user" dev="tmpfs" ino=2237 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074757.090:8875): avc: denied { read } for pid=34011 comm="node_exporter" name="mounts" dev="proc" ino=162545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074456.816:7340): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074327.091:6703): avc: denied { search } for pid=34011 comm="node_exporter" name="user" dev="tmpfs" ino=2237 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074659.613:8290): avc: denied { write } for pid=25049 comm="fn_monstore" path="pipe:[122606]" dev="pipefs" ino=122606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074625.545:8155): avc: denied { create } for pid=42158 comm="grafana-server" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074735.396:8726): avc: denied { create } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074334.975:6712): avc: denied { search } for pid=25430 comm="safe_timer" name="diff" dev="sda1" ino=1443998 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074387.816:6990): avc: denied { getattr } for pid=42158 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074591.070:7922): avc: denied { search } for pid=40720 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1970655 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074757.090:8872): avc: denied { read } for pid=34011 comm="node_exporter" name="addr_assign_type" dev="sysfs" ino=35292 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074336.987:6759): avc: denied { getattr } for pid=25430 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074735.396:8725): avc: denied { search } for pid=42970 comm="prometheus" name="/" dev="overlay" ino=1968522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c364 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074592.473:7951): avc: denied { search } for pid=25049 comm="safe_timer" name="mon.smithi070" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074477.092:7475): avc: denied { search } for pid=34011 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074385.653:6907): avc: denied { read } for pid=25049 comm="msgr-worker-2" path="socket:[164260]" dev="sockfs" ino=164260 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074387.261:6960): avc: denied { open } for pid=25430 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074317.090:6631): avc: denied { read } for pid=34011 comm="node_exporter" name="cpufreq" dev="sysfs" ino=30758 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074679.500:8473): avc: denied { read } for pid=25025 comm="conmon" path="pipe:[122606]" dev="pipefs" ino=122606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074617.088:8123): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=161399 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074314.023:6562): avc: denied { search } for pid=25430 comm="mgr-fin" name="/" dev="overlay" ino=1443998 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074547.091:7803): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074407.090:7125): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=162545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074387.089:6929): avc: denied { search } for pid=34011 comm="node_exporter" name="/" dev="overlay" ino=1970490 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c602,c840 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074453.587:7290): avc: denied { read } for pid=25430 comm="safe_timer" name="os-release" dev="overlay" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074475.396:7452): avc: denied { write } for pid=42970 comm="prometheus" path="socket:[315667]" dev="sockfs" ino=315667 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074663.817:8369): avc: denied { open } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074317.090:6632): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=163278 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074452.447:7251): avc: denied { search } for pid=25049 comm="safe_timer" name="/" dev="overlay" ino=1443979 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c220,c900 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074527.089:7693): avc: denied { read } for pid=34011 comm="node_exporter" name="entropy_avail" dev="proc" ino=161409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074521.076:7594): avc: denied { write } for pid=56060 comm="tp_osd_tp" path="pipe:[220216]" dev="pipefs" ino=220216 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074747.091:8808): avc: denied { read } for pid=34011 comm="node_exporter" name="sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074472.737:7436): avc: denied { use } for pid=25049 comm="fn_monstore" path="pipe:[122606]" dev="pipefs" ino=122606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074597.089:8025): avc: denied { search } for pid=34011 comm="node_exporter" name="/" dev="overlay" ino=1970490 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c602,c840 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074455.396:7332): avc: denied { read } for pid=42970 comm="prometheus" path="socket:[312490]" dev="sockfs" ino=312490 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074334.975:6713): avc: denied { read } for pid=25430 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074313.426:6545): avc: denied { write } for pid=25049 comm="safe_timer" path="pipe:[123409]" dev="pipefs" ino=123409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074659.369:8281): avc: denied { write } for pid=50591 comm="osd_srv_heartbt" path="pipe:[202352]" dev="pipefs" ino=202352 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074757.089:8858): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074523.919:7663): avc: denied { open } for pid=25430 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074592.284:7947): avc: denied { getattr } for pid=25430 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074547.090:7795): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=21498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074627.092:8170): avc: denied { search } for pid=34011 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616074397.090:7043): avc: denied { open } for pid=34011 comm="node_exporter" path="/sys/class/hwmon" dev="sysfs" ino=21483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074677.089:8432): avc: denied { read } for pid=34011 comm="node_exporter" name="fd" dev="proc" ino=161399 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074335.095:6718): avc: denied { open } for pid=40720 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074617.088:8122): avc: denied { search } for pid=34011 comm="node_exporter" name="7" dev="proc" ino=153578 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074407.091:7131): avc: denied { getattr } for pid=34011 comm="node_exporter" name="/" dev="tmpfs" ino=14024 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074678.816:8466): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/etc" dev="sda1" ino=1968517 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074617.089:8129): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=161409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074521.035:7591): avc: denied { append } for pid=40720 comm="log" path="/var/log/ceph/ceph-osd.0.log" dev="sda1" ino=396207 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074743.266:8773): avc: denied { search } for pid=101080 comm="pgrep" name="25025" dev="proc" ino=121537 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074336.817:6755): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="sda1" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074755.396:8851): avc: denied { search } for pid=42970 comm="prometheus" name="etc" dev="sda1" ino=1970616 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c364 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074667.090:8401): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=43630 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074336.817:6756): avc: denied { open } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/rbd-details.json" dev="sda1" ino=1574987 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074315.816:6577): avc: denied { search } for pid=42158 comm="grafana-server" name="etc" dev="sda1" ino=1968517 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074335.396:6725): avc: denied { search } for pid=42970 comm="prometheus" name="/" dev="overlay" ino=1968522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c364 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074471.661:7419): avc: denied { getattr } for pid=25430 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074667.090:8402): avc: denied { read } for pid=34011 comm="node_exporter" name="hwmon0" dev="sysfs" ino=35483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074457.599:7378): avc: denied { read } for pid=25430 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074477.090:7468): avc: denied { read } for pid=34011 comm="node_exporter" name="stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074610.404:8104): avc: denied { read } for pid=25430 comm="safe_timer" name="os-release" dev="overlay" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074731.114:8681): avc: denied { search } for pid=25430 comm="safe_timer" name="libpod-6a25c082565bd3ed2efe9bc44b0985e4ada790df478c338ace111c62aac839e4.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074387.090:6940): avc: denied { open } for pid=34011 comm="node_exporter" path="/sys/fs/xfs/dm-4/stats/stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074747.816:8841): avc: denied { read open } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074746.962:8801): avc: denied { search } for pid=40720 comm="safe_timer" name="/" dev="overlay" ino=1970655 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c69,c600 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074667.090:8398): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=163278 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074324.816:6686): avc: denied { search } for pid=42158 comm="grafana-server" name="/" dev="overlay" ino=1968511 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074540.816:7766): avc: denied { read } for pid=42158 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074597.090:8048): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=163278 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074617.089:8128): avc: denied { open } for pid=34011 comm="node_exporter" path="/sys/class/hwmon" dev="sysfs" ino=21483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074471.673:7420): avc: denied { read } for pid=25430 comm="safe_timer" name="os-release" dev="overlay" ino=394714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074729.816:8659): avc: denied { read } for pid=42158 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074385.653:6908): avc: denied { write } for pid=25049 comm="fn_monstore" path="pipe:[122606]" dev="pipefs" ino=122606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074403.335:7100): avc: denied { search } for pid=25430 comm="safe_timer" name="/" dev="overlay" ino=1443998 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074732.828:8716): avc: denied { getattr } for pid=25430 comm="mgr-fin" path="/usr/lib/python3.6/site-packages/remoto/process.py" dev="overlay" ino=1048883 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074592.473:7951): avc: denied { open } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074337.093:6786): avc: denied { search } for pid=34011 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074733.005:8719): avc: denied { read } for pid=25407 comm="conmon" path="pipe:[125364]" dev="pipefs" ino=125364 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074660.079:8300): avc: denied { search } for pid=40720 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970655 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c69,c600 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074625.553:8158): avc: denied { getopt } for pid=42158 comm="grafana-server" laddr=172.21.15.70 lport=50230 faddr=35.241.23.245 fport=443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074737.090:8742): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074612.475:8110): avc: denied { getattr } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074523.931:7665): avc: denied { read } for pid=25430 comm="safe_timer" name="os-release" dev="sda1" ino=394714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074402.537:7086): avc: denied { search } for pid=50591 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970693 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c817,c841 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074757.090:8869): avc: denied { read } for pid=34011 comm="node_exporter" name="net" dev="sysfs" ino=21519 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074737.090:8744): avc: denied { read } for pid=34011 comm="node_exporter" name="hwmon" dev="sysfs" ino=21483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074335.396:6730): avc: denied { connect } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074592.284:7946): avc: denied { read } for pid=25430 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074336.067:6747): avc: denied { lock } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074457.448:7375): avc: denied { search } for pid=25049 comm="safe_timer" name="mon.smithi070" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074715.598:8629): avc: denied { write } for pid=42158 comm="grafana-server" path="socket:[333774]" dev="sockfs" ino=333774 scontext=system_u:system_r:spc_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1', 'type=AVC msg=audit(1616074325.396:6694): avc: denied { connect } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074402.816:7094): avc: denied { read } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074677.089:8430): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc/7" dev="proc" ino=153578 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074609.041:8083): avc: denied { getattr } for pid=25430 comm="mgr-fin" path="/usr/share/zoneinfo/UTC" dev="overlay" ino=1312328 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074337.090:6775): avc: denied { search } for pid=34011 comm="node_exporter" name="net" dev="proc" ino=153584 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074317.091:6636): avc: denied { getattr } for pid=34011 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074733.126:8721): avc: denied { open } for pid=25430 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074317.092:6640): avc: denied { read } for pid=34011 comm="node_exporter" name="entropy_avail" dev="proc" ino=161409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074337.422:6793): avc: denied { search } for pid=25049 comm="safe_timer" name="var" dev="sda1" ino=1443987 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c220,c900 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074471.661:7415): avc: denied { search } for pid=44849 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074335.396:6728): avc: denied { setopt } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074402.816:7091): avc: denied { search } for pid=42158 comm="grafana-server" name="etc" dev="sda1" ino=1968517 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074402.816:7098): avc: denied { open } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/cephfs-overview.json" dev="sda1" ino=1574977 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074457.090:7354): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=43630 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074457.090:7366): avc: denied { search } for pid=34011 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616074318.816:6668): avc: denied { read } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074317.094:6650): avc: denied { search } for pid=34011 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616074527.092:7710): avc: denied { getattr } for pid=34011 comm="node_exporter" name="/" dev="tmpfs" ino=14024 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074387.261:6960): avc: denied { read } for pid=25430 comm="safe_timer" name="os-release" dev="sda1" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074667.090:8397): avc: denied { read } for pid=34011 comm="node_exporter" name="ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074659.459:8287): avc: denied { read } for pid=44849 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074386.735:6928): avc: denied { search } for pid=50591 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970693 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c817,c841 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074597.090:8030): avc: denied { search } for pid=34011 comm="node_exporter" name="1" dev="proc" ino=160800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074687.090:8511): avc: denied { read } for pid=34011 comm="node_exporter" name="stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074387.089:6932): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=161399 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074524.815:7672): avc: denied { read } for pid=25025 comm="conmon" path="pipe:[122606]" dev="pipefs" ino=122606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074609.486:8087): avc: denied { search } for pid=25025 comm="conmon" name="/" dev="tmpfs" ino=14023 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074660.705:8304): avc: denied { search } for pid=25430 comm="safe_timer" name="etc" dev="sda1" ino=1444007 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074547.089:7792): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=161399 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074625.212:8153): avc: denied { add_name } for pid=42158 comm="grafana-server" name="grafana.db-journal" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074318.816:6669): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074525.397:7685): avc: denied { append } for pid=42970 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c364 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074595.396:8013): avc: denied { write } for pid=42970 comm="prometheus" path="socket:[332619]" dev="sockfs" ino=332619 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074594.308:7996): avc: denied { read } for pid=25430 comm="safe_timer" name="os-release" dev="overlay" ino=394714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074729.816:8659): avc: denied { open } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074467.090:7396): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=30846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074547.093:7808): avc: denied { search } for pid=34011 comm="node_exporter" name="1" dev="proc" ino=160800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074687.090:8510): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/sys/fs/xfs/stats/stats" dev="sysfs" ino=45563 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074660.816:8306): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074335.396:6725): avc: denied { search } for pid=42970 comm="prometheus" name="etc" dev="sda1" ino=1970616 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c364 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074521.907:7602): avc: denied { search } for pid=25430 comm="safe_timer" name="/" dev="overlay" ino=1443998 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074325.396:6691): avc: denied { create } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074678.816:8468): avc: denied { read } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074757.089:8858): avc: denied { search } for pid=34011 comm="node_exporter" name="/" dev="overlay" ino=1970490 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c602,c840 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074335.095:6718): avc: denied { search } for pid=40720 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074687.093:8521): avc: denied { search } for pid=34011 comm="node_exporter" name="user" dev="tmpfs" ino=2237 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074547.090:7793): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=163278 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074757.094:8882): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074609.816:8098): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074337.093:6784): avc: denied { search } for pid=34011 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074521.907:7603): avc: denied { open } for pid=25430 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074605.480:8063): avc: denied { write } for pid=25025 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074521.919:7605): avc: denied { read } for pid=25430 comm="safe_timer" name="os-release" dev="overlay" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074387.432:6982): avc: denied { getattr } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074458.719:7384): avc: denied { read } for pid=25025 comm="conmon" path="pipe:[122606]" dev="pipefs" ino=122606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074521.919:7605): avc: denied { open } for pid=25430 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074597.089:8028): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=161399 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074608.764:8078): avc: denied { open } for pid=56060 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074387.089:6934): avc: denied { search } for pid=34011 comm="node_exporter" name="1" dev="proc" ino=160800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074729.816:8654): avc: denied { search } for pid=42158 comm="grafana-server" name="etc" dev="sda1" ino=1968517 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074401.663:7071): avc: denied { read } for pid=25049 comm="msgr-worker-2" path="socket:[164260]" dev="sockfs" ino=164260 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074459.817:7387): avc: denied { read } for pid=42158 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074617.088:8123): avc: denied { read } for pid=34011 comm="node_exporter" name="fd" dev="proc" ino=161399 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074737.092:8758): avc: denied { read } for pid=34011 comm="node_exporter" name="entropy_avail" dev="proc" ino=161409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074335.394:6724): avc: denied { search } for pid=50591 comm="safe_timer" name="/" dev="overlay" ino=1970693 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c817,c841 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074387.432:6983): avc: denied { write } for pid=25049 comm="safe_timer" path="pipe:[123409]" dev="pipefs" ino=123409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074527.461:7717): avc: denied { dac_read_search } for pid=25049 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074337.093:6789): avc: denied { search } for pid=34011 comm="node_exporter" name="host" dev="sda1" ino=1970499 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c602,c840 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074525.396:7678): avc: denied { search } for pid=42970 comm="prometheus" name="etc" dev="sda1" ino=1970616 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c364 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074609.817:8100): avc: denied { open } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/osds-overview.json" dev="sda1" ino=1574981 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074591.816:7936): avc: denied { read } for pid=42158 comm="grafana-server" name="rbd-details.json" dev="sda1" ino=1574987 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074732.496:8711): avc: denied { getattr } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074525.816:7687): avc: denied { read } for pid=42158 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074678.817:8470): avc: denied { read } for pid=42158 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074729.816:8658): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074523.931:7665): avc: denied { search } for pid=25430 comm="safe_timer" name="etc" dev="sda1" ino=1444007 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074737.089:8738): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc/7" dev="proc" ino=153578 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074547.093:7808): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=162545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074663.816:8367): avc: denied { read } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074337.422:6794): avc: denied { read } for pid=25049 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074317.094:6651): avc: denied { search } for pid=34011 comm="node_exporter" name="host" dev="sda1" ino=1970499 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c602,c840 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074397.090:7044): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/hwmon/hwmon0" dev="sysfs" ino=35479 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074472.450:7432): avc: denied { read } for pid=25049 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074747.816:8838): avc: denied { lock } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074522.892:7644): avc: denied { search } for pid=56060 comm="safe_timer" name="/" dev="overlay" ino=1970712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c563,c789 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074467.089:7391): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=161399 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074522.816:7637): avc: denied { search } for pid=42158 comm="grafana-server" name="etc" dev="sda1" ino=1968517 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074407.091:7132): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074609.817:8099): avc: denied { read open } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074471.673:7420): avc: denied { read } for pid=25430 comm="safe_timer" name="os-release" dev="sda1" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074732.496:8708): avc: denied { getattr } for pid=25049 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074542.463:7771): avc: denied { open } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074335.095:6719): avc: denied { search } for pid=40720 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074597.089:8027): avc: denied { read } for pid=34011 comm="node_exporter" name="stat" dev="proc" ino=161398 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074617.088:8125): avc: denied { read } for pid=34011 comm="node_exporter" name="file-nr" dev="proc" ino=163278 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074625.553:8160): avc: denied { write } for pid=42158 comm="grafana-server" path="socket:[333774]" dev="sockfs" ino=333774 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074737.090:8757): avc: denied { getattr } for pid=34011 comm="node_exporter" name="/" dev="tmpfs" ino=14024 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074472.738:7438): avc: denied { write } for pid=25025 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074389.274:7018): avc: denied { getattr } for pid=25430 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074477.090:7460): avc: denied { search } for pid=34011 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074677.793:8447): avc: denied { read } for pid=40720 comm="msgr-worker-1" path="pipe:[182296]" dev="pipefs" ino=182296 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074387.091:6946): avc: denied { search } for pid=34011 comm="node_exporter" name="/" dev="tmpfs" ino=14023 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074597.090:8038): avc: denied { read } for pid=34011 comm="node_exporter" name="dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074335.095:6719): avc: denied { open } for pid=40720 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074729.816:8661): avc: denied { open } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/osds-overview.json" dev="sda1" ino=1574981 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074667.089:8388): avc: denied { search } for pid=34011 comm="node_exporter" name="7" dev="proc" ino=153578 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074472.738:7438): avc: denied { search } for pid=25025 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074323.175:6677): avc: denied { read } for pid=82408 comm="pgrep" name="status" dev="proc" ino=121541 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074527.943:7722): avc: denied { append } for pid=25430 comm="log" path="/var/log/ceph/ceph-mgr.smithi070.farums.log" dev="sda1" ino=396140 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074477.090:7464): avc: denied { read } for pid=34011 comm="node_exporter" name="hwmon" dev="sysfs" ino=21483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074385.653:6910): avc: denied { search } for pid=25025 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074397.089:7039): avc: denied { read } for pid=34011 comm="node_exporter" name="file-nr" dev="proc" ino=163278 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074457.090:7360): avc: denied { getattr } for pid=34011 comm="node_exporter" name="/" dev="tmpfs" ino=14024 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074524.833:7674): avc: denied { search } for pid=44849 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970624 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c792,c938 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074755.396:8851): avc: denied { search } for pid=42970 comm="prometheus" name="/" dev="overlay" ino=1968522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c364 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074623.240:8147): avc: denied { search } for pid=94962 comm="pgrep" name="25025" dev="proc" ino=121537 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074597.473:8055): avc: denied { search } for pid=25049 comm="safe_timer" name="/" dev="overlay" ino=1443979 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c220,c900 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074527.089:7690): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc/7" dev="proc" ino=153578 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074539.969:7744): avc: denied { read } for pid=50591 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074407.090:7130): avc: denied { search } for pid=34011 comm="node_exporter" name="net" dev="proc" ino=153584 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074729.816:8656): avc: denied { lock } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074335.095:6718): avc: denied { search } for pid=40720 comm="safe_timer" name="diff" dev="sda1" ino=1970655 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074747.816:8840): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074313.629:6558): avc: denied { search } for pid=56060 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c563,c789 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074335.095:6717): avc: denied { append } for pid=40720 comm="log" path="/var/log/ceph/ceph-osd.0.log" dev="sda1" ino=396207 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074387.816:6992): avc: denied { read } for pid=42158 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074314.866:6566): avc: denied { read } for pid=25430 comm="safe_timer" name="os-release" dev="overlay" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074477.090:7459): avc: denied { read } for pid=34011 comm="node_exporter" name="sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074405.396:7114): avc: denied { append } for pid=42970 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c364 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074757.094:8878): avc: denied { search } for pid=34011 comm="node_exporter" name="user" dev="tmpfs" ino=2237 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074527.092:7714): avc: denied { getattr } for pid=34011 comm="node_exporter" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074667.623:8415): avc: denied { write } for pid=25025 comm="conmon" name="socket" dev="tmpfs" ino=14322 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074755.396:8857): avc: denied { read } for pid=42970 comm="prometheus" path="socket:[366607]" dev="sockfs" ino=366607 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074336.067:6750): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074387.656:6987): avc: denied { read } for pid=25025 comm="conmon" path="pipe:[122606]" dev="pipefs" ino=122606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074597.090:8034): avc: denied { search } for pid=34011 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074454.631:7313): avc: denied { open } for pid=50591 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074663.833:8371): avc: denied { open } for pid=42970 comm="prometheus" path="/prometheus" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c364 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074452.242:7246): avc: denied { read } for pid=50591 comm="msgr-worker-1" path="pipe:[202352]" dev="pipefs" ino=202352 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074592.296:7948): avc: denied { read } for pid=25430 comm="safe_timer" name="os-release" dev="overlay" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074337.090:6776): avc: denied { read } for pid=34011 comm="node_exporter" name="entropy_avail" dev="proc" ino=161409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074335.640:6741): avc: denied { sendto } for pid=25025 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074743.266:8774): avc: denied { getattr } for pid=101080 comm="pgrep" path="/proc/25049" dev="proc" ino=121656 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074453.575:7288): avc: denied { search } for pid=25430 comm="safe_timer" name="libpod-6a25c082565bd3ed2efe9bc44b0985e4ada790df478c338ace111c62aac839e4.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074457.089:7345): avc: denied { search } for pid=34011 comm="node_exporter" name="/" dev="overlay" ino=1970490 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c602,c840 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074477.089:7457): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=161398 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074743.591:8777): avc: denied { write } for pid=25025 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074336.067:6750): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074678.813:8463): avc: denied { search } for pid=25430 comm="safe_timer" name="usr" dev="sda1" ino=789157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074457.090:7360): avc: denied { search } for pid=34011 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074757.090:8872): avc: denied { open } for pid=34011 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/net/eno1/addr_assign_type" dev="sysfs" ino=35292 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074407.090:7124): avc: denied { read } for pid=34011 comm="node_exporter" name="sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074522.816:7641): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074387.089:6934): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=162545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074467.089:7389): avc: denied { search } for pid=34011 comm="node_exporter" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074611.061:8105): avc: denied { search } for pid=50591 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970693 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c817,c841 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074399.816:7062): avc: denied { read } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074397.089:7039): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=163278 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074667.090:8393): avc: denied { read } for pid=34011 comm="node_exporter" name="sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074662.485:8350): avc: denied { read } for pid=25049 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074757.090:8862): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=161409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074477.092:7480): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=163278 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074521.945:7607): avc: denied { search } for pid=50591 comm="safe_timer" name="/" dev="overlay" ino=1970693 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c817,c841 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074385.653:6910): avc: denied { write } for pid=25025 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074401.664:7072): avc: denied { write } for pid=25049 comm="fn_monstore" path="pipe:[122606]" dev="pipefs" ino=122606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074660.705:8304): avc: denied { search } for pid=25430 comm="safe_timer" name="usr" dev="sda1" ino=789157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074337.093:6785): avc: denied { search } for pid=34011 comm="node_exporter" name="/" dev="tmpfs" ino=14023 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074539.992:7748): avc: denied { search } for pid=25430 comm="safe_timer" name="/" dev="overlay" ino=1443998 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074315.528:6576): avc: denied { search } for pid=50591 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970693 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c817,c841 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074747.199:8819): avc: denied { read } for pid=25430 comm="safe_timer" name="os-release" dev="sda1" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074597.065:8024): avc: denied { write } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074547.091:7804): avc: denied { read } for pid=34011 comm="node_exporter" name="entropy_avail" dev="proc" ino=161409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074663.816:8367): avc: denied { read } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074317.094:6649): avc: denied { search } for pid=34011 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074403.347:7103): avc: denied { read } for pid=25430 comm="safe_timer" name="os-release" dev="sda1" ino=394714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074452.711:7263): avc: denied { search } for pid=25025 comm="conmon" name="journal" dev="tmpfs" ino=14310 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074407.092:7137): avc: denied { search } for pid=34011 comm="node_exporter" name="/" dev="tmpfs" ino=14023 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074527.092:7712): avc: denied { search } for pid=34011 comm="node_exporter" name="/" dev="tmpfs" ino=14023 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074387.816:6990): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074603.833:8058): avc: denied { open } for pid=42970 comm="prometheus" path="/prometheus" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c364 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074521.945:7608): avc: denied { open } for pid=50591 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074327.090:6701): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074407.090:7130): avc: denied { search } for pid=34011 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074389.262:7016): avc: denied { getattr } for pid=25430 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074627.090:8167): avc: denied { search } for pid=34011 comm="node_exporter" name="user" dev="tmpfs" ino=2237 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074336.816:6753): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/etc" dev="sda1" ino=1968517 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074597.090:8043): avc: denied { search } for pid=34011 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074317.090:6634): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=30846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074475.396:7450): avc: denied { getattr } for pid=42970 comm="prometheus" laddr=172.21.15.70 lport=60106 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074609.817:8100): avc: denied { open } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/osds-overview.json" dev="overlay" ino=1574981 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074662.485:8351): avc: denied { getattr } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074472.737:7436): avc: denied { write } for pid=25049 comm="fn_monstore" path="pipe:[122606]" dev="pipefs" ino=122606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074606.067:8066): avc: denied { read } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074757.090:8868): avc: denied { read } for pid=34011 comm="node_exporter" name="file-nr" dev="proc" ino=163278 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074325.396:6690): avc: denied { create } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074547.090:7793): avc: denied { read } for pid=34011 comm="node_exporter" name="file-nr" dev="proc" ino=163278 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074540.810:7754): avc: denied { use } for pid=25049 comm="fn_monstore" path="pipe:[122606]" dev="pipefs" ino=122606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074755.396:8855): avc: denied { getattr } for pid=42970 comm="prometheus" laddr=172.21.15.70 lport=42168 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074660.693:8303): avc: denied { getattr } for pid=25430 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074625.211:8152): avc: denied { read } for pid=42158 comm="grafana-server" name="png" dev="sda1" ino=1968520 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074743.266:8772): avc: denied { getattr } for pid=101080 comm="pgrep" path="/proc/25025" dev="proc" ino=121537 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074747.816:8837): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/etc" dev="sda1" ino=1968517 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074522.817:7642): avc: denied { read } for pid=42158 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074625.212:8153): avc: denied { write } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db-journal" dev="overlay" ino=1970756 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074403.347:7103): avc: denied { read } for pid=25430 comm="safe_timer" name="os-release" dev="overlay" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074595.002:8003): avc: denied { read } for pid=44849 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074547.090:7797): avc: denied { read } for pid=34011 comm="node_exporter" name="ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074612.475:8108): avc: denied { search } for pid=25049 comm="safe_timer" name="mon.smithi070" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074522.460:7629): avc: denied { getattr } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074387.091:6944): avc: denied { search } for pid=34011 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074591.816:7936): avc: denied { open } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/rbd-details.json" dev="sda1" ino=1574987 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074477.091:7473): avc: denied { read } for pid=34011 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074617.089:8127): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074755.396:8853): avc: denied { setopt } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074336.987:6758): avc: denied { search } for pid=25430 comm="safe_timer" name="libpod-6a25c082565bd3ed2efe9bc44b0985e4ada790df478c338ace111c62aac839e4.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074323.349:6681): avc: denied { write } for pid=74123 comm="msgr-worker-1" laddr=172.21.15.70 lport=46984 faddr=172.21.15.70 fport=6802 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074747.596:8831): avc: denied { sendto } for pid=25025 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074606.067:8065): avc: denied { lock } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074540.816:7761): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074521.919:7605): avc: denied { open } for pid=25430 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074617.089:8134): avc: denied { read } for pid=34011 comm="node_exporter" name="physical_package_id" dev="sysfs" ino=28908 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074467.090:7392): avc: denied { read } for pid=34011 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074667.089:8388): avc: denied { read } for pid=34011 comm="node_exporter" name="stat" dev="proc" ino=161398 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074623.240:8147): avc: denied { read } for pid=94962 comm="pgrep" name="status" dev="proc" ino=121541 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074669.817:8418): avc: denied { read open } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074667.090:8406): avc: denied { search } for pid=34011 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074659.369:8282): avc: denied { read } for pid=50591 comm="msgr-worker-1" path="pipe:[202352]" dev="pipefs" ino=202352 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074387.816:6992): avc: denied { read } for pid=42158 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074729.708:8650): avc: denied { read } for pid=56060 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074667.090:8400): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074477.089:7457): avc: denied { search } for pid=34011 comm="node_exporter" name="7" dev="proc" ino=153578 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074407.089:7117): avc: denied { read } for pid=34011 comm="node_exporter" name="stat" dev="proc" ino=161398 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074471.673:7420): avc: denied { getattr } for pid=25430 comm="safe_timer" name="os-release" dev="sda1" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074608.765:8080): avc: denied { read } for pid=56060 comm="msgr-worker-1" path="pipe:[220215]" dev="pipefs" ino=220215 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074541.555:7768): avc: denied { search } for pid=56060 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c563,c789 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074540.810:7756): avc: denied { write } for pid=25025 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074467.090:7397): avc: denied { search } for pid=34011 comm="node_exporter" name="1" dev="proc" ino=160800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074337.090:6777): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=161409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074540.810:7755): avc: denied { read } for pid=25025 comm="conmon" path="pipe:[122606]" dev="pipefs" ino=122606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074523.562:7660): avc: denied { write } for pid=40720 comm="osd_srv_heartbt" path="pipe:[182295]" dev="pipefs" ino=182295 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074401.719:7079): avc: denied { search } for pid=44849 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1970624 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074337.093:6786): avc: denied { search } for pid=34011 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074407.090:7119): avc: denied { read } for pid=34011 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074733.126:8721): avc: denied { read } for pid=25430 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074539.807:7740): avc: denied { read } for pid=25049 comm="msgr-worker-2" path="pipe:[123409]" dev="pipefs" ino=123409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074313.431:6551): avc: denied { search } for pid=25025 comm="conmon" name="/" dev="tmpfs" ino=14023 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074387.432:6979): avc: denied { dac_read_search } for pid=25049 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074625.211:8150): avc: denied { getattr } for pid=42158 comm="grafana-server" name="png" dev="sda1" ino=1968520 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074678.813:8463): avc: denied { open } for pid=25430 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074522.813:7630): avc: denied { write } for pid=25049 comm="fn_monstore" path="pipe:[122606]" dev="pipefs" ino=122606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074678.813:8463): avc: denied { read } for pid=25430 comm="safe_timer" name="os-release" dev="sda1" ino=394714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074337.090:6772): avc: denied { read } for pid=34011 comm="node_exporter" name="arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074594.041:7976): avc: denied { read } for pid=25430 comm="mgr-fin" name="localtime" dev="sda1" ino=394696 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074542.463:7773): avc: denied { getattr } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074315.396:6567): avc: denied { signal } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074678.813:8463): avc: denied { open } for pid=25430 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074332.421:6706): avc: denied { open } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074387.091:6944): avc: denied { getattr } for pid=34011 comm="node_exporter" name="/" dev="tmpfs" ino=14024 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074402.816:7092): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/etc" dev="sda1" ino=1968517 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074316.866:6601): avc: denied { search } for pid=25430 comm="safe_timer" name="/" dev="overlay" ino=1443998 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074680.772:8479): avc: denied { search } for pid=50591 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970693 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c817,c841 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074687.092:8519): avc: denied { getattr } for pid=34011 comm="node_exporter" name="/" dev="tmpfs" ino=14024 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074540.816:7761): avc: denied { search } for pid=42158 comm="grafana-server" name="/" dev="overlay" ino=1968511 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074522.813:7632): avc: denied { search } for pid=25025 comm="conmon" name="systemd" dev="tmpfs" ino=14032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074335.396:6726): avc: denied { create } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074403.347:7103): avc: denied { open } for pid=25430 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074314.023:6562): avc: denied { search } for pid=25430 comm="mgr-fin" name="usr" dev="sda1" ino=789157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074392.433:7025): avc: denied { search } for pid=25049 comm="safe_timer" name="var" dev="sda1" ino=1443987 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c220,c900 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074401.664:7073): avc: denied { read } for pid=25025 comm="conmon" path="pipe:[122606]" dev="pipefs" ino=122606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074335.370:6721): avc: denied { write } for pid=25049 comm="msgr-worker-2" laddr=172.21.15.70 lport=3300 faddr=172.21.15.103 fport=47758 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074672.547:8420): avc: denied { read } for pid=25430 comm="mgr-fin" path="pipe:[147605]" dev="pipefs" ino=147605 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074591.060:7916): avc: denied { write } for pid=25049 comm="msgr-worker-2" laddr=172.21.15.70 lport=3300 faddr=172.21.15.103 fport=47758 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074609.704:8093): avc: denied { open } for pid=40720 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074337.090:6770): avc: denied { read } for pid=34011 comm="node_exporter" name="ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074452.242:7243): avc: denied { search } for pid=50591 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970693 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c817,c841 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074543.831:7778): avc: denied { signal } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074591.070:7922): avc: denied { open } for pid=40720 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074471.661:7418): avc: denied { search } for pid=25430 comm="safe_timer" name="libpod-6a25c082565bd3ed2efe9bc44b0985e4ada790df478c338ace111c62aac839e4.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074732.496:8708): avc: denied { search } for pid=25049 comm="safe_timer" name="var" dev="sda1" ino=1443987 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c220,c900 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074401.664:7074): avc: denied { search } for pid=25025 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074387.817:6993): avc: denied { open } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/osd-device-details.json" dev="overlay" ino=1574980 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074737.090:8741): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=162545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074591.816:7934): avc: denied { read } for pid=42158 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074743.266:8773): avc: denied { read } for pid=101080 comm="pgrep" name="status" dev="proc" ino=121541 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074397.089:7036): avc: denied { search } for pid=34011 comm="node_exporter" name="7" dev="proc" ino=153578 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074392.433:7025): avc: denied { search } for pid=25049 comm="safe_timer" name="/" dev="overlay" ino=1443979 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c220,c900 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074659.613:8291): avc: denied { read } for pid=25025 comm="conmon" path="pipe:[122606]" dev="pipefs" ino=122606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074594.308:7996): avc: denied { open } for pid=25430 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074617.088:8124): avc: denied { search } for pid=34011 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074617.091:8144): avc: denied { search } for pid=34011 comm="node_exporter" name="net" dev="proc" ino=153584 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074617.090:8138): avc: denied { search } for pid=34011 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074387.261:6959): avc: denied { getattr } for pid=25430 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074335.370:6722): avc: denied { write } for pid=25049 comm="ms_dispatch" path="pipe:[123409]" dev="pipefs" ino=123409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074471.347:7409): avc: denied { write } for pid=25430 comm="msgr-worker-1" laddr=172.21.15.70 lport=37040 faddr=172.21.15.70 fport=3300 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074453.575:7288): avc: denied { read } for pid=25430 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074397.090:7048): avc: denied { open } for pid=34011 comm="node_exporter" path="/sys/fs/xfs/dm-4/stats/stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074597.089:8027): avc: denied { search } for pid=34011 comm="node_exporter" name="7" dev="proc" ino=153578 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074402.816:7097): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="sda1" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074731.126:8683): avc: denied { read } for pid=25430 comm="safe_timer" name="os-release" dev="sda1" ino=394714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074453.587:7290): avc: denied { open } for pid=25430 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074729.816:8659): avc: denied { read open } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074596.308:8020): avc: denied { search } for pid=25430 comm="safe_timer" name="libpod-6a25c082565bd3ed2efe9bc44b0985e4ada790df478c338ace111c62aac839e4.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074539.969:7743): avc: denied { search } for pid=50591 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074627.089:8166): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/7/net/arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074453.426:7269): avc: denied { search } for pid=44849 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970624 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c792,c938 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074471.661:7416): avc: denied { search } for pid=25430 comm="safe_timer" name="/" dev="overlay" ino=1443998 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074387.091:6947): avc: denied { search } for pid=34011 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074323.175:6677): avc: denied { search } for pid=82408 comm="pgrep" name="25025" dev="proc" ino=121537 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074317.091:6639): avc: denied { search } for pid=34011 comm="node_exporter" name="net" dev="proc" ino=153584 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074454.714:7314): avc: denied { write } for pid=25025 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074757.090:8872): avc: denied { read } for pid=34011 comm="node_exporter" name="eno1" dev="sysfs" ino=35284 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074402.816:7095): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074335.640:6741): avc: denied { write } for pid=25025 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074457.090:7365): avc: denied { search } for pid=34011 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074402.435:7083): avc: denied { open } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074336.987:6757): avc: denied { search } for pid=25430 comm="safe_timer" name="/" dev="overlay" ino=1443998 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074737.089:8739): avc: denied { search } for pid=34011 comm="node_exporter" name="7" dev="proc" ino=153578 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074397.089:7036): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=161398 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074757.090:8864): avc: denied { search } for pid=34011 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074625.212:8153): avc: denied { create } for pid=42158 comm="grafana-server" name="grafana.db-journal" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074608.764:8078): avc: denied { read } for pid=56060 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074678.801:8461): avc: denied { search } for pid=25430 comm="safe_timer" name="libpod-6a25c082565bd3ed2efe9bc44b0985e4ada790df478c338ace111c62aac839e4.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074610.392:8102): avc: denied { open } for pid=25430 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074659.612:8289): avc: denied { write } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074747.199:8819): avc: denied { read } for pid=25430 comm="safe_timer" name="os-release" dev="overlay" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074521.907:7602): avc: denied { search } for pid=25430 comm="safe_timer" name="diff" dev="sda1" ino=1443998 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074745.396:8794): avc: denied { read } for pid=42970 comm="prometheus" path="socket:[362956]" dev="sockfs" ino=362956 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074591.816:7933): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074325.396:6692): avc: denied { setopt } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074737.089:8737): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074623.240:8146): avc: denied { getattr } for pid=94962 comm="pgrep" path="/proc/25025" dev="proc" ino=121537 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074389.028:7010): avc: denied { search } for pid=25430 comm="mgr-fin" name="/" dev="overlay" ino=1443998 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074540.810:7756): avc: denied { write } for pid=25025 comm="conmon" name="socket" dev="tmpfs" ino=14322 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074677.487:8440): avc: denied { search } for pid=25049 comm="safe_timer" name="/" dev="overlay" ino=1443979 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c220,c900 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074747.596:8831): avc: denied { search } for pid=25025 comm="conmon" name="journal" dev="tmpfs" ino=14310 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074387.090:6938): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/sys/fs/xfs/stats/stats" dev="sysfs" ino=45563 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074540.816:7765): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074386.067:6919): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074591.060:7917): avc: denied { append } for pid=25049 comm="log" path="/var/log/ceph/ceph-mon.smithi070.log" dev="sda1" ino=396134 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074522.460:7626): avc: denied { getattr } for pid=25049 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074475.396:7448): avc: denied { setopt } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074731.881:8700): avc: denied { write } for pid=40720 comm="tp_osd_tp" path="pipe:[182296]" dev="pipefs" ino=182296 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074747.090:8807): avc: denied { search } for pid=34011 comm="node_exporter" name="host" dev="sda1" ino=1970499 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c602,c840 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074317.004:6619): avc: denied { append } for pid=40720 comm="log" path="/var/log/ceph/ceph-osd.0.log" dev="sda1" ino=396207 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074747.199:8819): avc: denied { getattr } for pid=25430 comm="safe_timer" name="os-release" dev="sda1" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074547.090:7800): avc: denied { search } for pid=34011 comm="node_exporter" name="net" dev="proc" ino=153584 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074667.485:8414): avc: denied { getattr } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074674.493:8426): avc: denied { use } for pid=25049 comm="fn_monstore" path="pipe:[122606]" dev="pipefs" ino=122606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074527.090:7699): avc: denied { open } for pid=34011 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=21498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074467.091:7399): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=163278 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074527.461:7718): avc: denied { open } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074317.092:6641): avc: denied { search } for pid=34011 comm="node_exporter" name="/" dev="overlay" ino=1970490 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c602,c840 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074337.092:6783): avc: denied { search } for pid=34011 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074594.296:7995): avc: denied { getattr } for pid=25430 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074317.092:6640): avc: denied { search } for pid=34011 comm="node_exporter" name="kernel" dev="proc" ino=165243 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074316.058:6600): avc: denied { search } for pid=40720 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074609.817:8099): avc: denied { open } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074324.816:6688): avc: denied { read } for pid=42158 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074663.816:8365): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/etc" dev="sda1" ino=1968517 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074744.816:8783): avc: denied { read } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074457.090:7350): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/7/net/sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074685.395:8490): avc: denied { create } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074313.431:6550): avc: denied { read } for pid=25025 comm="conmon" path="pipe:[122606]" dev="pipefs" ino=122606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074313.431:6549): avc: denied { use } for pid=25049 comm="fn_monstore" path="pipe:[122606]" dev="pipefs" ino=122606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074737.092:8758): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=161409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074597.089:8025): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074323.175:6679): avc: denied { open } for pid=82408 comm="pgrep" path="/proc/25049/status" dev="proc" ino=121712 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074522.817:7643): avc: denied { open } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/hosts-overview.json" dev="overlay" ino=1574979 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074407.091:7136): avc: denied { search } for pid=34011 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074747.199:8819): avc: denied { search } for pid=25430 comm="safe_timer" name="usr" dev="sda1" ino=789157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074403.347:7104): avc: denied { getattr } for pid=25430 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074625.338:8154): avc: denied { unlink } for pid=42158 comm="grafana-server" name="grafana.db-journal" dev="overlay" ino=1970756 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074527.089:7695): avc: denied { search } for pid=34011 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074527.089:7691): avc: denied { search } for pid=34011 comm="node_exporter" name="7" dev="proc" ino=153578 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074747.483:8822): avc: denied { read } for pid=44849 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074527.090:7702): avc: denied { read } for pid=34011 comm="node_exporter" name="file-nr" dev="proc" ino=163278 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074456.067:7335): avc: denied { search } for pid=42158 comm="grafana-server" name="var" dev="sda1" ino=1968527 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074315.816:6583): avc: denied { open } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="overlay" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074457.089:7345): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074732.030:8703): avc: denied { search } for pid=50591 comm="safe_timer" name="/" dev="overlay" ino=1970693 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c817,c841 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074452.242:7249): avc: denied { read } for pid=44849 comm="msgr-worker-1" path="socket:[205450]" dev="sockfs" ino=205450 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074317.089:6624): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/stat" dev="proc" ino=4026532033 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074542.463:7770): avc: denied { search } for pid=25049 comm="safe_timer" name="var" dev="sda1" ino=1443987 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c220,c900 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074732.706:8712): avc: denied { search } for pid=56060 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074729.568:8642): avc: denied { use } for pid=25049 comm="fn_monstore" path="pipe:[122606]" dev="pipefs" ino=122606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074387.261:6957): avc: denied { search } for pid=25430 comm="safe_timer" name="/" dev="overlay" ino=1443998 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074678.816:8465): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074540.817:7767): avc: denied { open } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/cephfs-overview.json" dev="overlay" ino=1574977 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074663.618:8359): avc: denied { search } for pid=25025 comm="conmon" name="journal" dev="tmpfs" ino=14310 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074617.090:8139): avc: denied { search } for pid=34011 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074617.090:8140): avc: denied { search } for pid=34011 comm="node_exporter" name="/" dev="tmpfs" ino=14023 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074401.664:7074): avc: denied { search } for pid=25025 comm="conmon" name="journal" dev="tmpfs" ino=14310 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074545.396:7782): avc: denied { setopt } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074457.599:7377): avc: denied { search } for pid=25430 comm="safe_timer" name="diff" dev="sda1" ino=1443998 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074625.211:8150): avc: denied { search } for pid=42158 comm="grafana-server" name="var" dev="sda1" ino=1968527 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074747.199:8818): avc: denied { getattr } for pid=25430 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074540.816:7766): avc: denied { read open } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074317.004:6618): avc: denied { append } for pid=56060 comm="log" path="/var/log/ceph/ceph-osd.3.log" dev="sda1" ino=396216 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074336.816:6752): avc: denied { search } for pid=42158 comm="grafana-server" name="dashboards" dev="sda1" ino=1574974 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074547.090:7797): avc: denied { open } for pid=34011 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074737.090:8755): avc: denied { search } for pid=34011 comm="node_exporter" name="net" dev="proc" ino=153584 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074527.461:7719): avc: denied { getattr } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074539.969:7743): avc: denied { read } for pid=50591 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074387.261:6960): avc: denied { read } for pid=25430 comm="safe_timer" name="os-release" dev="overlay" ino=394714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074747.816:8839): avc: denied { read } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074737.090:8743): avc: denied { search } for pid=34011 comm="node_exporter" name="fs" dev="proc" ino=163277 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074471.816:7424): avc: denied { search } for pid=42158 comm="grafana-server" name="etc" dev="sda1" ino=1968517 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074627.090:8168): avc: denied { read } for pid=34011 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074467.648:7401): avc: denied { search } for pid=25430 comm="safe_timer" name="/" dev="overlay" ino=1443998 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074522.460:7627): avc: denied { search } for pid=25049 comm="safe_timer" name="mon.smithi070" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074407.090:7128): avc: denied { read } for pid=34011 comm="node_exporter" name="cpuinfo_max_freq" dev="sysfs" ino=30846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074615.396:8111): avc: denied { search } for pid=42970 comm="prometheus" name="etc" dev="sda1" ino=1970616 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c364 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074521.076:7596): avc: denied { write } for pid=40720 comm="msgr-worker-2" laddr=172.21.15.70 lport=6802 faddr=172.21.15.103 fport=44018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074623.240:8149): avc: denied { open } for pid=94962 comm="pgrep" path="/proc/25049/status" dev="proc" ino=121712 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074327.090:6700): avc: denied { read } for pid=34011 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074386.438:6925): avc: denied { search } for pid=56060 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074747.816:8841): avc: denied { read } for pid=42158 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074743.266:8775): avc: denied { open } for pid=101080 comm="pgrep" path="/proc/25049/status" dev="proc" ino=121712 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074389.028:7010): avc: denied { read } for pid=25430 comm="mgr-fin" name="localtime" dev="overlay" ino=394696 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074317.092:6646): avc: denied { search } for pid=34011 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074591.816:7933): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074405.396:7105): avc: denied { signal } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074757.090:8875): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=162545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074527.089:7689): avc: denied { search } for pid=34011 comm="node_exporter" name="/" dev="overlay" ino=1970490 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c602,c840 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074757.094:8879): avc: denied { search } for pid=34011 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074317.089:6621): avc: denied { search } for pid=34011 comm="node_exporter" name="/" dev="overlay" ino=1970490 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c602,c840 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074737.092:8764): avc: denied { search } for pid=34011 comm="node_exporter" name="host" dev="sda1" ino=1970499 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c602,c840 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074685.395:8492): avc: denied { setopt } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074455.396:7329): avc: denied { connect } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074405.396:7113): avc: denied { read } for pid=42970 comm="prometheus" path="socket:[305233]" dev="sockfs" ino=305233 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074323.175:6677): avc: denied { open } for pid=82408 comm="pgrep" path="/proc/25025/status" dev="proc" ino=121541 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074617.088:8122): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=161398 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074597.090:8035): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=43630 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074591.816:7932): avc: denied { read } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074537.090:7732): avc: denied { search } for pid=34011 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074663.618:8359): avc: denied { write } for pid=25025 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074527.090:7701): avc: denied { open } for pid=34011 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074687.091:8517): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=163278 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074452.447:7253): avc: denied { getattr } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074662.485:8349): avc: denied { dac_read_search } for pid=25049 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074732.496:8710): avc: denied { getattr } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074625.563:8164): avc: denied { search } for pid=25025 comm="conmon" name="systemd" dev="tmpfs" ino=14032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074747.498:8824): avc: denied { open } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074687.089:8499): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc/7" dev="proc" ino=153578 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074729.816:8657): avc: denied { read } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074543.831:7775): avc: denied { read } for pid=42970 comm="prometheus" name="data" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c364 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074522.813:7632): avc: denied { write } for pid=25025 comm="conmon" name="socket" dev="tmpfs" ino=14322 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074467.090:7394): avc: denied { search } for pid=34011 comm="node_exporter" name="kernel" dev="proc" ino=165243 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074477.092:7480): avc: denied { search } for pid=34011 comm="node_exporter" name="fs" dev="proc" ino=163277 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074659.459:8287): avc: denied { open } for pid=44849 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074335.095:6718): avc: denied { read } for pid=40720 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074663.158:8356): avc: denied { read } for pid=25430 comm="msgr-worker-0" path="socket:[274532]" dev="sockfs" ino=274532 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074389.658:7021): avc: denied { sendto } for pid=25025 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074477.092:7477): avc: denied { search } for pid=34011 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074617.090:8143): avc: denied { search } for pid=34011 comm="node_exporter" name="host" dev="sda1" ino=1970499 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c602,c840 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074617.089:8132): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=161409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074687.089:8500): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=161398 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074389.657:7020): avc: denied { write } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db/000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074597.090:8032): avc: denied { read } for pid=34011 comm="node_exporter" name="hwmon" dev="sysfs" ino=21483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074745.396:8792): avc: denied { getattr } for pid=42970 comm="prometheus" laddr=172.21.15.70 lport=37714 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074677.089:8433): avc: denied { read } for pid=34011 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074457.599:7380): avc: denied { read } for pid=25430 comm="safe_timer" name="os-release" dev="overlay" ino=394714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074522.460:7626): avc: denied { search } for pid=25049 comm="safe_timer" name="/" dev="overlay" ino=1443979 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c220,c900 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074522.460:7626): avc: denied { dac_read_search } for pid=25049 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074591.816:7929): avc: denied { getattr } for pid=42158 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074335.640:6741): avc: denied { search } for pid=25025 comm="conmon" name="journal" dev="tmpfs" ino=14310 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074387.432:6980): avc: denied { search } for pid=25049 comm="safe_timer" name="mon.smithi070" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074625.211:8152): avc: denied { open } for pid=42158 comm="grafana-server" path="/var/lib/grafana/png" dev="overlay" ino=1968520 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074747.199:8816): avc: denied { search } for pid=25430 comm="safe_timer" name="diff" dev="sda1" ino=1443998 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074729.423:8636): avc: denied { read } for pid=76127 comm="msgr-worker-1" path="pipe:[267043]" dev="pipefs" ino=267043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074618.484:8145): avc: denied { signal } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074522.460:7628): avc: denied { getattr } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074547.090:7794): avc: denied { read } for pid=34011 comm="node_exporter" name="dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074747.498:8823): avc: denied { search } for pid=25049 comm="safe_timer" name="var" dev="sda1" ino=1443987 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c220,c900 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074737.089:8739): avc: denied { read } for pid=34011 comm="node_exporter" name="stat" dev="proc" ino=161398 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074527.090:7706): avc: denied { read } for pid=34011 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074452.755:7268): avc: denied { search } for pid=40720 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970655 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c69,c600 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074387.089:6935): avc: denied { search } for pid=34011 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074315.396:6574): avc: denied { read } for pid=42970 comm="prometheus" path="socket:[285853]" dev="sockfs" ino=285853 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074747.199:8817): avc: denied { open } for pid=25430 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074317.089:6620): avc: denied { signal } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074407.089:7117): avc: denied { search } for pid=34011 comm="node_exporter" name="7" dev="proc" ino=153578 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074475.396:7445): avc: denied { search } for pid=42970 comm="prometheus" name="/" dev="overlay" ino=1968522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c364 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074327.090:6701): avc: denied { read } for pid=34011 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074470.854:7404): avc: denied { search } for pid=50591 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074475.397:7454): avc: denied { append } for pid=42970 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c364 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074617.089:8130): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=43630 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074477.090:7469): avc: denied { search } for pid=34011 comm="node_exporter" name="1" dev="proc" ino=160800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074744.817:8785): avc: denied { open } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-sync-overview.json" dev="overlay" ino=1574986 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074467.090:7395): avc: denied { open } for pid=34011 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=30846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074457.090:7363): avc: denied { search } for pid=34011 comm="node_exporter" name="/" dev="tmpfs" ino=14023 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074667.091:8409): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=161409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074757.093:8876): avc: denied { getattr } for pid=34011 comm="node_exporter" name="/" dev="tmpfs" ino=14024 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074407.090:7122): avc: denied { read } for pid=34011 comm="node_exporter" name="hwmon0" dev="sysfs" ino=35483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074737.150:8765): avc: denied { append } for pid=25430 comm="log" path="/var/log/ceph/ceph-mgr.smithi070.farums.log" dev="sda1" ino=396140 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074337.090:6769): avc: denied { search } for pid=34011 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074592.473:7952): avc: denied { getattr } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074523.931:7665): avc: denied { read } for pid=25430 comm="safe_timer" name="os-release" dev="overlay" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074386.696:6927): avc: denied { open } for pid=44849 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074385.653:6910): avc: denied { sendto } for pid=25025 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074456.191:7338): avc: denied { signal } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074477.090:7469): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=162545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074336.999:6760): avc: denied { open } for pid=25430 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074521.919:7605): avc: denied { read } for pid=25430 comm="safe_timer" name="os-release" dev="sda1" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074667.090:8391): avc: denied { read } for pid=34011 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074335.722:6746): avc: denied { search } for pid=44849 comm="safe_timer" name="/" dev="overlay" ino=1970624 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c792,c938 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074729.568:8644): avc: denied { search } for pid=25025 comm="conmon" name="systemd" dev="tmpfs" ino=14032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074537.089:7731): avc: denied { search } for pid=34011 comm="node_exporter" name="/" dev="overlay" ino=1970490 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c602,c840 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074458.719:7383): avc: denied { use } for pid=25049 comm="fn_monstore" path="pipe:[122606]" dev="pipefs" ino=122606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074527.090:7709): avc: denied { read } for pid=34011 comm="node_exporter" name="mounts" dev="proc" ino=162545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074617.089:8131): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/hwmon/hwmon0" dev="sysfs" ino=35479 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074591.816:7935): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="sda1" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074527.089:7689): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074407.089:7115): avc: denied { search } for pid=34011 comm="node_exporter" name="/" dev="overlay" ino=1970490 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c602,c840 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074337.090:6776): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=161409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074337.422:6793): avc: denied { search } for pid=25049 comm="safe_timer" name="/" dev="overlay" ino=1443979 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c220,c900 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074402.816:7096): avc: denied { read } for pid=42158 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074471.673:7420): avc: denied { read } for pid=25430 comm="safe_timer" name="os-release" dev="overlay" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074389.028:7010): avc: denied { getattr } for pid=25430 comm="mgr-fin" path="/usr/share/zoneinfo/UTC" dev="overlay" ino=1312328 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074677.089:8434): avc: denied { search } for pid=34011 comm="node_exporter" name="1" dev="proc" ino=160800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074387.091:6945): avc: denied { search } for pid=34011 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074625.563:8164): avc: denied { search } for pid=25025 comm="conmon" name="journal" dev="tmpfs" ino=14310 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074678.813:8463): avc: denied { search } for pid=25430 comm="safe_timer" name="etc" dev="sda1" ino=1444007 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074659.459:8286): avc: denied { search } for pid=44849 comm="safe_timer" name="/" dev="overlay" ino=1970624 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c792,c938 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074471.816:7429): avc: denied { read open } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074314.866:6566): avc: denied { read } for pid=25430 comm="safe_timer" name="os-release" dev="sda1" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074401.664:7074): avc: denied { sendto } for pid=25025 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074388.477:7004): avc: denied { open } for pid=50591 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074609.704:8092): avc: denied { search } for pid=40720 comm="safe_timer" name="/" dev="overlay" ino=1970655 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c69,c600 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074748.280:8844): avc: denied { search } for pid=56060 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c563,c789 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074325.396:6689): avc: denied { search } for pid=42970 comm="prometheus" name="/" dev="overlay" ino=1968522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c364 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074659.369:8279): avc: denied { search } for pid=50591 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074729.568:8644): avc: denied { write } for pid=25025 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074472.738:7438): avc: denied { search } for pid=25025 comm="conmon" name="/" dev="tmpfs" ino=14023 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074521.076:7593): avc: denied { read } for pid=56060 comm="msgr-worker-2" path="socket:[269746]" dev="sockfs" ino=269746 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074615.396:8114): avc: denied { setopt } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074625.211:8152): avc: denied { read } for pid=42158 comm="grafana-server" name="png" dev="overlay" ino=1968520 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074323.175:6678): avc: denied { getattr } for pid=82408 comm="pgrep" path="/proc/25049" dev="proc" ino=121656 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074625.545:8157): avc: denied { name_connect } for pid=42158 comm="grafana-server" dest=443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:http_port_t:s0 tclass=tcp_socket permissive=1', 'type=AVC msg=audit(1616074757.090:8868): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=163278 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074615.396:8117): avc: denied { write } for pid=42970 comm="prometheus" path="socket:[337829]" dev="sockfs" ino=337829 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074667.090:8393): avc: denied { read } for pid=34011 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074672.550:8421): avc: denied { getattr } for pid=25430 comm="mgr-fin" path="/usr/lib64/python3.6" dev="overlay" ino=1050261 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074336.067:6749): avc: denied { read } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074679.500:8474): avc: denied { search } for pid=25025 comm="conmon" name="systemd" dev="tmpfs" ino=14032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074385.652:6902): avc: denied { append } for pid=25049 comm="log" path="/var/log/ceph/ceph-mon.smithi070.log" dev="sda1" ino=396134 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074471.661:7415): avc: denied { open } for pid=44849 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074317.089:6621): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074594.062:7978): avc: denied { read } for pid=25025 comm="conmon" path="pipe:[122606]" dev="pipefs" ino=122606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074401.664:7074): avc: denied { search } for pid=25025 comm="conmon" name="/" dev="tmpfs" ino=14023 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074596.320:8021): avc: denied { open } for pid=25430 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074475.396:7451): avc: denied { write } for pid=42970 comm="prometheus" path="socket:[316609]" dev="sockfs" ino=316609 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074387.091:6949): avc: denied { search } for pid=34011 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616074612.475:8108): avc: denied { open } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074625.553:8161): avc: denied { read } for pid=42158 comm="grafana-server" path="socket:[333774]" dev="sockfs" ino=333774 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074609.486:8087): avc: denied { write } for pid=25025 comm="conmon" name="socket" dev="tmpfs" ino=14322 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074743.266:8773): avc: denied { open } for pid=101080 comm="pgrep" path="/proc/25025/status" dev="proc" ino=121541 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074678.801:8461): avc: denied { open } for pid=25430 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074747.199:8816): avc: denied { search } for pid=25430 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074337.093:6788): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074597.090:8039): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/sys/fs/xfs/stats/stats" dev="sysfs" ino=45563 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074608.765:8081): avc: denied { write } for pid=56060 comm="msgr-worker-1" laddr=172.21.15.70 lport=50580 faddr=172.21.15.70 fport=6808 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074335.396:6725): avc: denied { getattr } for pid=42970 comm="prometheus" path="/etc/hosts" dev="tmpfs" ino=186485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074547.094:7810): avc: denied { search } for pid=34011 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074402.816:7094): avc: denied { read } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074385.653:6909): avc: denied { read } for pid=25025 comm="conmon" path="pipe:[122606]" dev="pipefs" ino=122606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074399.816:7063): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074407.092:7140): avc: denied { search } for pid=34011 comm="node_exporter" name="host" dev="sda1" ino=1970499 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c602,c840 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074667.090:8398): avc: denied { read } for pid=34011 comm="node_exporter" name="file-nr" dev="proc" ino=163278 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074315.396:6568): avc: denied { search } for pid=42970 comm="prometheus" name="etc" dev="sda1" ino=1970616 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c364 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074389.028:7010): avc: denied { search } for pid=25430 comm="mgr-fin" name="etc" dev="sda1" ino=1444007 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074314.866:6566): avc: denied { open } for pid=25430 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074729.816:8658): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074625.212:8153): avc: denied { create } for pid=42158 comm="grafana-server" name="grafana.db-journal" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074547.091:7804): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=161409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074471.661:7415): avc: denied { search } for pid=44849 comm="safe_timer" name="diff" dev="sda1" ino=1970624 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074467.449:7400): avc: denied { dac_read_search } for pid=25049 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074547.089:7789): avc: denied { search } for pid=34011 comm="node_exporter" name="/" dev="overlay" ino=1970490 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c602,c840 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074595.396:8010): avc: denied { setopt } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074678.277:8450): avc: denied { open } for pid=44849 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074453.587:7290): avc: denied { read } for pid=25430 comm="safe_timer" name="os-release" dev="sda1" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074477.091:7474): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074737.090:8754): avc: denied { read } for pid=34011 comm="node_exporter" name="arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074745.396:8791): avc: denied { connect } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074737.090:8741): avc: denied { read } for pid=34011 comm="node_exporter" name="mounts" dev="proc" ino=162545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074313.431:6549): avc: denied { write } for pid=25049 comm="fn_monstore" path="pipe:[122606]" dev="pipefs" ino=122606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074747.199:8817): avc: denied { search } for pid=25430 comm="safe_timer" name="libpod-6a25c082565bd3ed2efe9bc44b0985e4ada790df478c338ace111c62aac839e4.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074403.335:7101): avc: denied { read } for pid=25430 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074457.090:7362): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=161409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074625.211:8151): avc: denied { search } for pid=42158 comm="grafana-server" name="/" dev="overlay" ino=1968511 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074337.090:6766): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=21498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074543.831:7775): avc: denied { open } for pid=42970 comm="prometheus" path="/prometheus" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c364 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074397.658:7059): avc: denied { write } for pid=25025 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074385.652:6905): avc: denied { read } for pid=25049 comm="msgr-worker-2" path="pipe:[123409]" dev="pipefs" ino=123409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074540.006:7751): avc: denied { read } for pid=25430 comm="safe_timer" name="os-release" dev="overlay" ino=394714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074317.094:6647): avc: denied { search } for pid=34011 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074732.828:8716): avc: denied { search } for pid=25430 comm="mgr-fin" name="/" dev="overlay" ino=1443998 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074609.816:8094): avc: denied { getattr } for pid=42158 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074317.419:6658): avc: denied { getattr } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074407.091:7134): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=161409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074747.199:8819): avc: denied { open } for pid=25430 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074729.708:8649): avc: denied { read } for pid=56060 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074314.853:6564): avc: denied { open } for pid=25430 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074757.090:8868): avc: denied { search } for pid=34011 comm="node_exporter" name="fs" dev="proc" ino=163277 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074757.094:8879): avc: denied { search } for pid=34011 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074318.816:6671): avc: denied { open } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/pool-overview.json" dev="sda1" ino=1574983 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074471.661:7417): avc: denied { open } for pid=44849 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074402.816:7098): avc: denied { open } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/cephfs-overview.json" dev="overlay" ino=1574977 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074597.091:8050): avc: denied { read } for pid=34011 comm="node_exporter" name="entropy_avail" dev="proc" ino=161409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074737.092:8759): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=161409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074399.817:7064): avc: denied { open } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-overview.json" dev="overlay" ino=1574985 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074401.826:7080): avc: denied { search } for pid=44849 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074317.090:6628): avc: denied { search } for pid=34011 comm="node_exporter" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074457.090:7355): avc: denied { read } for pid=34011 comm="node_exporter" name="hwmon0" dev="sysfs" ino=35483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074685.395:8496): avc: denied { write } for pid=42970 comm="prometheus" path="socket:[339904]" dev="sockfs" ino=339904 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074540.816:7761): avc: denied { getattr } for pid=42158 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074540.006:7751): avc: denied { search } for pid=25430 comm="safe_timer" name="etc" dev="sda1" ino=1444007 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074660.705:8304): avc: denied { open } for pid=25430 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074386.191:6923): avc: denied { signal } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074667.093:8412): avc: denied { search } for pid=34011 comm="node_exporter" name="net" dev="proc" ino=153584 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074527.089:7693): avc: denied { search } for pid=34011 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074608.765:8079): avc: denied { write } for pid=56060 comm="osd_srv_heartbt" path="pipe:[220215]" dev="pipefs" ino=220215 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074745.396:8786): avc: denied { create } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074407.089:7118): avc: denied { read } for pid=34011 comm="node_exporter" name="fd" dev="proc" ino=161399 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074593.977:7975): avc: denied { search } for pid=56060 comm="safe_timer" name="/" dev="overlay" ino=1970712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c563,c789 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074315.816:6581): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074467.090:7393): avc: denied { read } for pid=34011 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074471.673:7420): avc: denied { search } for pid=25430 comm="safe_timer" name="etc" dev="sda1" ino=1444007 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074678.817:8470): avc: denied { read } for pid=42158 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074317.092:6643): avc: denied { search } for pid=34011 comm="node_exporter" name="/" dev="overlay" ino=1970490 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c602,c840 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074687.090:8507): avc: denied { read } for pid=34011 comm="node_exporter" name="xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074397.089:7042): avc: denied { search } for pid=34011 comm="node_exporter" name="/" dev="overlay" ino=1970490 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c602,c840 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074457.090:7369): avc: denied { read } for pid=34011 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074737.092:8761): avc: denied { search } for pid=34011 comm="node_exporter" name="user" dev="tmpfs" ino=2237 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074665.396:8376): avc: denied { create } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074527.092:7714): avc: denied { search } for pid=34011 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074315.816:6580): avc: denied { read } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074747.199:8816): avc: denied { open } for pid=25430 comm="safe_timer" path="/proc/meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074542.463:7771): avc: denied { read } for pid=25049 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074387.261:6958): avc: denied { read } for pid=25430 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074540.006:7752): avc: denied { getattr } for pid=25430 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074615.396:8115): avc: denied { connect } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074663.407:8357): avc: denied { write } for pid=74123 comm="msgr-worker-1" laddr=172.21.15.70 lport=46984 faddr=172.21.15.70 fport=6802 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074472.450:7431): avc: denied { getattr } for pid=25049 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074452.711:7262): avc: denied { read } for pid=25025 comm="conmon" path="pipe:[122606]" dev="pipefs" ino=122606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074313.431:6551): avc: denied { write } for pid=25025 comm="conmon" name="socket" dev="tmpfs" ino=14322 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074687.090:8506): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074467.089:7389): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc/7" dev="proc" ino=153578 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074472.450:7433): avc: denied { getattr } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074677.487:8440): avc: denied { search } for pid=25049 comm="safe_timer" name="var" dev="sda1" ino=1443987 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c220,c900 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074523.997:7667): avc: denied { search } for pid=50591 comm="safe_timer" name="/" dev="overlay" ino=1970693 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c817,c841 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074323.349:6682): avc: denied { read } for pid=40720 comm="msgr-worker-2" path="socket:[270390]" dev="sockfs" ino=270390 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074591.193:7924): avc: denied { search } for pid=50591 comm="safe_timer" name="/" dev="overlay" ino=1970693 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c817,c841 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074597.090:8036): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/hwmon/hwmon0" dev="sysfs" ino=35479 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074607.090:8070): avc: denied { search } for pid=34011 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074609.041:8083): avc: denied { search } for pid=25430 comm="mgr-fin" name="etc" dev="sda1" ino=1444007 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074673.489:8422): avc: denied { write } for pid=25049 comm="fn_monstore" path="pipe:[122606]" dev="pipefs" ino=122606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074547.091:7807): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074625.211:8150): avc: denied { search } for pid=42158 comm="grafana-server" name="/" dev="overlay" ino=1968511 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074747.816:8836): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074597.090:8048): avc: denied { read } for pid=34011 comm="node_exporter" name="file-nr" dev="proc" ino=163278 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074397.089:7037): avc: denied { read } for pid=34011 comm="node_exporter" name="fd" dev="proc" ino=161399 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074335.640:6740): avc: denied { read } for pid=25025 comm="conmon" path="pipe:[122606]" dev="pipefs" ino=122606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074527.090:7705): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/7/net/arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074678.816:8467): avc: denied { lock } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074615.396:8118): avc: denied { read } for pid=42970 comm="prometheus" path="socket:[335480]" dev="sockfs" ino=335480 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074539.807:7738): avc: denied { write } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074591.193:7925): avc: denied { search } for pid=50591 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074591.816:7931): avc: denied { lock } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074539.807:7741): avc: denied { write } for pid=25049 comm="msgr-worker-2" laddr=172.21.15.70 lport=3300 faddr=172.21.15.103 fport=47758 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074682.488:8483): avc: denied { getattr } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074683.253:8485): avc: denied { read } for pid=98027 comm="pgrep" name="status" dev="proc" ino=121541 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074455.396:7330): avc: denied { getattr } for pid=42970 comm="prometheus" laddr=172.21.15.70 lport=46554 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074747.596:8829): avc: denied { write } for pid=25049 comm="fn_monstore" path="pipe:[122606]" dev="pipefs" ino=122606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074397.089:7039): avc: denied { search } for pid=34011 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074551.755:7815): avc: denied { getattr } for pid=25430 comm="mgr-fin" path="/usr/lib64/python3.6" dev="overlay" ino=1050261 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074457.448:7376): avc: denied { getattr } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074660.693:8302): avc: denied { search } for pid=25430 comm="safe_timer" name="libpod-6a25c082565bd3ed2efe9bc44b0985e4ada790df478c338ace111c62aac839e4.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074729.568:8644): avc: denied { sendto } for pid=25025 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074472.738:7437): avc: denied { read } for pid=25025 comm="conmon" path="pipe:[122606]" dev="pipefs" ino=122606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074521.919:7605): avc: denied { read } for pid=25430 comm="safe_timer" name="os-release" dev="overlay" ino=394714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074627.090:8169): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074685.395:8488): avc: denied { search } for pid=42970 comm="prometheus" name="/" dev="overlay" ino=1968522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c364 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074401.719:7079): avc: denied { read } for pid=44849 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074746.816:8799): avc: denied { write } for pid=44849 comm="msgr-worker-1" laddr=172.21.15.70 lport=6814 faddr=172.21.15.103 fport=33212 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074597.090:8046): avc: denied { search } for pid=34011 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074757.090:8873): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/hwmon/hwmon0/uevent" dev="sysfs" ino=35480 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074547.090:7799): avc: denied { search } for pid=34011 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074387.090:6941): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074595.396:8009): avc: denied { create } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074731.114:8681): avc: denied { open } for pid=25430 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074545.396:7784): avc: denied { connect } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074747.596:8831): avc: denied { search } for pid=25025 comm="conmon" name="/" dev="tmpfs" ino=14023 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074335.138:6720): avc: denied { read } for pid=25049 comm="msgr-worker-1" path="socket:[164284]" dev="sockfs" ino=164284 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074387.261:6958): avc: denied { open } for pid=25430 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074335.396:6731): avc: denied { connect } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074610.392:8102): avc: denied { read } for pid=25430 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074387.089:6933): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074597.090:8031): avc: denied { read } for pid=34011 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074591.816:7929): avc: denied { search } for pid=42158 comm="grafana-server" name="etc" dev="sda1" ino=1968517 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074612.475:8107): avc: denied { search } for pid=25049 comm="safe_timer" name="/" dev="overlay" ino=1443979 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c220,c900 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074454.631:7313): avc: denied { read } for pid=50591 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074547.090:7796): avc: denied { open } for pid=34011 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=21498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074677.793:8445): avc: denied { append } for pid=56060 comm="log" path="/var/log/ceph/ceph-osd.3.log" dev="sda1" ino=396216 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074592.059:7938): avc: denied { use } for pid=25049 comm="fn_monstore" path="pipe:[122606]" dev="pipefs" ino=122606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074683.253:8487): avc: denied { open } for pid=98027 comm="pgrep" path="/proc/25049/status" dev="proc" ino=121712 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074678.277:8450): avc: denied { search } for pid=44849 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074475.396:7447): avc: denied { create } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074456.067:7337): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074337.092:6781): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=162545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074757.094:8878): avc: denied { search } for pid=34011 comm="node_exporter" name="/" dev="tmpfs" ino=14023 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074525.396:7683): avc: denied { write } for pid=42970 comm="prometheus" path="socket:[319049]" dev="sockfs" ino=319049 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074385.653:6910): avc: denied { search } for pid=25025 comm="conmon" name="/" dev="tmpfs" ino=14023 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074757.090:8863): avc: denied { search } for pid=34011 comm="node_exporter" name="net" dev="proc" ino=153584 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074663.833:8371): avc: denied { search } for pid=42970 comm="prometheus" name="/" dev="overlay" ino=1968522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c364 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074314.023:6562): avc: denied { read } for pid=25430 comm="mgr-fin" name="localtime" dev="overlay" ino=394696 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074542.463:7771): avc: denied { search } for pid=25049 comm="safe_timer" name="mon.smithi070" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074606.067:8067): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074337.090:6772): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/7/net/arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074625.545:8156): avc: denied { setopt } for pid=42158 comm="grafana-server" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074747.498:8823): avc: denied { getattr } for pid=25049 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074747.816:8839): avc: denied { read } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074528.466:7724): avc: denied { search } for pid=25025 comm="conmon" name="/" dev="tmpfs" ino=14023 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074522.813:7630): avc: denied { use } for pid=25049 comm="fn_monstore" path="pipe:[122606]" dev="pipefs" ino=122606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074453.575:7287): avc: denied { search } for pid=25430 comm="safe_timer" name="/" dev="overlay" ino=1443998 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074539.969:7744): avc: denied { open } for pid=50591 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074314.023:6562): avc: denied { search } for pid=25430 comm="mgr-fin" name="etc" dev="sda1" ino=1444007 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074402.816:7091): avc: denied { search } for pid=42158 comm="grafana-server" name="/" dev="overlay" ino=1968511 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074453.816:7293): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/etc" dev="sda1" ino=1968517 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074745.396:8790): avc: denied { connect } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074609.486:8087): avc: denied { search } for pid=25025 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074521.907:7602): avc: denied { open } for pid=25430 comm="safe_timer" path="/proc/meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074597.090:8048): avc: denied { search } for pid=34011 comm="node_exporter" name="fs" dev="proc" ino=163277 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074397.090:7046): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/sys/fs/xfs/stats/stats" dev="sysfs" ino=45563 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074397.090:7050): avc: denied { read } for pid=34011 comm="node_exporter" name="entropy_avail" dev="proc" ino=161409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074453.587:7290): avc: denied { search } for pid=25430 comm="safe_timer" name="etc" dev="sda1" ino=1444007 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074477.090:7467): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/sys/fs/xfs/stats/stats" dev="sysfs" ino=45563 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074472.738:7438): avc: denied { sendto } for pid=25025 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074315.397:6575): avc: denied { append } for pid=42970 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c364 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074683.253:8485): avc: denied { search } for pid=98027 comm="pgrep" name="25025" dev="proc" ino=121537 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074407.089:7115): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074385.653:6908): avc: denied { use } for pid=25049 comm="fn_monstore" path="pipe:[122606]" dev="pipefs" ino=122606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074317.419:6657): avc: denied { read } for pid=25049 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074337.090:6768): avc: denied { read } for pid=34011 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074472.738:7438): avc: denied { search } for pid=25025 comm="conmon" name="systemd" dev="tmpfs" ino=14032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074667.090:8390): avc: denied { read } for pid=34011 comm="node_exporter" name="mounts" dev="proc" ino=162545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074457.090:7351): avc: denied { read } for pid=34011 comm="node_exporter" name="mounts" dev="proc" ino=162545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074755.396:8856): avc: denied { write } for pid=42970 comm="prometheus" path="socket:[363897]" dev="sockfs" ino=363897 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074731.114:8680): avc: denied { search } for pid=25430 comm="safe_timer" name="/" dev="overlay" ino=1443998 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074402.816:7091): avc: denied { getattr } for pid=42158 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074593.023:7954): avc: denied { search } for pid=44849 comm="safe_timer" name="/" dev="overlay" ino=1970624 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c792,c938 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074547.090:7796): avc: denied { read } for pid=34011 comm="node_exporter" name="mc" dev="sysfs" ino=21498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074682.488:8480): avc: denied { dac_read_search } for pid=25049 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074729.568:8644): avc: denied { search } for pid=25025 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074660.705:8304): avc: denied { read } for pid=25430 comm="safe_timer" name="os-release" dev="sda1" ino=394714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074313.431:6551): avc: denied { search } for pid=25025 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074452.447:7251): avc: denied { search } for pid=25049 comm="safe_timer" name="var" dev="sda1" ino=1443987 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c220,c900 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074403.335:7101): avc: denied { search } for pid=25430 comm="safe_timer" name="libpod-6a25c082565bd3ed2efe9bc44b0985e4ada790df478c338ace111c62aac839e4.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074454.883:7320): avc: denied { read } for pid=25430 comm="msgr-worker-0" path="socket:[141151]" dev="sockfs" ino=141151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074674.777:8428): avc: denied { read } for pid=25430 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074617.088:8126): avc: denied { read } for pid=34011 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074317.635:6662): avc: denied { write } for pid=25025 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074603.833:8059): avc: denied { getattr } for pid=42970 comm="prometheus" path="/prometheus/queries.active" dev="dm-4" ino=158 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c364 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074597.089:8029): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074746.816:8798): avc: denied { read } for pid=44849 comm="msgr-worker-1" path="socket:[225181]" dev="sockfs" ino=225181 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074395.396:7029): avc: denied { create } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074539.992:7749): avc: denied { search } for pid=25430 comm="safe_timer" name="libpod-6a25c082565bd3ed2efe9bc44b0985e4ada790df478c338ace111c62aac839e4.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074687.090:8507): avc: denied { open } for pid=34011 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074317.090:6633): avc: denied { read } for pid=34011 comm="node_exporter" name="cpuinfo_max_freq" dev="sysfs" ino=30846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074317.100:6652): avc: denied { append } for pid=42970 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c364 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074594.296:7993): avc: denied { search } for pid=25430 comm="safe_timer" name="diff" dev="sda1" ino=1443998 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074729.816:8659): avc: denied { read } for pid=42158 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074407.090:7125): avc: denied { search } for pid=34011 comm="node_exporter" name="1" dev="proc" ino=160800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074336.816:6754): avc: denied { read } for pid=42158 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074458.719:7385): avc: denied { search } for pid=25025 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074547.094:7811): avc: denied { search } for pid=34011 comm="node_exporter" name="/" dev="tmpfs" ino=14023 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074522.813:7632): avc: denied { search } for pid=25025 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074331.646:6705): avc: denied { write } for pid=25025 comm="conmon" name="socket" dev="tmpfs" ino=14322 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074757.090:8867): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074387.432:6981): avc: denied { getattr } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074757.089:8861): avc: denied { read } for pid=34011 comm="node_exporter" name="fd" dev="proc" ino=161399 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074735.396:8728): avc: denied { setopt } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074732.828:8716): avc: denied { read } for pid=25430 comm="mgr-fin" name="lib" dev="overlay" ino=394927 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074527.090:7703): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074674.641:8427): avc: denied { search } for pid=56060 comm="safe_timer" name="/" dev="overlay" ino=1970712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c563,c789 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074527.090:7702): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=163278 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074547.094:7809): avc: denied { search } for pid=34011 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074678.813:8463): avc: denied { read } for pid=25430 comm="safe_timer" name="os-release" dev="overlay" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074407.089:7116): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc/7" dev="proc" ino=153578 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074313.431:6551): avc: denied { sendto } for pid=25025 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074389.563:7019): avc: denied { search } for pid=56060 comm="safe_timer" name="/" dev="overlay" ino=1970712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c563,c789 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074595.397:8015): avc: denied { append } for pid=42970 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c364 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074405.396:7107): avc: denied { create } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074471.673:7420): avc: denied { search } for pid=25430 comm="safe_timer" name="usr" dev="sda1" ino=789157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074678.817:8471): avc: denied { open } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-detail.json" dev="overlay" ino=1574984 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074317.089:6623): avc: denied { read } for pid=34011 comm="node_exporter" name="stat" dev="proc" ino=161398 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074337.090:6775): avc: denied { search } for pid=34011 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074527.092:7714): avc: denied { search } for pid=34011 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074597.089:8027): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=161398 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074687.090:8511): avc: denied { open } for pid=34011 comm="node_exporter" path="/sys/fs/xfs/dm-4/stats/stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074735.396:8732): avc: denied { read } for pid=42970 comm="prometheus" path="socket:[360138]" dev="sockfs" ino=360138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074732.496:8708): avc: denied { search } for pid=25049 comm="safe_timer" name="/" dev="overlay" ino=1443979 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c220,c900 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074477.091:7470): avc: denied { getattr } for pid=34011 comm="node_exporter" name="/" dev="tmpfs" ino=14024 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074732.453:8707): avc: denied { search } for pid=44849 comm="safe_timer" name="/" dev="overlay" ino=1970624 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c792,c938 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074667.090:8390): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=162545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074663.833:8371): avc: denied { read } for pid=42970 comm="prometheus" name="data" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c364 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074745.396:8789): avc: denied { setopt } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074405.396:7111): avc: denied { getattr } for pid=42970 comm="prometheus" laddr=172.21.15.70 lport=60464 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074617.089:8129): avc: denied { read } for pid=34011 comm="node_exporter" name="entropy_avail" dev="proc" ino=161409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074729.423:8635): avc: denied { write } for pid=76127 comm="safe_timer" path="pipe:[267043]" dev="pipefs" ino=267043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074397.090:7050): avc: denied { search } for pid=34011 comm="node_exporter" name="kernel" dev="proc" ino=165243 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074453.817:7298): avc: denied { open } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-overview.json" dev="overlay" ino=1574985 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074397.089:7038): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074457.090:7369): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074471.673:7420): avc: denied { open } for pid=25430 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074540.006:7751): avc: denied { read } for pid=25430 comm="safe_timer" name="os-release" dev="sda1" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074591.816:7936): avc: denied { open } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/rbd-details.json" dev="overlay" ino=1574987 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074332.422:6708): avc: denied { write } for pid=25049 comm="safe_timer" path="pipe:[123409]" dev="pipefs" ino=123409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074612.475:8108): avc: denied { read } for pid=25049 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074597.090:8032): avc: denied { open } for pid=34011 comm="node_exporter" path="/sys/class/hwmon" dev="sysfs" ino=21483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074387.091:6948): avc: denied { search } for pid=34011 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074407.093:7141): avc: denied { search } for pid=34011 comm="node_exporter" name="fs" dev="proc" ino=163277 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074729.568:8644): avc: denied { write } for pid=25025 comm="conmon" name="socket" dev="tmpfs" ino=14322 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074472.738:7438): avc: denied { search } for pid=25025 comm="conmon" name="journal" dev="tmpfs" ino=14310 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074317.089:6625): avc: denied { read } for pid=34011 comm="node_exporter" name="fd" dev="proc" ino=161399 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074737.090:8749): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=43630 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074732.496:8709): avc: denied { open } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074757.090:8874): avc: denied { read } for pid=34011 comm="node_exporter" name="dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074540.810:7754): avc: denied { write } for pid=25049 comm="fn_monstore" path="pipe:[122606]" dev="pipefs" ino=122606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074397.090:7050): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=161409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074612.475:8107): avc: denied { dac_read_search } for pid=25049 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074545.396:7781): avc: denied { create } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074592.059:7938): avc: denied { write } for pid=25049 comm="fn_monstore" path="pipe:[122606]" dev="pipefs" ino=122606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074659.369:8280): avc: denied { append } for pid=50591 comm="log" path="/var/log/ceph/ceph-osd.2.log" dev="sda1" ino=396213 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074334.975:6714): avc: denied { getattr } for pid=25430 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074334.975:6713): avc: denied { open } for pid=25430 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074679.500:8474): avc: denied { write } for pid=25025 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074747.089:8802): avc: denied { search } for pid=34011 comm="node_exporter" name="/" dev="overlay" ino=1970490 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c602,c840 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074729.568:8644): avc: denied { search } for pid=25025 comm="conmon" name="journal" dev="tmpfs" ino=14310 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074452.711:7263): avc: denied { write } for pid=25025 comm="conmon" name="socket" dev="tmpfs" ino=14322 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074397.090:7047): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=162545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074592.473:7951): avc: denied { read } for pid=25049 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074453.816:7296): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074403.098:7099): avc: denied { search } for pid=40720 comm="safe_timer" name="/" dev="overlay" ino=1970655 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c69,c600 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074457.169:7372): avc: denied { write } for pid=74123 comm="safe_timer" path="pipe:[265803]" dev="pipefs" ino=265803 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074547.094:7812): avc: denied { search } for pid=34011 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074597.090:8034): avc: denied { search } for pid=34011 comm="node_exporter" name="net" dev="proc" ino=153584 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074527.090:7700): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=43630 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074452.242:7248): avc: denied { write } for pid=50591 comm="msgr-worker-0" laddr=172.21.15.70 lport=39382 faddr=172.21.15.70 fport=6806 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074597.473:8056): avc: denied { getattr } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074606.067:8067): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074522.813:7632): avc: denied { sendto } for pid=25025 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074453.587:7290): avc: denied { read } for pid=25430 comm="safe_timer" name="os-release" dev="overlay" ino=394714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074317.092:6640): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=161409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074401.664:7074): avc: denied { write } for pid=25025 comm="conmon" name="socket" dev="tmpfs" ino=14322 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074386.067:6917): avc: denied { search } for pid=42158 comm="grafana-server" name="diff" dev="sda1" ino=1968511 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074609.816:8097): avc: denied { read } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074387.090:6942): avc: denied { read } for pid=34011 comm="node_exporter" name="cpufreq" dev="sysfs" ino=30758 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074335.640:6741): avc: denied { search } for pid=25025 comm="conmon" name="/" dev="tmpfs" ino=14023 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074757.089:8861): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=161399 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074387.089:6932): avc: denied { read } for pid=34011 comm="node_exporter" name="fd" dev="proc" ino=161399 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074745.397:8795): avc: denied { append } for pid=42970 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c364 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074663.833:8373): avc: denied { getattr } for pid=42970 comm="prometheus" path="/prometheus/queries.active" dev="dm-4" ino=158 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c364 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074452.711:7261): avc: denied { use } for pid=25049 comm="fn_monstore" path="pipe:[122606]" dev="pipefs" ino=122606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074317.090:6627): avc: denied { read } for pid=34011 comm="node_exporter" name="arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074405.396:7108): avc: denied { create } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074527.943:7721): avc: denied { getattr } for pid=25430 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074757.090:8869): avc: denied { open } for pid=34011 comm="node_exporter" path="/sys/class/net" dev="sysfs" ino=21519 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074743.266:8775): avc: denied { read } for pid=101080 comm="pgrep" name="status" dev="proc" ino=121712 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074405.396:7106): avc: denied { search } for pid=42970 comm="prometheus" name="/" dev="overlay" ino=1968522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c364 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074663.817:8370): avc: denied { open } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/host-details.json" dev="overlay" ino=1574978 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074547.090:7793): avc: denied { search } for pid=34011 comm="node_exporter" name="fs" dev="proc" ino=163277 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074471.673:7421): avc: denied { getattr } for pid=25430 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074547.090:7794): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/7/net/dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074592.296:7948): avc: denied { read } for pid=25430 comm="safe_timer" name="os-release" dev="sda1" ino=394714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074389.162:7014): avc: denied { append } for pid=40720 comm="log" path="/var/log/ceph/ceph-osd.0.log" dev="sda1" ino=396207 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074483.831:7483): avc: denied { getattr } for pid=42970 comm="prometheus" path="/prometheus/wal" dev="dm-4" ino=16777360 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c364 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074595.002:8003): avc: denied { open } for pid=44849 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074547.089:7791): avc: denied { search } for pid=34011 comm="node_exporter" name="7" dev="proc" ino=153578 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074687.089:8498): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074667.090:8403): avc: denied { search } for pid=34011 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074387.261:6960): avc: denied { open } for pid=25430 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074757.089:8860): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=161398 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074735.396:8727): avc: denied { signal } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074543.831:7777): avc: denied { getattr } for pid=42970 comm="prometheus" path="/prometheus/wal" dev="dm-4" ino=16777360 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c364 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074453.817:7297): avc: denied { read } for pid=42158 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074401.583:7066): avc: denied { append } for pid=50591 comm="log" path="/var/log/ceph/ceph-osd.2.log" dev="sda1" ino=396213 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074527.092:7712): avc: denied { search } for pid=34011 comm="node_exporter" name="user" dev="tmpfs" ino=2237 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074467.089:7390): avc: denied { search } for pid=34011 comm="node_exporter" name="7" dev="proc" ino=153578 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074477.089:7457): avc: denied { read } for pid=34011 comm="node_exporter" name="stat" dev="proc" ino=161398 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074402.434:7082): avc: denied { search } for pid=25049 comm="safe_timer" name="/" dev="overlay" ino=1443979 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c220,c900 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074617.088:8122): avc: denied { read } for pid=34011 comm="node_exporter" name="stat" dev="proc" ino=161398 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074663.817:8368): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074729.567:8641): avc: denied { write } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074735.396:8729): avc: denied { connect } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074521.919:7605): avc: denied { getattr } for pid=25430 comm="safe_timer" name="os-release" dev="sda1" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074407.093:7141): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=163278 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074687.091:8517): avc: denied { search } for pid=34011 comm="node_exporter" name="fs" dev="proc" ino=163277 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074547.089:7791): avc: denied { read } for pid=34011 comm="node_exporter" name="stat" dev="proc" ino=161398 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074597.091:8050): avc: denied { search } for pid=34011 comm="node_exporter" name="kernel" dev="proc" ino=165243 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074455.396:7327): avc: denied { setopt } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074522.816:7637): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074407.090:7125): avc: denied { read } for pid=34011 comm="node_exporter" name="mounts" dev="proc" ino=162545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074685.395:8493): avc: denied { connect } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074392.433:7025): avc: denied { getattr } for pid=25049 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074314.866:6566): avc: denied { open } for pid=25430 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074401.664:7074): avc: denied { write } for pid=25025 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074405.396:7110): avc: denied { connect } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074459.817:7387): avc: denied { read open } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074547.094:7812): avc: denied { search } for pid=34011 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074386.067:6917): avc: denied { search } for pid=42158 comm="grafana-server" name="var" dev="sda1" ino=1968527 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074594.816:7998): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074665.396:8381): avc: denied { connect } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074472.450:7431): avc: denied { search } for pid=25049 comm="safe_timer" name="var" dev="sda1" ino=1443987 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c220,c900 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074457.090:7358): avc: denied { read } for pid=34011 comm="node_exporter" name="physical_package_id" dev="sysfs" ino=28908 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074336.816:6752): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074397.090:7047): avc: denied { search } for pid=34011 comm="node_exporter" name="1" dev="proc" ino=160800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074477.090:7461): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074662.485:8352): avc: denied { getattr } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074733.005:8720): avc: denied { search } for pid=25407 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074539.969:7744): avc: denied { search } for pid=50591 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074317.090:6630): avc: denied { open } for pid=34011 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074543.831:7775): avc: denied { search } for pid=42970 comm="prometheus" name="/" dev="overlay" ino=1968522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c364 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074757.090:8875): avc: denied { search } for pid=34011 comm="node_exporter" name="1" dev="proc" ino=160800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074729.816:8655): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/etc" dev="sda1" ino=1968517 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074387.089:6935): avc: denied { search } for pid=34011 comm="node_exporter" name="fs" dev="proc" ino=163277 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074318.879:6672): avc: denied { search } for pid=25430 comm="safe_timer" name="libpod-6a25c082565bd3ed2efe9bc44b0985e4ada790df478c338ace111c62aac839e4.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074455.396:7326): avc: denied { create } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074617.089:8137): avc: denied { read } for pid=34011 comm="node_exporter" name="mounts" dev="proc" ino=162545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074617.089:8137): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=162545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074521.907:7602): avc: denied { read } for pid=25430 comm="safe_timer" name="meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074456.816:7342): avc: denied { open } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074471.816:7429): avc: denied { open } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074527.090:7708): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=161409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074660.816:8306): avc: denied { search } for pid=42158 comm="grafana-server" name="/" dev="overlay" ino=1968511 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074662.342:8340): avc: denied { read } for pid=44849 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074335.640:6741): avc: denied { search } for pid=25025 comm="conmon" name="systemd" dev="tmpfs" ino=14032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074477.089:7455): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074452.711:7263): avc: denied { write } for pid=25025 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074336.999:6760): avc: denied { search } for pid=25430 comm="safe_timer" name="etc" dev="sda1" ino=1444007 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074387.091:6952): avc: denied { read } for pid=34011 comm="node_exporter" name="entropy_avail" dev="proc" ino=161409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074735.397:8733): avc: denied { append } for pid=42970 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c364 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074625.545:8157): avc: denied { connect } for pid=42158 comm="grafana-server" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074470.854:7403): avc: denied { open } for pid=50591 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074453.816:7292): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074735.396:8730): avc: denied { getattr } for pid=42970 comm="prometheus" laddr=172.21.15.70 lport=56258 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074603.833:8060): avc: denied { getattr } for pid=42970 comm="prometheus" path="/prometheus/wal" dev="dm-4" ino=16777360 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c364 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074747.596:8829): avc: denied { use } for pid=25049 comm="fn_monstore" path="pipe:[122606]" dev="pipefs" ino=122606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074540.810:7756): avc: denied { sendto } for pid=25025 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074597.091:8051): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=161409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074524.815:7673): avc: denied { write } for pid=25025 comm="conmon" name="socket" dev="tmpfs" ino=14322 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074457.090:7363): avc: denied { search } for pid=34011 comm="node_exporter" name="user" dev="tmpfs" ino=2237 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074597.090:8045): avc: denied { search } for pid=34011 comm="node_exporter" name="user" dev="tmpfs" ino=2237 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074387.816:6991): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/etc" dev="sda1" ino=1968517 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074472.450:7434): avc: denied { getattr } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074685.395:8488): avc: denied { search } for pid=42970 comm="prometheus" name="etc" dev="sda1" ino=1970616 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c364 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074747.596:8831): avc: denied { search } for pid=25025 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074729.816:8654): avc: denied { search } for pid=42158 comm="grafana-server" name="/" dev="overlay" ino=1968511 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074389.658:7021): avc: denied { search } for pid=25025 comm="conmon" name="/" dev="tmpfs" ino=14023 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074471.816:7429): avc: denied { read } for pid=42158 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074731.114:8681): avc: denied { read } for pid=25430 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074317.089:6623): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=161398 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074667.090:8405): avc: denied { search } for pid=34011 comm="node_exporter" name="/" dev="tmpfs" ino=14023 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074318.816:6671): avc: denied { open } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/pool-overview.json" dev="overlay" ino=1574983 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074683.253:8487): avc: denied { search } for pid=98027 comm="pgrep" name="25049" dev="proc" ino=121656 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074729.423:8637): avc: denied { write } for pid=76127 comm="msgr-worker-1" laddr=172.21.15.70 lport=37130 faddr=172.21.15.70 fport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074336.999:6760): avc: denied { read } for pid=25430 comm="safe_timer" name="os-release" dev="overlay" ino=394714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074525.816:7686): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074615.397:8119): avc: denied { append } for pid=42970 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c364 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074687.090:8504): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074525.396:7677): avc: denied { signal } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074660.705:8305): avc: denied { getattr } for pid=25430 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074386.438:6925): avc: denied { search } for pid=56060 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c563,c789 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074542.463:7770): avc: denied { dac_read_search } for pid=25049 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074324.816:6688): avc: denied { open } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074387.454:6985): avc: denied { search } for pid=50591 comm="safe_timer" name="/" dev="overlay" ino=1970693 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c817,c841 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074387.261:6960): avc: denied { read } for pid=25430 comm="safe_timer" name="os-release" dev="overlay" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074453.816:7292): avc: denied { getattr } for pid=42158 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074452.242:7247): avc: denied { write } for pid=50591 comm="msgr-worker-1" laddr=172.21.15.70 lport=50512 faddr=172.21.15.70 fport=6808 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074687.090:8502): avc: denied { read } for pid=34011 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074667.089:8386): avc: denied { search } for pid=34011 comm="node_exporter" name="/" dev="overlay" ino=1970490 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c602,c840 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074682.488:8480): avc: denied { search } for pid=25049 comm="safe_timer" name="var" dev="sda1" ino=1443987 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c220,c900 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074617.088:8124): avc: denied { read } for pid=34011 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074457.448:7375): avc: denied { read } for pid=25049 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074457.443:7374): avc: denied { search } for pid=50591 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970693 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c817,c841 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074679.500:8474): avc: denied { search } for pid=25025 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074609.816:8096): avc: denied { lock } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074747.817:8842): avc: denied { open } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/osd-device-details.json" dev="overlay" ino=1574980 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074660.816:8306): avc: denied { search } for pid=42158 comm="grafana-server" name="etc" dev="sda1" ino=1968517 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074596.065:8017): avc: denied { search } for pid=25025 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074405.396:7112): avc: denied { write } for pid=42970 comm="prometheus" path="socket:[301194]" dev="sockfs" ino=301194 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074660.693:8302): avc: denied { open } for pid=25430 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074597.090:8038): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/7/net/dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074386.201:6924): avc: denied { append } for pid=42970 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c364 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074471.816:7427): avc: denied { read } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074452.681:7260): avc: denied { open } for pid=56060 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074737.090:8746): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074318.816:6668): avc: denied { read } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074625.562:8163): avc: denied { read } for pid=25049 comm="msgr-worker-2" path="socket:[164260]" dev="sockfs" ino=164260 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074527.092:7710): avc: denied { search } for pid=34011 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074483.830:7481): avc: denied { read } for pid=42970 comm="prometheus" name="data" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c364 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074453.575:7288): avc: denied { open } for pid=25430 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074547.094:7811): avc: denied { search } for pid=34011 comm="node_exporter" name="user" dev="tmpfs" ino=2237 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074457.090:7362): avc: denied { search } for pid=34011 comm="node_exporter" name="kernel" dev="proc" ino=165243 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074678.813:8464): avc: denied { getattr } for pid=25430 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074737.092:8761): avc: denied { search } for pid=34011 comm="node_exporter" name="/" dev="tmpfs" ino=14023 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074395.396:7033): avc: denied { write } for pid=42970 comm="prometheus" path="socket:[303151]" dev="sockfs" ino=303151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074679.500:8474): avc: denied { search } for pid=25025 comm="conmon" name="/" dev="tmpfs" ino=14023 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074687.091:8518): avc: denied { read } for pid=34011 comm="node_exporter" name="mounts" dev="proc" ino=162545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074539.807:7739): avc: denied { write } for pid=25049 comm="safe_timer" path="pipe:[123409]" dev="pipefs" ino=123409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074597.473:8055): avc: denied { dac_read_search } for pid=25049 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074737.090:8757): avc: denied { search } for pid=34011 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074737.089:8739): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=161398 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074678.277:8451): avc: denied { read } for pid=44849 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074733.005:8718): avc: denied { use } for pid=25430 comm="log" path="pipe:[125364]" dev="pipefs" ino=125364 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074401.719:7079): avc: denied { search } for pid=44849 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970624 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c792,c938 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074313.492:6556): avc: denied { search } for pid=44849 comm="safe_timer" name="/" dev="overlay" ino=1970624 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c792,c938 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074591.816:7934): avc: denied { read open } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074521.919:7605): avc: denied { search } for pid=25430 comm="safe_timer" name="usr" dev="sda1" ino=789157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074317.091:6635): avc: denied { read } for pid=34011 comm="node_exporter" name="mounts" dev="proc" ino=162545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074659.369:8279): avc: denied { search } for pid=50591 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970693 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c817,c841 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074467.089:7388): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074472.450:7431): avc: denied { dac_read_search } for pid=25049 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074389.262:7015): avc: denied { read } for pid=25430 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074315.816:6581): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074545.396:7786): avc: denied { write } for pid=42970 comm="prometheus" path="socket:[325225]" dev="sockfs" ino=325225 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074667.090:8394): avc: denied { open } for pid=34011 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074596.320:8023): avc: denied { append } for pid=25430 comm="log" path="/var/log/ceph/ceph-mgr.smithi070.farums.log" dev="sda1" ino=396140 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074678.817:8470): avc: denied { open } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074660.816:8309): avc: denied { read } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074407.092:7138): avc: denied { search } for pid=34011 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074522.817:7642): avc: denied { open } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074737.090:8754): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/7/net/arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074313.426:6547): avc: denied { write } for pid=25049 comm="msgr-worker-2" laddr=172.21.15.70 lport=3300 faddr=172.21.15.103 fport=47758 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074522.460:7626): avc: denied { search } for pid=25049 comm="safe_timer" name="var" dev="sda1" ino=1443987 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c220,c900 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074387.089:6937): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/7/net/arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074452.711:7263): avc: denied { search } for pid=25025 comm="conmon" name="/" dev="tmpfs" ino=14023 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074477.092:7478): avc: denied { search } for pid=34011 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616074540.816:7762): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/etc" dev="sda1" ino=1968517 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074332.421:6707): avc: denied { getattr } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074540.006:7751): avc: denied { read } for pid=25430 comm="safe_timer" name="os-release" dev="sda1" ino=394714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074735.816:8736): avc: denied { open } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/pool-overview.json" dev="sda1" ino=1574983 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074683.253:8486): avc: denied { getattr } for pid=98027 comm="pgrep" path="/proc/25049" dev="proc" ino=121656 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074317.092:6644): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=161409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074659.613:8292): avc: denied { search } for pid=25025 comm="conmon" name="/" dev="tmpfs" ino=14023 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074609.486:8087): avc: denied { search } for pid=25025 comm="conmon" name="systemd" dev="tmpfs" ino=14032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074608.764:8078): avc: denied { search } for pid=56060 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c563,c789 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074335.640:6739): avc: denied { use } for pid=25049 comm="fn_monstore" path="pipe:[122606]" dev="pipefs" ino=122606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074457.090:7349): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=163278 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074483.830:7481): avc: denied { open } for pid=42970 comm="prometheus" path="/prometheus" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c364 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074525.396:7682): avc: denied { getattr } for pid=42970 comm="prometheus" laddr=172.21.15.70 lport=53159 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074539.969:7743): avc: denied { open } for pid=50591 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074746.816:8796): avc: denied { read } for pid=44849 comm="msgr-worker-0" path="socket:[225178]" dev="sockfs" ino=225178 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074407.092:7139): avc: denied { search } for pid=34011 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616074729.708:8649): avc: denied { search } for pid=56060 comm="safe_timer" name="diff" dev="sda1" ino=1970712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074757.090:8871): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074662.485:8349): avc: denied { search } for pid=25049 comm="safe_timer" name="var" dev="sda1" ino=1443987 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c220,c900 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074757.090:8870): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=43630 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074617.089:8129): avc: denied { search } for pid=34011 comm="node_exporter" name="kernel" dev="proc" ino=165243 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074757.089:8860): avc: denied { read } for pid=34011 comm="node_exporter" name="stat" dev="proc" ino=161398 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074399.816:7062): avc: denied { read } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074452.711:7263): avc: denied { sendto } for pid=25025 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074732.496:8709): avc: denied { search } for pid=25049 comm="safe_timer" name="mon.smithi070" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074527.089:7691): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=161398 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074387.816:6990): avc: denied { search } for pid=42158 comm="grafana-server" name="dashboards" dev="sda1" ino=1574974 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074591.066:7920): avc: denied { read } for pid=25430 comm="msgr-worker-1" path="pipe:[139132]" dev="pipefs" ino=139132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074667.090:8404): avc: denied { search } for pid=34011 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074314.023:6562): avc: denied { getattr } for pid=25430 comm="mgr-fin" name="UTC" dev="sda1" ino=1312328 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074609.816:8097): avc: denied { read } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074659.369:8279): avc: denied { search } for pid=50591 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1970693 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074659.613:8292): avc: denied { search } for pid=25025 comm="conmon" name="systemd" dev="tmpfs" ino=14032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074667.091:8410): avc: denied { search } for pid=34011 comm="node_exporter" name="host" dev="sda1" ino=1970499 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c602,c840 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074537.091:7734): avc: denied { search } for pid=34011 comm="node_exporter" name="host" dev="sda1" ino=1970499 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c602,c840 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074747.199:8816): avc: denied { read } for pid=25430 comm="safe_timer" name="meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074387.089:6931): avc: denied { search } for pid=34011 comm="node_exporter" name="7" dev="proc" ino=153578 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074607.089:8069): avc: denied { search } for pid=34011 comm="node_exporter" name="/" dev="overlay" ino=1970490 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c602,c840 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074667.090:8407): avc: denied { search } for pid=34011 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616074317.090:6633): avc: denied { open } for pid=34011 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=30846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074395.396:7030): avc: denied { setopt } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074667.090:8405): avc: denied { search } for pid=34011 comm="node_exporter" name="user" dev="tmpfs" ino=2237 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074659.369:8279): avc: denied { read } for pid=50591 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074662.342:8340): avc: denied { open } for pid=44849 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074687.093:8523): avc: denied { search } for pid=34011 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616074731.126:8683): avc: denied { read } for pid=25430 comm="safe_timer" name="os-release" dev="overlay" ino=394714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074313.431:6551): avc: denied { search } for pid=25025 comm="conmon" name="journal" dev="tmpfs" ino=14310 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074663.833:8374): avc: denied { getattr } for pid=42970 comm="prometheus" path="/prometheus/wal" dev="dm-4" ino=16777360 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c364 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074617.089:8128): avc: denied { read } for pid=34011 comm="node_exporter" name="hwmon" dev="sysfs" ino=21483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074737.090:8746): avc: denied { read } for pid=34011 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074547.091:7802): avc: denied { read } for pid=34011 comm="node_exporter" name="eno1" dev="sysfs" ino=35284 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074743.482:8776): avc: denied { open } for pid=44849 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074747.199:8817): avc: denied { read } for pid=25430 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074597.090:8037): avc: denied { search } for pid=34011 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074737.089:8740): avc: denied { read } for pid=34011 comm="node_exporter" name="fd" dev="proc" ino=161399 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074521.907:7604): avc: denied { getattr } for pid=25430 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074677.271:8439): avc: denied { search } for pid=50591 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074457.090:7349): avc: denied { read } for pid=34011 comm="node_exporter" name="file-nr" dev="proc" ino=163278 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074471.816:7424): avc: denied { search } for pid=42158 comm="grafana-server" name="/" dev="overlay" ino=1968511 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074527.092:7716): avc: denied { search } for pid=34011 comm="node_exporter" name="host" dev="sda1" ino=1970499 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c602,c840 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074456.816:7343): avc: denied { open } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/rbd-overview.json" dev="overlay" ino=1574988 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074407.091:7133): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074731.114:8682): avc: denied { getattr } for pid=25430 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074623.240:8149): avc: denied { read } for pid=94962 comm="pgrep" name="status" dev="proc" ino=121712 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074737.090:8748): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074748.934:8847): avc: denied { search } for pid=40720 comm="safe_timer" name="/" dev="overlay" ino=1970655 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c69,c600 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074662.485:8350): avc: denied { open } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074452.242:7243): avc: denied { read } for pid=50591 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074401.663:7069): avc: denied { read } for pid=25049 comm="msgr-worker-2" path="pipe:[123409]" dev="pipefs" ino=123409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074545.397:7788): avc: denied { append } for pid=42970 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c364 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074747.498:8824): avc: denied { search } for pid=25049 comm="safe_timer" name="mon.smithi070" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074547.094:7814): avc: denied { search } for pid=34011 comm="node_exporter" name="host" dev="sda1" ino=1970499 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c602,c840 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074471.347:7410): avc: denied { read } for pid=25049 comm="msgr-worker-2" path="socket:[147596]" dev="sockfs" ino=147596 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074747.199:8819): avc: denied { read } for pid=25430 comm="safe_timer" name="os-release" dev="overlay" ino=394714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074387.089:6931): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=161398 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074592.284:7946): avc: denied { search } for pid=25430 comm="safe_timer" name="libpod-6a25c082565bd3ed2efe9bc44b0985e4ada790df478c338ace111c62aac839e4.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074687.090:8513): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=161409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074335.396:6727): avc: denied { create } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074336.067:6748): avc: denied { search } for pid=42158 comm="grafana-server" name="/" dev="overlay" ino=1968511 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074407.089:7118): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=161399 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074457.169:7371): avc: denied { write } for pid=74575 comm="safe_timer" path="pipe:[270595]" dev="pipefs" ino=270595 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074317.091:6635): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=162545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074660.817:8312): avc: denied { open } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/rbd-overview.json" dev="overlay" ino=1574988 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074337.089:6762): avc: denied { search } for pid=34011 comm="node_exporter" name="/" dev="overlay" ino=1970490 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c602,c840 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074401.663:7070): avc: denied { write } for pid=25049 comm="msgr-worker-2" laddr=172.21.15.70 lport=3300 faddr=172.21.15.103 fport=47758 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074337.422:6794): avc: denied { search } for pid=25049 comm="safe_timer" name="mon.smithi070" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074737.092:8762): avc: denied { search } for pid=34011 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074477.092:7477): avc: denied { search } for pid=34011 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074317.635:6662): avc: denied { search } for pid=25025 comm="conmon" name="/" dev="tmpfs" ino=14023 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074733.126:8721): avc: denied { search } for pid=25430 comm="safe_timer" name="libpod-6a25c082565bd3ed2efe9bc44b0985e4ada790df478c338ace111c62aac839e4.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074537.090:7733): avc: denied { search } for pid=34011 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074747.816:8836): avc: denied { search } for pid=42158 comm="grafana-server" name="etc" dev="sda1" ino=1968517 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074477.090:7464): avc: denied { open } for pid=34011 comm="node_exporter" path="/sys/class/hwmon" dev="sysfs" ino=21483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074757.094:8882): avc: denied { read } for pid=34011 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074527.090:7702): avc: denied { search } for pid=34011 comm="node_exporter" name="fs" dev="proc" ino=163277 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074387.432:6980): avc: denied { open } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074539.679:7735): avc: denied { read } for pid=40720 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074542.064:7769): avc: denied { search } for pid=40720 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970655 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c69,c600 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074606.817:8068): avc: denied { open } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/hosts-overview.json" dev="overlay" ino=1574979 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074397.090:7043): avc: denied { read } for pid=34011 comm="node_exporter" name="hwmon" dev="sysfs" ino=21483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074609.816:8095): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/etc" dev="sda1" ino=1968517 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074324.816:6686): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074397.108:7057): avc: denied { append } for pid=42970 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c364 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074401.719:7079): avc: denied { search } for pid=44849 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074617.088:8121): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc/7" dev="proc" ino=153578 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074471.816:7428): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074397.091:7053): avc: denied { search } for pid=34011 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074608.764:8078): avc: denied { search } for pid=56060 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074453.817:7297): avc: denied { open } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074317.090:6632): avc: denied { search } for pid=34011 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074743.482:8776): avc: denied { read } for pid=44849 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074547.089:7791): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=161398 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074392.433:7026): avc: denied { getattr } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074527.089:7693): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=161409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074687.089:8500): avc: denied { read } for pid=34011 comm="node_exporter" name="stat" dev="proc" ino=161398 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074687.093:8522): avc: denied { search } for pid=34011 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074387.089:6937): avc: denied { read } for pid=34011 comm="node_exporter" name="arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074540.810:7756): avc: denied { search } for pid=25025 comm="conmon" name="journal" dev="tmpfs" ino=14310 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074737.090:8745): avc: denied { open } for pid=34011 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074547.091:7806): avc: denied { read } for pid=34011 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074458.127:7382): avc: denied { search } for pid=44849 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970624 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c792,c938 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074407.090:7123): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074456.067:7337): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074389.274:7017): avc: denied { read } for pid=25430 comm="safe_timer" name="os-release" dev="overlay" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074387.432:6984): avc: denied { read } for pid=25049 comm="msgr-worker-2" path="pipe:[123409]" dev="pipefs" ino=123409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074747.199:8819): avc: denied { search } for pid=25430 comm="safe_timer" name="etc" dev="sda1" ino=1444007 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074317.091:6637): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=43630 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074477.092:7479): avc: denied { search } for pid=34011 comm="node_exporter" name="host" dev="sda1" ino=1970499 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c602,c840 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074471.816:7429): avc: denied { read } for pid=42158 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074525.396:7679): avc: denied { create } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074313.492:6556): avc: denied { search } for pid=44849 comm="safe_timer" name="diff" dev="sda1" ino=1970624 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074747.983:8843): avc: denied { search } for pid=50591 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970693 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c817,c841 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074337.090:6774): avc: denied { read } for pid=34011 comm="node_exporter" name="hwmon0" dev="sysfs" ino=35483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074471.661:7417): avc: denied { read } for pid=44849 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074457.090:7357): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/hwmon/hwmon0/uevent" dev="sysfs" ino=35480 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074387.432:6980): avc: denied { read } for pid=25049 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074729.568:8644): avc: denied { search } for pid=25025 comm="conmon" name="/" dev="tmpfs" ino=14023 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074387.091:6953): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074677.793:8443): avc: denied { read } for pid=40720 comm="msgr-worker-1" path="socket:[271870]" dev="sockfs" ino=271870 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074457.089:7348): avc: denied { read } for pid=34011 comm="node_exporter" name="fd" dev="proc" ino=161399 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074337.089:6763): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc/7" dev="proc" ino=153578 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074660.816:8306): avc: denied { getattr } for pid=42158 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074453.817:7297): avc: denied { read } for pid=42158 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074405.396:7106): avc: denied { search } for pid=42970 comm="prometheus" name="etc" dev="sda1" ino=1970616 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c364 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074457.090:7349): avc: denied { search } for pid=34011 comm="node_exporter" name="fs" dev="proc" ino=163277 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074397.091:7055): avc: denied { search } for pid=34011 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074678.277:8451): avc: denied { search } for pid=44849 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074659.613:8292): avc: denied { write } for pid=25025 comm="conmon" name="socket" dev="tmpfs" ino=14322 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074337.089:6764): avc: denied { search } for pid=34011 comm="node_exporter" name="7" dev="proc" ino=153578 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074661.616:8333): avc: denied { sendto } for pid=25025 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074747.498:8824): avc: denied { read } for pid=25049 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074317.094:6649): avc: denied { search } for pid=34011 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074591.816:7929): avc: denied { search } for pid=42158 comm="grafana-server" name="/" dev="overlay" ino=1968511 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074733.138:8723): avc: denied { search } for pid=25430 comm="safe_timer" name="etc" dev="sda1" ino=1444007 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074735.396:8725): avc: denied { search } for pid=42970 comm="prometheus" name="etc" dev="sda1" ino=1970616 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c364 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074757.094:8880): avc: denied { search } for pid=34011 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616074317.090:6627): avc: denied { read } for pid=34011 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074387.091:6951): avc: denied { search } for pid=34011 comm="node_exporter" name="host" dev="sda1" ino=1970499 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c602,c840 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074682.488:8481): avc: denied { open } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074457.090:7352): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074527.090:7698): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074757.094:8883): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074317.090:6628): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074604.888:8061): avc: denied { read } for pid=56060 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074315.396:6568): avc: denied { search } for pid=42970 comm="prometheus" name="/" dev="overlay" ino=1968522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c364 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074387.261:6960): avc: denied { search } for pid=25430 comm="safe_timer" name="etc" dev="sda1" ino=1444007 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074617.089:8135): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074386.067:6917): avc: denied { search } for pid=42158 comm="grafana-server" name="/" dev="overlay" ino=1968511 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074522.813:7632): avc: denied { search } for pid=25025 comm="conmon" name="journal" dev="tmpfs" ino=14310 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074612.269:8106): avc: denied { getattr } for pid=25430 comm="mgr-fin" path="/usr/lib64/python3.6" dev="overlay" ino=1050261 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074337.091:6778): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074537.090:7732): avc: denied { search } for pid=34011 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074729.708:8649): avc: denied { search } for pid=56060 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074667.089:8386): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074457.090:7361): avc: denied { search } for pid=34011 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074612.475:8107): avc: denied { search } for pid=25049 comm="safe_timer" name="var" dev="sda1" ino=1443987 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c220,c900 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074669.817:8418): avc: denied { read } for pid=42158 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074737.090:8743): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=163278 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074314.092:6563): avc: denied { search } for pid=40720 comm="safe_timer" name="/" dev="overlay" ino=1970655 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c69,c600 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074334.830:6711): avc: denied { search } for pid=50591 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970693 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c817,c841 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074475.396:7445): avc: denied { search } for pid=42970 comm="prometheus" name="etc" dev="sda1" ino=1970616 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c364 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074337.093:6785): avc: denied { search } for pid=34011 comm="node_exporter" name="user" dev="tmpfs" ino=2237 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074757.094:8881): avc: denied { search } for pid=34011 comm="node_exporter" name="host" dev="sda1" ino=1970499 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c602,c840 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074732.829:8717): avc: denied { getattr } for pid=25430 comm="mgr-fin" path="/usr/lib64/python3.6" dev="overlay" ino=1050261 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074387.261:6960): avc: denied { read } for pid=25430 comm="safe_timer" name="os-release" dev="sda1" ino=394714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074522.816:7640): avc: denied { read } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074660.705:8304): avc: denied { read } for pid=25430 comm="safe_timer" name="os-release" dev="sda1" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074387.656:6986): avc: denied { use } for pid=25049 comm="fn_monstore" path="pipe:[122606]" dev="pipefs" ino=122606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074387.089:6937): avc: denied { read } for pid=34011 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074317.092:6645): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074317.091:6638): avc: denied { search } for pid=34011 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074687.089:8501): avc: denied { read } for pid=34011 comm="node_exporter" name="fd" dev="proc" ino=161399 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074401.663:7067): avc: denied { write } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db/000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074731.571:8685): avc: denied { write } for pid=25025 comm="conmon" name="socket" dev="tmpfs" ino=14322 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074592.059:7939): avc: denied { read } for pid=25025 comm="conmon" path="pipe:[122606]" dev="pipefs" ino=122606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074735.816:8735): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="sda1" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074471.816:7425): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/etc" dev="sda1" ino=1968517 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074729.708:8649): avc: denied { open } for pid=56060 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074737.497:8767): avc: denied { write } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074315.816:6577): avc: denied { getattr } for pid=42158 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074617.090:8140): avc: denied { search } for pid=34011 comm="node_exporter" name="user" dev="tmpfs" ino=2237 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074667.485:8413): avc: denied { open } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074527.943:7720): avc: denied { open } for pid=25430 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074315.396:6572): avc: denied { getattr } for pid=42970 comm="prometheus" laddr=172.21.15.70 lport=58448 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074540.816:7761): avc: denied { search } for pid=42158 comm="grafana-server" name="etc" dev="sda1" ino=1968517 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074660.816:8309): avc: denied { read } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074540.006:7751): avc: denied { getattr } for pid=25430 comm="safe_timer" name="os-release" dev="sda1" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074663.816:8364): avc: denied { search } for pid=42158 comm="grafana-server" name="/" dev="overlay" ino=1968511 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074747.596:8831): avc: denied { write } for pid=25025 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074313.492:6556): avc: denied { read } for pid=44849 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074609.817:8099): avc: denied { read } for pid=42158 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074456.067:7335): avc: denied { search } for pid=42158 comm="grafana-server" name="/" dev="overlay" ino=1968511 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074593.901:7973): avc: denied { write } for pid=50591 comm="tp_osd_tp" path="pipe:[202352]" dev="pipefs" ino=202352 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074336.191:6751): avc: denied { signal } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074687.090:8515): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074682.488:8480): avc: denied { getattr } for pid=25049 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074540.816:7763): avc: denied { lock } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074523.562:7659): avc: denied { search } for pid=40720 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970655 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c69,c600 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074597.090:8043): avc: denied { getattr } for pid=34011 comm="node_exporter" name="/" dev="tmpfs" ino=14024 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074737.090:8743): avc: denied { read } for pid=34011 comm="node_exporter" name="file-nr" dev="proc" ino=163278 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074318.816:6671): avc: denied { read } for pid=42158 comm="grafana-server" name="pool-overview.json" dev="sda1" ino=1574983 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074521.810:7601): avc: denied { write } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074592.059:7940): avc: denied { sendto } for pid=25025 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074386.438:6925): avc: denied { open } for pid=56060 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074457.090:7356): avc: denied { search } for pid=34011 comm="node_exporter" name="net" dev="proc" ino=153584 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074337.091:6780): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=163278 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074397.090:7049): avc: denied { search } for pid=34011 comm="node_exporter" name="net" dev="proc" ino=153584 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074731.978:8702): avc: denied { search } for pid=56060 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c563,c789 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074678.813:8463): avc: denied { read } for pid=25430 comm="safe_timer" name="os-release" dev="overlay" ino=394714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074597.089:8029): avc: denied { read } for pid=34011 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074407.090:7124): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/7/net/sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074523.562:7661): avc: denied { read } for pid=40720 comm="msgr-worker-0" path="pipe:[182295]" dev="pipefs" ino=182295 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074335.370:6723): avc: denied { read } for pid=25049 comm="msgr-worker-2" path="pipe:[123409]" dev="pipefs" ino=123409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074539.807:7737): avc: denied { append } for pid=25049 comm="log" path="/var/log/ceph/ceph-mon.smithi070.log" dev="sda1" ino=396134 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074673.970:8424): avc: denied { search } for pid=50591 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970693 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c817,c841 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074407.091:7135): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=161409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074313.426:6544): avc: denied { write } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db/000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074694.912:8526): avc: denied { getattr } for pid=25430 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074623.240:8149): avc: denied { search } for pid=94962 comm="pgrep" name="25049" dev="proc" ino=121656 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074387.816:6992): avc: denied { open } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074337.090:6767): avc: denied { read } for pid=34011 comm="node_exporter" name="xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074407.090:7120): avc: denied { read } for pid=34011 comm="node_exporter" name="hwmon" dev="sysfs" ino=21483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074617.088:8125): avc: denied { search } for pid=34011 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074757.090:8863): avc: denied { search } for pid=34011 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074455.397:7333): avc: denied { append } for pid=42970 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c364 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074315.816:6580): avc: denied { read } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074387.091:6955): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=161409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074729.816:8654): avc: denied { search } for pid=42158 comm="grafana-server" name="dashboards" dev="sda1" ino=1574974 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074678.497:8454): avc: denied { write } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074609.704:8093): avc: denied { search } for pid=40720 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074667.090:8408): avc: denied { read } for pid=34011 comm="node_exporter" name="entropy_avail" dev="proc" ino=161409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074545.396:7780): avc: denied { create } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074547.090:7793): avc: denied { search } for pid=34011 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074660.816:8310): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074678.801:8462): avc: denied { getattr } for pid=25430 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074314.023:6562): avc: denied { read } for pid=25430 comm="mgr-fin" name="localtime" dev="sda1" ino=394696 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074452.447:7251): avc: denied { getattr } for pid=25049 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074737.090:8756): avc: denied { getattr } for pid=34011 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074525.396:7684): avc: denied { read } for pid=42970 comm="prometheus" path="socket:[324080]" dev="sockfs" ino=324080 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074540.816:7764): avc: denied { read } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074452.711:7263): avc: denied { search } for pid=25025 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074625.212:8153): avc: denied { write } for pid=42158 comm="grafana-server" name="grafana" dev="overlay" ino=1968334 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074597.090:8046): avc: denied { search } for pid=34011 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074609.041:8083): avc: denied { read } for pid=25430 comm="mgr-fin" name="localtime" dev="overlay" ino=394696 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074402.816:7095): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074687.090:8505): avc: denied { read } for pid=34011 comm="node_exporter" name="arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074471.661:7415): avc: denied { read } for pid=44849 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074457.599:7380): avc: denied { search } for pid=25430 comm="safe_timer" name="usr" dev="sda1" ino=789157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074755.396:8854): avc: denied { connect } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074687.090:8513): avc: denied { read } for pid=34011 comm="node_exporter" name="entropy_avail" dev="proc" ino=161409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074397.089:7039): avc: denied { search } for pid=34011 comm="node_exporter" name="fs" dev="proc" ino=163277 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074407.090:7120): avc: denied { open } for pid=34011 comm="node_exporter" path="/sys/class/hwmon" dev="sysfs" ino=21483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074677.090:8437): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074735.396:8724): avc: denied { signal } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074337.422:6793): avc: denied { dac_read_search } for pid=25049 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074522.813:7631): avc: denied { read } for pid=25025 comm="conmon" path="pipe:[122606]" dev="pipefs" ino=122606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074401.826:7080): avc: denied { open } for pid=44849 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074385.653:6910): avc: denied { search } for pid=25025 comm="conmon" name="systemd" dev="tmpfs" ino=14032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074747.090:8806): avc: denied { search } for pid=34011 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074625.212:8153): avc: denied { add_name } for pid=42158 comm="grafana-server" name="grafana.db-journal" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074747.089:8803): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074397.091:7052): avc: denied { search } for pid=34011 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074336.987:6758): avc: denied { open } for pid=25430 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074397.089:7036): avc: denied { read } for pid=34011 comm="node_exporter" name="stat" dev="proc" ino=161398 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074665.396:8384): avc: denied { read } for pid=42970 comm="prometheus" path="socket:[344805]" dev="sockfs" ino=344805 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074729.816:8654): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074682.488:8481): avc: denied { search } for pid=25049 comm="safe_timer" name="mon.smithi070" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074747.257:8821): avc: denied { search } for pid=44849 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970624 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c792,c938 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074748.485:8846): avc: denied { append } for pid=42970 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c364 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074387.091:6954): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074403.335:7101): avc: denied { open } for pid=25430 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074667.089:8388): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=161398 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074337.422:6795): avc: denied { getattr } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074540.810:7756): avc: denied { search } for pid=25025 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074665.396:8378): avc: denied { setopt } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074318.816:6669): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074467.090:7395): avc: denied { read } for pid=34011 comm="node_exporter" name="cpuinfo_max_freq" dev="sysfs" ino=30846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074521.907:7602): avc: denied { search } for pid=25430 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074397.089:7041): avc: denied { read } for pid=34011 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074532.462:7726): avc: denied { getattr } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074467.091:7398): avc: denied { search } for pid=34011 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074660.693:8302): avc: denied { read } for pid=25430 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074527.461:7717): avc: denied { search } for pid=25049 comm="safe_timer" name="var" dev="sda1" ino=1443987 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c220,c900 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074679.500:8472): avc: denied { use } for pid=25049 comm="fn_monstore" path="pipe:[122606]" dev="pipefs" ino=122606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074457.753:7381): avc: denied { search } for pid=56060 comm="safe_timer" name="/" dev="overlay" ino=1970712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c563,c789 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074452.711:7261): avc: denied { write } for pid=25049 comm="fn_monstore" path="pipe:[122606]" dev="pipefs" ino=122606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074627.566:8171): avc: denied { write } for pid=25025 comm="conmon" name="socket" dev="tmpfs" ino=14322 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074687.090:8503): avc: denied { search } for pid=34011 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074591.816:7932): avc: denied { read } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074525.396:7681): avc: denied { connect } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074662.485:8349): avc: denied { getattr } for pid=25049 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074732.496:8709): avc: denied { read } for pid=25049 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074527.089:7694): avc: denied { read } for pid=34011 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074471.673:7420): avc: denied { open } for pid=25430 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074337.093:6787): avc: denied { search } for pid=34011 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616074591.060:7915): avc: denied { read } for pid=25049 comm="msgr-worker-2" path="socket:[164260]" dev="sockfs" ino=164260 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074748.484:8845): avc: denied { signal } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074547.091:7804): avc: denied { search } for pid=34011 comm="node_exporter" name="kernel" dev="proc" ino=165243 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074472.450:7432): avc: denied { open } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074660.816:8311): avc: denied { read open } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074521.076:7595): avc: denied { read } for pid=56060 comm="msgr-worker-2" path="pipe:[220216]" dev="pipefs" ino=220216 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074732.816:8714): avc: denied { search } for pid=42158 comm="grafana-server" name="dashboards" dev="sda1" ino=1574974 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074402.434:7082): avc: denied { dac_read_search } for pid=25049 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074596.320:8021): avc: denied { read } for pid=25430 comm="safe_timer" name="os-release" dev="sda1" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074402.435:7083): avc: denied { search } for pid=25049 comm="safe_timer" name="mon.smithi070" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074452.681:7260): avc: denied { read } for pid=56060 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074609.486:8087): avc: denied { write } for pid=25025 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074522.817:7642): avc: denied { read } for pid=42158 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074687.090:8512): avc: denied { search } for pid=34011 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074659.567:8288): avc: denied { search } for pid=56060 comm="safe_timer" name="/" dev="overlay" ino=1970712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c563,c789 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074454.883:7319): avc: denied { write } for pid=25430 comm="msgr-worker-2" laddr=172.21.15.70 lport=36178 faddr=172.21.15.70 fport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074471.661:7416): avc: denied { search } for pid=25430 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074659.613:8292): avc: denied { search } for pid=25025 comm="conmon" name="journal" dev="tmpfs" ino=14310 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074407.090:7119): avc: denied { search } for pid=34011 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074453.587:7290): avc: denied { search } for pid=25430 comm="safe_timer" name="usr" dev="sda1" ino=789157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074625.338:8154): avc: denied { remove_name } for pid=42158 comm="grafana-server" name="grafana.db-journal" dev="sda1" ino=1970756 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074471.661:7416): avc: denied { search } for pid=25430 comm="safe_timer" name="diff" dev="sda1" ino=1443998 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074475.396:7453): avc: denied { read } for pid=42970 comm="prometheus" path="socket:[316609]" dev="sockfs" ino=316609 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074617.089:8131): avc: denied { read } for pid=34011 comm="node_exporter" name="hwmon0" dev="sysfs" ino=35483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074337.089:6764): avc: denied { read } for pid=34011 comm="node_exporter" name="stat" dev="proc" ino=161398 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074687.093:8521): avc: denied { search } for pid=34011 comm="node_exporter" name="/" dev="tmpfs" ino=14023 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074732.788:8713): avc: denied { search } for pid=40720 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970655 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c69,c600 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074596.256:8019): avc: denied { search } for pid=50591 comm="safe_timer" name="/" dev="overlay" ino=1970693 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c817,c841 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074737.090:8747): avc: denied { search } for pid=34011 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074660.816:8311): avc: denied { open } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074385.652:6904): avc: denied { write } for pid=25049 comm="safe_timer" path="pipe:[123409]" dev="pipefs" ino=123409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074336.816:6754): avc: denied { open } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074540.006:7751): avc: denied { open } for pid=25430 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074525.396:7680): avc: denied { setopt } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074525.396:7678): avc: denied { search } for pid=42970 comm="prometheus" name="/" dev="overlay" ino=1968522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c364 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074527.090:7701): avc: denied { read } for pid=34011 comm="node_exporter" name="ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074594.308:7996): avc: denied { search } for pid=25430 comm="safe_timer" name="etc" dev="sda1" ino=1444007 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074625.553:8159): avc: denied { getattr } for pid=42158 comm="grafana-server" laddr=172.21.15.70 lport=50230 faddr=35.241.23.245 fport=443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074607.090:8070): avc: denied { search } for pid=34011 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074667.090:8394): avc: denied { read } for pid=34011 comm="node_exporter" name="cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074731.978:8702): avc: denied { search } for pid=56060 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074397.089:7037): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=161399 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074597.090:8049): avc: denied { search } for pid=34011 comm="node_exporter" name="host" dev="sda1" ino=1970499 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c602,c840 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074521.945:7608): avc: denied { read } for pid=50591 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074453.816:7294): avc: denied { lock } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074386.696:6927): avc: denied { read } for pid=44849 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074737.092:8758): avc: denied { search } for pid=34011 comm="node_exporter" name="kernel" dev="proc" ino=165243 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074625.562:8162): avc: denied { write } for pid=25049 comm="msgr-worker-2" laddr=172.21.15.70 lport=3300 faddr=172.21.15.103 fport=47758 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074471.802:7423): avc: denied { search } for pid=56060 comm="safe_timer" name="/" dev="overlay" ino=1970712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c563,c789 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074610.404:8104): avc: denied { open } for pid=25430 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074694.912:8525): avc: denied { open } for pid=25430 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074687.092:8519): avc: denied { search } for pid=34011 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074387.089:6935): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=163278 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074747.596:8831): avc: denied { write } for pid=25025 comm="conmon" name="socket" dev="tmpfs" ino=14322 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074732.816:8715): avc: denied { read open } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074387.091:6950): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/sys/class/net/eno1" dev="sysfs" ino=35284 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074597.090:8045): avc: denied { search } for pid=34011 comm="node_exporter" name="/" dev="tmpfs" ino=14023 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074540.810:7756): avc: denied { search } for pid=25025 comm="conmon" name="systemd" dev="tmpfs" ino=14032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074389.262:7015): avc: denied { open } for pid=25430 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074323.175:6679): avc: denied { read } for pid=82408 comm="pgrep" name="status" dev="proc" ino=121712 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074389.028:7010): avc: denied { read } for pid=25430 comm="mgr-fin" name="localtime" dev="sda1" ino=394696 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074667.090:8406): avc: denied { search } for pid=34011 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074523.931:7665): avc: denied { open } for pid=25430 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074662.485:8349): avc: denied { search } for pid=25049 comm="safe_timer" name="/" dev="overlay" ino=1443979 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c220,c900 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074335.095:6719): avc: denied { read } for pid=40720 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074592.284:7945): avc: denied { search } for pid=25430 comm="safe_timer" name="/" dev="overlay" ino=1443998 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074596.065:8017): avc: denied { search } for pid=25025 comm="conmon" name="/" dev="tmpfs" ino=14023 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074477.092:7480): avc: denied { read } for pid=34011 comm="node_exporter" name="file-nr" dev="proc" ino=163278 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074678.813:8463): avc: denied { getattr } for pid=25430 comm="safe_timer" name="os-release" dev="sda1" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074687.090:8516): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=161409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074610.392:8102): avc: denied { search } for pid=25430 comm="safe_timer" name="libpod-6a25c082565bd3ed2efe9bc44b0985e4ada790df478c338ace111c62aac839e4.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074673.489:8423): avc: denied { read } for pid=25025 comm="conmon" path="pipe:[122606]" dev="pipefs" ino=122606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074528.462:7723): avc: denied { write } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074678.816:8469): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074407.091:7131): avc: denied { search } for pid=34011 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074467.089:7391): avc: denied { read } for pid=34011 comm="node_exporter" name="fd" dev="proc" ino=161399 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074313.418:6542): avc: denied { append } for pid=50591 comm="log" path="/var/log/ceph/ceph-osd.2.log" dev="sda1" ino=396213 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074401.664:7072): avc: denied { use } for pid=25049 comm="fn_monstore" path="pipe:[122606]" dev="pipefs" ino=122606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074744.816:8784): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074527.089:7693): avc: denied { search } for pid=34011 comm="node_exporter" name="kernel" dev="proc" ino=165243 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074743.266:8775): avc: denied { search } for pid=101080 comm="pgrep" name="25049" dev="proc" ino=121656 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074617.088:8120): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074729.816:8657): avc: denied { read } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074667.090:8408): avc: denied { search } for pid=34011 comm="node_exporter" name="kernel" dev="proc" ino=165243 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074527.461:7718): avc: denied { search } for pid=25049 comm="safe_timer" name="mon.smithi070" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074674.777:8429): avc: denied { getattr } for pid=25430 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074316.879:6602): avc: denied { search } for pid=25430 comm="safe_timer" name="etc" dev="sda1" ino=1444007 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074397.091:7055): avc: denied { search } for pid=34011 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074747.499:8825): avc: denied { getattr } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074387.432:6979): avc: denied { search } for pid=25049 comm="safe_timer" name="var" dev="sda1" ino=1443987 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c220,c900 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074325.396:6698): avc: denied { read } for pid=42970 comm="prometheus" path="socket:[288901]" dev="sockfs" ino=288901 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074665.396:8377): avc: denied { create } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074407.091:7134): avc: denied { read } for pid=34011 comm="node_exporter" name="entropy_avail" dev="proc" ino=161409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074318.816:6670): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="sda1" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074389.262:7015): avc: denied { search } for pid=25430 comm="safe_timer" name="libpod-6a25c082565bd3ed2efe9bc44b0985e4ada790df478c338ace111c62aac839e4.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074407.090:7129): avc: denied { open } for pid=34011 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/hwmon/hwmon0/temp1_crit" dev="sysfs" ino=35488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074315.816:6582): avc: denied { read } for pid=42158 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074521.907:7603): avc: denied { search } for pid=25430 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074597.090:8044): avc: denied { search } for pid=34011 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074608.764:8078): avc: denied { search } for pid=56060 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1970712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074660.816:8308): avc: denied { lock } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074386.067:6918): avc: denied { read } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074547.094:7809): avc: denied { getattr } for pid=34011 comm="node_exporter" name="/" dev="tmpfs" ino=14024 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074609.817:8099): avc: denied { read } for pid=42158 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074317.094:6648): avc: denied { search } for pid=34011 comm="node_exporter" name="/" dev="tmpfs" ino=14023 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074678.485:8453): avc: denied { append } for pid=42970 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c364 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074687.091:8517): avc: denied { read } for pid=34011 comm="node_exporter" name="file-nr" dev="proc" ino=163278 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074683.253:8485): avc: denied { open } for pid=98027 comm="pgrep" path="/proc/25025/status" dev="proc" ino=121541 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074335.396:6733): avc: denied { write } for pid=42970 comm="prometheus" path="socket:[288969]" dev="sockfs" ino=288969 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074477.092:7476): avc: denied { search } for pid=34011 comm="node_exporter" name="/" dev="tmpfs" ino=14023 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074313.492:6556): avc: denied { search } for pid=44849 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074592.473:7953): avc: denied { getattr } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074395.396:7031): avc: denied { connect } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074617.089:8137): avc: denied { search } for pid=34011 comm="node_exporter" name="1" dev="proc" ino=160800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074747.816:8836): avc: denied { search } for pid=42158 comm="grafana-server" name="/" dev="overlay" ino=1968511 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074317.089:6624): avc: denied { read } for pid=34011 comm="node_exporter" name="stat" dev="proc" ino=4026532033 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074539.679:7735): avc: denied { open } for pid=40720 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074336.816:6754): avc: denied { read } for pid=42158 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074673.970:8424): avc: denied { search } for pid=50591 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1970693 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074610.344:8101): avc: denied { search } for pid=44849 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970624 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c792,c938 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074388.477:7004): avc: denied { read } for pid=50591 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074522.813:7632): avc: denied { search } for pid=25025 comm="conmon" name="/" dev="tmpfs" ino=14023 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074617.089:8136): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/7/net/arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074547.093:7808): avc: denied { read } for pid=34011 comm="node_exporter" name="mounts" dev="proc" ino=162545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074477.091:7472): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=161409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074387.656:6986): avc: denied { write } for pid=25049 comm="fn_monstore" path="pipe:[122606]" dev="pipefs" ino=122606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074595.003:8004): avc: denied { search } for pid=44849 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074609.486:8086): avc: denied { read } for pid=25025 comm="conmon" path="pipe:[122606]" dev="pipefs" ino=122606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074687.093:8524): avc: denied { search } for pid=34011 comm="node_exporter" name="host" dev="sda1" ino=1970499 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c602,c840 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074456.067:7336): avc: denied { read } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074609.817:8100): avc: denied { read } for pid=42158 comm="grafana-server" name="osds-overview.json" dev="sda1" ino=1574981 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074757.090:8862): avc: denied { read } for pid=34011 comm="node_exporter" name="entropy_avail" dev="proc" ino=161409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074547.094:7813): avc: denied { search } for pid=34011 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616074685.395:8489): avc: denied { create } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074524.886:7676): avc: denied { search } for pid=56060 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074325.637:6699): avc: denied { search } for pid=25025 comm="conmon" name="systemd" dev="tmpfs" ino=14032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074397.090:7047): avc: denied { read } for pid=34011 comm="node_exporter" name="mounts" dev="proc" ino=162545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074732.496:8708): avc: denied { dac_read_search } for pid=25049 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074327.090:6702): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074337.090:6767): avc: denied { open } for pid=34011 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074615.396:8111): avc: denied { search } for pid=42970 comm="prometheus" name="/" dev="overlay" ino=1968522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c364 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074737.090:8750): avc: denied { read } for pid=34011 comm="node_exporter" name="hwmon0" dev="sysfs" ino=35483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074402.435:7084): avc: denied { getattr } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074316.879:6603): avc: denied { getattr } for pid=25430 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074592.059:7940): avc: denied { search } for pid=25025 comm="conmon" name="/" dev="tmpfs" ino=14023 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074336.999:6760): avc: denied { read } for pid=25430 comm="safe_timer" name="os-release" dev="overlay" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074591.816:7929): avc: denied { search } for pid=42158 comm="grafana-server" name="dashboards" dev="sda1" ino=1574974 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074452.711:7263): avc: denied { search } for pid=25025 comm="conmon" name="systemd" dev="tmpfs" ino=14032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074453.816:7292): avc: denied { search } for pid=42158 comm="grafana-server" name="etc" dev="sda1" ino=1968517 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074315.816:6579): avc: denied { lock } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074402.816:7096): avc: denied { open } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074317.419:6660): avc: denied { write } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db/000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074659.613:8292): avc: denied { search } for pid=25025 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074457.599:7378): avc: denied { open } for pid=25430 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074609.816:8094): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074729.708:8649): avc: denied { search } for pid=56060 comm="safe_timer" name="/" dev="overlay" ino=1970712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c563,c789 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074313.492:6557): avc: denied { search } for pid=44849 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074335.640:6739): avc: denied { write } for pid=25049 comm="fn_monstore" path="pipe:[122606]" dev="pipefs" ino=122606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074337.422:6794): avc: denied { open } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074407.092:7137): avc: denied { search } for pid=34011 comm="node_exporter" name="user" dev="tmpfs" ino=2237 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074687.090:8514): avc: denied { read } for pid=34011 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074452.447:7252): avc: denied { open } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074332.422:6709): avc: denied { read } for pid=25049 comm="msgr-worker-2" path="pipe:[123409]" dev="pipefs" ino=123409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074457.090:7351): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=162545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074385.652:6903): avc: denied { write } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db/000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074470.854:7403): avc: denied { read } for pid=50591 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074617.089:8133): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/hwmon/hwmon0/uevent" dev="sysfs" ino=35480 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074315.816:6582): avc: denied { read open } for pid=42158 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074527.943:7720): avc: denied { read } for pid=25430 comm="safe_timer" name="os-release" dev="sda1" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074660.816:8310): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970634 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074597.090:8041): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074325.396:6693): avc: denied { setopt } for pid=42970 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074397.090:7051): avc: denied { getattr } for pid=34011 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=161409 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074687.091:8518): avc: denied { open } for pid=34011 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=162545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074735.396:8731): avc: denied { write } for pid=42970 comm="prometheus" path="socket:[360138]" dev="sockfs" ino=360138 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074456.816:7341): avc: denied { getattr } for pid=42158 comm="grafana-server" path="/etc" dev="sda1" ino=1968517 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c73,c662 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616074452.447:7252): avc: denied { read } for pid=25049 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074540.006:7751): avc: denied { read } for pid=25430 comm="safe_timer" name="os-release" dev="overlay" ino=396113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c10,c125 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074523.919:7663): avc: denied { read } for pid=25430 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074687.090:8509): avc: denied { read } for pid=34011 comm="node_exporter" name="hwmon0" dev="sysfs" ino=35483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074683.253:8487): avc: denied { read } for pid=98027 comm="pgrep" name="status" dev="proc" ino=121712 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074317.419:6657): avc: denied { search } for pid=25049 comm="safe_timer" name="mon.smithi070" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074467.091:7399): avc: denied { read } for pid=34011 comm="node_exporter" name="file-nr" dev="proc" ino=163278 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074667.090:8397): avc: denied { open } for pid=34011 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074747.499:8827): avc: denied { write } for pid=25049 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi070/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074314.853:6564): avc: denied { search } for pid=25430 comm="safe_timer" name="libpod-6a25c082565bd3ed2efe9bc44b0985e4ada790df478c338ace111c62aac839e4.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074539.807:7742): avc: denied { read } for pid=25049 comm="msgr-worker-2" path="socket:[164260]" dev="sockfs" ino=164260 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074387.091:6948): avc: denied { search } for pid=34011 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616074477.090:7460): avc: denied { search } for pid=34011 comm="node_exporter" name="net" dev="proc" ino=153584 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"']

pass 5976951 2021-03-18 10:19:12 2021-03-18 13:09:11 2021-03-18 13:28:06 0:18:55 0:11:54 0:07:01 smithi master rhel 8.3 rados/singleton/{all/mon-config mon_election/classic msgr-failures/many msgr/async-v2only objectstore/filestore-xfs rados supported-random-distro$/{rhel_8}} 1
pass 5976952 2021-03-18 10:19:13 2021-03-18 13:09:11 2021-03-18 13:46:58 0:37:47 0:26:17 0:11:30 smithi master ubuntu 20.04 rados/cephadm/upgrade/{1-start-distro/1-start-ubuntu_20.04-15.2.9 2-repo_digest/defaut 3-start-upgrade 4-wait mon_election/classic} 2
pass 5976953 2021-03-18 10:19:14 2021-03-18 13:09:32 2021-03-18 13:26:37 0:17:05 0:07:02 0:10:03 smithi master centos 8.3 rados/objectstore/{backends/fusestore supported-random-distro$/{centos_8}} 1
pass 5976954 2021-03-18 10:19:15 2021-03-18 13:28:14 726 smithi master rhel 8.3 rados/singleton-nomsgr/{all/cache-fs-trunc mon_election/connectivity rados supported-random-distro$/{rhel_8}} 1
pass 5976955 2021-03-18 10:19:16 2021-03-18 13:09:52 2021-03-18 13:45:52 0:36:00 0:28:34 0:07:26 smithi master rhel 8.3 rados/thrash/{0-size-min-size-overrides/2-size-2-min-size 1-pg-log-overrides/normal_pg_log 2-recovery-overrides/{more-async-recovery} backoff/normal ceph clusters/{fixed-2 openstack} crc-failures/bad_map_crc_failure d-balancer/crush-compat mon_election/classic msgr-failures/osd-delay msgr/async-v2only objectstore/filestore-xfs rados supported-random-distro$/{rhel_8} thrashers/default thrashosds-health workloads/rados_api_tests} 2
pass 5976956 2021-03-18 10:19:17 2021-03-18 13:10:53 2021-03-18 13:27:56 0:17:03 0:10:14 0:06:49 smithi master rhel 8.3 rados/multimon/{clusters/3 mon_election/connectivity msgr-failures/few msgr/async-v2only no_pools objectstore/bluestore-comp-snappy rados supported-random-distro$/{rhel_8} tasks/mon_clock_no_skews} 2
pass 5976957 2021-03-18 10:19:18 2021-03-18 13:10:53 2021-03-18 13:37:30 0:26:37 0:19:55 0:06:42 smithi master rhel 8.3 rados/mgr/{clusters/{2-node-mgr} debug/mgr mon_election/classic objectstore/bluestore-comp-zlib supported-random-distro$/{rhel_8} tasks/progress} 2
pass 5976958 2021-03-18 10:19:19 2021-03-18 13:10:53 2021-03-18 14:02:31 0:51:38 0:38:33 0:13:05 smithi master ubuntu 20.04 rados/cephadm/thrash/{0-distro/ubuntu_20.04_kubic_testing 1-start 2-thrash 3-tasks/snaps-few-objects fixed-2 msgr/async-v2only root} 2
pass 5976959 2021-03-18 10:19:20 2021-03-18 13:13:14 2021-03-18 14:02:39 0:49:25 0:39:14 0:10:11 smithi master ubuntu 18.04 rados/standalone/{mon_election/classic supported-random-distro$/{ubuntu_latest} workloads/erasure-code} 1
pass 5976960 2021-03-18 10:19:21 2021-03-18 13:13:14 2021-03-18 14:06:40 0:53:26 0:43:07 0:10:19 smithi master centos 8.3 rados/singleton/{all/osd-backfill mon_election/connectivity msgr-failures/none msgr/async objectstore/bluestore-bitmap rados supported-random-distro$/{centos_8}} 1
pass 5976961 2021-03-18 10:19:21 2021-03-18 13:13:24 2021-03-18 13:59:35 0:46:11 0:34:26 0:11:45 smithi master ubuntu 18.04 rados/cephadm/with-work/{0-distro/ubuntu_18.04 fixed-2 mode/root mon_election/classic msgr/async-v1only start tasks/rados_api_tests} 2
pass 5976962 2021-03-18 10:19:22 2021-03-18 13:13:45 2021-03-18 13:30:29 0:16:44 0:06:44 0:10:00 smithi master ubuntu 18.04 rados/singleton-nomsgr/{all/ceph-kvstore-tool mon_election/classic rados supported-random-distro$/{ubuntu_latest}} 1
pass 5976963 2021-03-18 10:19:23 2021-03-18 13:15:45 2021-03-18 13:45:49 0:30:04 0:20:30 0:09:34 smithi master ubuntu 20.04 rados/cephadm/workunits/{0-distro/ubuntu_20.04_kubic_stable mon_election/classic task/test_orch_cli} 1
pass 5976964 2021-03-18 10:19:24 2021-03-18 13:16:15 2021-03-18 13:33:42 0:17:27 0:09:08 0:08:19 smithi master ubuntu 18.04 rados/perf/{ceph mon_election/classic objectstore/bluestore-basic-min-osd-mem-target openstack scheduler/dmclock_1Shard_16Threads settings/optimized ubuntu_18.04 workloads/sample_radosbench} 1
pass 5976965 2021-03-18 10:19:25 2021-03-18 13:16:16 2021-03-18 14:45:35 1:29:19 1:22:47 0:06:32 smithi master rhel 8.3 rados/thrash/{0-size-min-size-overrides/3-size-2-min-size 1-pg-log-overrides/short_pg_log 2-recovery-overrides/{more-async-partial-recovery} backoff/peering ceph clusters/{fixed-2 openstack} crc-failures/default d-balancer/on mon_election/connectivity msgr-failures/fastclose msgr/async objectstore/bluestore-bitmap rados supported-random-distro$/{rhel_8} thrashers/mapgap thrashosds-health workloads/radosbench-high-concurrency} 2
pass 5976966 2021-03-18 10:19:26 2021-03-18 13:16:36 2021-03-18 13:55:26 0:38:50 0:32:17 0:06:33 smithi master rhel 8.3 rados/singleton-bluestore/{all/cephtool mon_election/classic msgr-failures/many msgr/async-v2only objectstore/bluestore-comp-lz4 rados supported-random-distro$/{rhel_8}} 1
pass 5976967 2021-03-18 10:19:27 2021-03-18 13:16:36 2021-03-18 14:05:52 0:49:16 0:42:25 0:06:51 smithi master rhel 8.3 rados/cephadm/smoke/{distro/rhel_8.3_kubic_stable fixed-2 mon_election/connectivity start} 2
pass 5976968 2021-03-18 10:19:28 2021-03-18 13:16:47 2021-03-18 14:16:08 0:59:21 0:52:23 0:06:58 smithi master rhel 8.3 rados/singleton/{all/osd-recovery-incomplete mon_election/classic msgr-failures/few msgr/async-v1only objectstore/bluestore-comp-lz4 rados supported-random-distro$/{rhel_8}} 1
pass 5976969 2021-03-18 10:19:29 2021-03-18 13:44:32 891 smithi master ubuntu 18.04 rados/cephadm/smoke/{distro/ubuntu_18.04 fixed-2 mon_election/classic start} 2
pass 5976970 2021-03-18 10:19:30 2021-03-18 13:18:57 2021-03-18 14:59:01 1:40:04 1:28:17 0:11:47 smithi master ubuntu 18.04 rados/thrash-old-clients/{0-size-min-size-overrides/2-size-2-min-size 1-install/mimic-v1only backoff/peering ceph clusters/{openstack three-plus-one} d-balancer/on distro$/{ubuntu_18.04} mon_election/connectivity msgr-failures/fastclose rados thrashers/mapgap thrashosds-health workloads/radosbench} 3
pass 5976971 2021-03-18 10:19:31 2021-03-18 13:19:18 2021-03-18 13:35:01 0:15:43 0:06:57 0:08:46 smithi master centos 8.3 rados/singleton-nomsgr/{all/ceph-post-file mon_election/connectivity rados supported-random-distro$/{centos_8}} 1
pass 5976972 2021-03-18 10:19:32 2021-03-18 13:19:58 2021-03-18 13:58:39 0:38:41 0:31:51 0:06:50 smithi master rhel 8.3 rados/monthrash/{ceph clusters/3-mons mon_election/connectivity msgr-failures/few msgr/async-v1only objectstore/bluestore-comp-zstd rados supported-random-distro$/{rhel_8} thrashers/sync workloads/rados_mon_workunits} 2
pass 5976973 2021-03-18 10:19:33 2021-03-18 13:19:58 2021-03-18 13:53:35 0:33:37 0:26:36 0:07:01 smithi master rhel 8.3 rados/thrash-erasure-code/{ceph clusters/{fixed-2 openstack} fast/normal mon_election/classic msgr-failures/fastclose objectstore/bluestore-comp-zstd rados recovery-overrides/{default} supported-random-distro$/{rhel_8} thrashers/fastread thrashosds-health workloads/ec-small-objects-many-deletes} 2
pass 5976974 2021-03-18 10:19:34 2021-03-18 13:20:29 2021-03-18 13:43:04 0:22:35 0:10:08 0:12:27 smithi master ubuntu 18.04 rados/thrash-erasure-code-big/{ceph cluster/{12-osds openstack} mon_election/connectivity msgr-failures/osd-delay objectstore/bluestore-comp-zstd rados recovery-overrides/{more-active-recovery} supported-random-distro$/{ubuntu_latest} thrashers/morepggrow thrashosds-health workloads/ec-rados-plugin=lrc-k=4-m=2-l=3} 3
pass 5976975 2021-03-18 10:19:34 2021-03-18 13:20:49 2021-03-18 13:53:02 0:32:13 0:22:10 0:10:03 smithi master centos 8.3 rados/verify/{centos_latest ceph clusters/{fixed-2 openstack} d-thrash/none mon_election/connectivity msgr-failures/few msgr/async-v1only objectstore/bluestore-comp-zstd rados tasks/rados_api_tests validater/lockdep} 2
pass 5976976 2021-03-18 10:19:35 2021-03-18 13:22:00 2021-03-18 15:02:19 1:40:19 1:28:58 0:11:21 smithi master ubuntu 18.04 rados/thrash/{0-size-min-size-overrides/2-size-2-min-size 1-pg-log-overrides/normal_pg_log 2-recovery-overrides/{more-partial-recovery} backoff/peering_and_degraded ceph clusters/{fixed-2 openstack} crc-failures/bad_map_crc_failure d-balancer/crush-compat mon_election/classic msgr-failures/few msgr/async-v1only objectstore/bluestore-comp-lz4 rados supported-random-distro$/{ubuntu_latest} thrashers/morepggrow thrashosds-health workloads/radosbench} 2
pass 5976977 2021-03-18 10:19:36 2021-03-18 13:22:20 2021-03-18 13:49:30 0:27:10 0:19:12 0:07:58 smithi master rhel 8.3 rados/basic/{ceph clusters/{fixed-2 openstack} mon_election/classic msgr-failures/few msgr/async-v2only objectstore/bluestore-comp-snappy rados supported-random-distro$/{rhel_8} tasks/repair_test} 2
fail 5976978 2021-03-18 10:19:37 2021-03-18 13:24:10 2021-03-18 14:59:43 1:35:33 1:28:56 0:06:37 smithi master rhel 8.3 rados/cephadm/smoke-roleless/{1-start 2-services/{basic rgw} 3-final distro/rhel_8.3_kubic_stable} 2
Failure Reason:

SELinux denials found on ubuntu@smithi080.front.sepia.ceph.com: ['type=AVC msg=audit(1616075585.989:8985): avc: denied { open } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075399.030:7950): avc: denied { write } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075587.277:9014): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075398.741:7938): avc: denied { getattr } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16396 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075242.644:7163): avc: denied { read } for pid=44080 comm="prometheus" path="socket:[319547]" dev="sockfs" ino=319547 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075179.941:6898): avc: denied { write } for pid=26330 comm="conmon" name="socket" dev="tmpfs" ino=16686 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075178.940:6879): avc: denied { read } for pid=26728 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075268.739:7344): avc: denied { read } for pid=35348 comm="node_exporter" name="entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075342.014:7727): avc: denied { write } for pid=78525 comm="msgr-worker-0" laddr=172.21.15.80 lport=54956 faddr=172.21.15.80 fport=3300 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075650.020:9279): avc: denied { open } for pid=26330 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075338.739:7689): avc: denied { read } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075318.737:7496): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173156 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075258.738:7242): avc: denied { read } for pid=35348 comm="node_exporter" name="net" dev="sysfs" ino=21519 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075485.277:8477): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075422.277:8157): avc: denied { search } for pid=42010 comm="grafana-server" name="etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075672.643:9418): avc: denied { setopt } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075248.739:7172): avc: denied { read } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075318.596:7492): avc: denied { search } for pid=51959 comm="safe_timer" name="/" dev="overlay" ino=1968225 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c631,c994 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.738:8872): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173156 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075428.739:8189): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075255.929:7207): avc: denied { getattr } for pid=26353 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.802:9275): avc: denied { append } for pid=26728 comm="log" path="/var/log/ceph/ceph-mgr.smithi080.njtcci.log" dev="sda1" ino=395865 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075585.989:8984): avc: denied { search } for pid=26353 comm="safe_timer" name="/" dev="overlay" ino=1442592 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075182.643:6911): avc: denied { search } for pid=44080 comm="prometheus" name="/" dev="overlay" ino=1968129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075328.742:7649): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.742:7795): avc: denied { search } for pid=35348 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.739:7104): avc: denied { getattr } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16396 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.739:7783): avc: denied { search } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=166036 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.739:6742): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075563.278:8835): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075398.742:7945): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075402.643:8013): avc: denied { create } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075565.986:8841): avc: denied { search } for pid=26353 comm="safe_timer" name="var" dev="sda1" ino=1442603 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075406.043:8066): avc: denied { search } for pid=26330 comm="conmon" name="journal" dev="tmpfs" ino=16682 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075572.645:8929): avc: denied { read } for pid=26353 comm="msgr-worker-2" path="socket:[173169]" dev="sockfs" ino=173169 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075580.988:8952): avc: denied { dac_read_search } for pid=26353 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075585.989:8988): avc: denied { write } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075587.276:9010): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075668.738:9393): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=167607 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075236.988:7056): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075319.649:7550): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075479.278:8380): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075238.740:7109): avc: denied { search } for pid=35348 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075343.044:7753): avc: denied { read } for pid=26330 comm="conmon" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075586.067:8993): avc: denied { open } for pid=26330 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075408.738:8082): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075488.738:8497): avc: denied { search } for pid=35348 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.739:7932): avc: denied { read } for pid=35348 comm="node_exporter" name="file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.740:7788): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.017:9236): avc: denied { search } for pid=26330 comm="conmon" name="journal" dev="tmpfs" ino=16682 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075508.738:8627): avc: denied { search } for pid=35348 comm="node_exporter" name="7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.741:7938): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075674.793:9426): avc: denied { getattr } for pid=44080 comm="prometheus" path="/prometheus/queries.active" dev="dm-4" ino=158 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.775:8902): avc: denied { getattr } for pid=26728 comm="mgr-fin" path="/usr/lib64/python3.6" dev="sda1" ino=922750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075667.539:9352): avc: denied { search } for pid=26728 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075400.033:7956): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075398.791:7947): avc: denied { search } for pid=46227 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968207 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c79,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075321.662:7577): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075478.739:8358): avc: denied { read } for pid=35348 comm="node_exporter" name="cpufreq" dev="sysfs" ino=30758 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075342.644:7740): avc: denied { signal } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075320.941:7570): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075268.738:7334): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/net/arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075318.737:7494): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075586.013:8990): avc: denied { search } for pid=51959 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.740:8371): avc: denied { search } for pid=35348 comm="node_exporter" name="kernel" dev="proc" ino=167394 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.738:9025): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.739:7690): avc: denied { search } for pid=35348 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075418.742:8121): avc: denied { search } for pid=35348 comm="node_exporter" name="host" dev="sda1" ino=1968013 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075582.061:8958): avc: denied { write } for pid=26330 comm="conmon" name="socket" dev="tmpfs" ino=16686 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075328.742:7651): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075236.278:7046): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075482.608:8432): avc: denied { open } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075260.930:7275): avc: denied { open } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075320.277:7556): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075425.701:8182): avc: denied { signal } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.741:7113): avc: denied { search } for pid=35348 comm="node_exporter" name="fs" dev="proc" ino=171371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075498.738:8532): avc: denied { read } for pid=35348 comm="node_exporter" name="cpuinfo_max_freq" dev="sysfs" ino=30846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075324.021:7624): avc: denied { read } for pid=42602 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075344.278:7769): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="overlay" ino=1444771 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075254.278:7188): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="sda1" ino=1444771 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075328.742:7652): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075643.430:9174): avc: denied { search } for pid=26728 comm="safe_timer" name="usr" dev="sda1" ino=786698 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075584.277:8975): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075260.473:7258): avc: denied { search } for pid=46227 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075321.841:7578): avc: denied { read } for pid=26728 comm="msgr-worker-0" path="socket:[281905]" dev="sockfs" ino=281905 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.739:7933): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=43630 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075322.643:7592): avc: denied { setopt } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075563.024:8810): avc: denied { open } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.739:8877): avc: denied { search } for pid=35348 comm="node_exporter" name="fs" dev="proc" ino=171371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075155.903:6715): avc: denied { open } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075667.539:9351): avc: denied { search } for pid=26728 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075488.739:8499): avc: denied { getattr } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16396 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075179.941:6897): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075488.738:8496): avc: denied { read } for pid=35348 comm="node_exporter" name="eno1" dev="sysfs" ino=34869 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075152.278:6667): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.278:7671): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075323.277:7616): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075259.020:7255): avc: denied { search } for pid=26330 comm="conmon" name="systemd" dev="tmpfs" ino=16404 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075480.971:8419): avc: denied { open } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075663.528:9330): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=394794 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075400.033:7954): avc: denied { read } for pid=26330 comm="conmon" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075684.072:9434): avc: denied { open } for pid=26330 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075154.353:6701): avc: denied { write } for pid=26728 comm="safe_timer" path="pipe:[151559]" dev="pipefs" ino=151559 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075261.023:7281): avc: denied { read } for pid=26330 comm="conmon" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075402.643:8017): avc: denied { write } for pid=44080 comm="prometheus" path="socket:[352600]" dev="sockfs" ino=352600 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075172.905:6812): avc: denied { search } for pid=26728 comm="safe_timer" name="libpod-7157ed55dd2bb6f82af892cdc2cadcbaa2c5f5b0b22e740b7b8d1bea0b6c44b3.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.739:7092): avc: denied { read } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075506.278:8623): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="overlay" ino=1444771 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075585.815:8980): avc: denied { write } for pid=46227 comm="osd_srv_heartbt" path="pipe:[189374]" dev="pipefs" ino=189374 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075325.942:7631): avc: denied { search } for pid=26353 comm="safe_timer" name="/" dev="overlay" ino=1442592 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075488.738:8495): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075339.038:7707): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075480.060:8391): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075498.737:8530): avc: denied { read } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.738:9393): avc: denied { read } for pid=35348 comm="node_exporter" name="mounts" dev="proc" ino=167607 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075398.739:7931): avc: denied { read } for pid=35348 comm="node_exporter" name="mounts" dev="proc" ino=167607 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075418.738:8107): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075260.930:7274): avc: denied { dac_read_search } for pid=26353 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075338.739:7693): avc: denied { read } for pid=35348 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.740:9038): avc: denied { search } for pid=35348 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075408.737:8070): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="overlay" ino=1968004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075268.737:7329): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075159.916:6769): avc: denied { write } for pid=26330 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075154.819:6706): avc: denied { search } for pid=26728 comm="safe_timer" name="/" dev="overlay" ino=1442611 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075561.492:8779): avc: denied { read } for pid=57451 comm="msgr-worker-1" path="pipe:[227464]" dev="pipefs" ino=227464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.738:9382): avc: denied { search } for pid=35348 comm="node_exporter" name="fs" dev="proc" ino=171371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075644.278:9191): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075478.696:8333): avc: denied { write } for pid=78525 comm="msgr-worker-1" laddr=172.21.15.80 lport=32780 faddr=172.21.15.80 fport=6802 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075261.023:7283): avc: denied { sendto } for pid=26330 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075422.644:8166): avc: denied { create } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075561.644:8781): avc: denied { write } for pid=26353 comm="ms_dispatch" path="/var/lib/ceph/mon/ceph-smithi080/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075421.963:8145): avc: denied { write } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075338.739:7687): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/fs/xfs/dm-4/stats/stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075323.012:7613): avc: denied { sendto } for pid=26330 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075498.737:8527): avc: denied { search } for pid=35348 comm="node_exporter" name="7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075340.945:7713): avc: denied { search } for pid=26353 comm="safe_timer" name="mon.smithi080" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.738:7684): avc: denied { read } for pid=35348 comm="node_exporter" name="xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075255.930:7210): avc: denied { add_name } for pid=26353 comm="rstore_compact" name="000015.log" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075260.930:7274): avc: denied { getattr } for pid=26353 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.739:9253): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/class/hwmon" dev="sysfs" ino=21483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075263.278:7318): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075238.739:7097): avc: denied { search } for pid=35348 comm="node_exporter" name="1" dev="proc" ino=167025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075418.740:8117): avc: denied { search } for pid=35348 comm="node_exporter" name="kernel" dev="proc" ino=167394 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075570.987:8918): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075242.277:7154): avc: denied { search } for pid=42010 comm="grafana-server" name="etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075490.076:8507): avc: denied { sendto } for pid=26330 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075568.739:8885): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075154.819:6706): avc: denied { search } for pid=26728 comm="safe_timer" name="diff" dev="sda1" ino=1442611 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075257.017:7221): avc: denied { use } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075239.206:7122): avc: denied { search } for pid=57451 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c179,c314 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.739:6864): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=167607 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075582.502:8960): avc: denied { search } for pid=51959 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075672.643:9423): avc: denied { write } for pid=44080 comm="prometheus" path="socket:[405264]" dev="sockfs" ino=405264 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075412.643:8093): avc: denied { search } for pid=44080 comm="prometheus" name="etc" dev="sda1" ino=1968146 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075681.602:9433): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075646.001:9222): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075173.934:6817): avc: denied { use } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075238.991:7115): avc: denied { write } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075668.737:9380): avc: denied { search } for pid=35348 comm="node_exporter" name="7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075498.737:8526): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075419.277:8124): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075161.278:6777): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075643.148:9169): avc: denied { read } for pid=51959 comm="msgr-worker-1" path="socket:[219153]" dev="sockfs" ino=219153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075650.020:9280): avc: denied { write } for pid=26330 comm="conmon" name="socket" dev="tmpfs" ino=16686 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075646.001:9221): avc: denied { read } for pid=26353 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075323.276:7614): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075238.738:7089): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173156 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.739:7779): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075418.738:8108): avc: denied { read } for pid=35348 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075272.643:7359): avc: denied { create } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.738:8871): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075320.277:7558): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075504.754:8608): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075348.742:7792): avc: denied { getattr } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16396 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075422.278:8162): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075341.772:7719): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=394794 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.738:7776): avc: denied { read } for pid=35348 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075482.620:8434): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075568.743:8899): avc: denied { search } for pid=35348 comm="node_exporter" name="host" dev="sda1" ino=1968013 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075569.201:8905): avc: denied { search } for pid=51959 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968225 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c631,c994 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075667.551:9354): avc: denied { search } for pid=26728 comm="safe_timer" name="etc" dev="sda1" ino=1442620 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075164.278:6791): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075666.004:9340): avc: denied { read } for pid=26353 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075269.276:7355): avc: denied { search } for pid=42010 comm="grafana-server" name="/" dev="overlay" ino=1968169 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075647.010:9227): avc: denied { search } for pid=26728 comm="mgr-fin" name="etc" dev="sda1" ino=1442620 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075248.739:7172): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/net/dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.739:7929): avc: denied { search } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=166036 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075194.787:6920): avc: denied { getattr } for pid=44080 comm="prometheus" path="/prometheus/wal" dev="dm-4" ino=8388752 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075176.276:6838): avc: denied { search } for pid=42010 comm="grafana-server" name="/" dev="overlay" ino=1968169 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075585.989:8984): avc: denied { search } for pid=26353 comm="safe_timer" name="var" dev="sda1" ino=1442603 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075238.739:7102): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075662.665:9323): avc: denied { open } for pid=57451 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075508.739:8632): avc: denied { read } for pid=35348 comm="node_exporter" name="entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075581.121:8954): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075323.277:7618): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075242.997:7165): avc: denied { open } for pid=26330 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075568.039:8867): avc: denied { write } for pid=26330 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075151.905:6653): avc: denied { write } for pid=26330 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075501.947:8557): avc: denied { search } for pid=42602 comm="safe_timer" name="/" dev="overlay" ino=1968187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c166,c597 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075260.715:7269): avc: denied { read } for pid=88987 comm="pgrep" name="status" dev="proc" ino=152649 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075563.277:8830): avc: denied { search } for pid=42010 comm="grafana-server" name="/" dev="overlay" ino=1968169 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075586.067:8994): avc: denied { write } for pid=26330 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075268.738:7335): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=167607 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075648.739:9258): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075667.539:9351): avc: denied { open } for pid=26728 comm="safe_timer" path="/proc/meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075418.062:8099): avc: denied { open } for pid=26330 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075478.739:8351): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075666.004:9339): avc: denied { getattr } for pid=26353 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075254.788:7192): avc: denied { getattr } for pid=44080 comm="prometheus" path="/prometheus/wal" dev="dm-4" ino=8388752 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075262.030:7299): avc: denied { read } for pid=26353 comm="rstore_compact" name="logical_block_size" dev="sysfs" ino=45217 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.740:8370): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.738:6851): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.739:9261): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/fs/xfs/dm-4/stats/stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075500.974:8555): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.739:7927): avc: denied { read } for pid=35348 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075337.035:7659): avc: denied { write } for pid=26330 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075400.848:7988): avc: denied { search } for pid=42010 comm="grafana-server" name="/" dev="overlay" ino=1968169 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075562.644:8798): avc: denied { signal } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075152.278:6664): avc: denied { lock } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075500.009:8540): avc: denied { write } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.739:8886): avc: denied { read } for pid=35348 comm="node_exporter" name="stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075582.061:8958): avc: denied { search } for pid=26330 comm="conmon" name="journal" dev="tmpfs" ino=16682 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075580.626:8945): avc: denied { search } for pid=57451 comm="safe_timer" name="diff" dev="sda1" ino=1968244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075338.278:7675): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075154.831:6707): avc: denied { search } for pid=26728 comm="safe_timer" name="etc" dev="sda1" ino=1442620 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075503.636:8585): avc: denied { read } for pid=26353 comm="msgr-worker-2" path="pipe:[126774]" dev="pipefs" ino=126774 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075269.276:7356): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075508.739:8632): avc: denied { search } for pid=35348 comm="node_exporter" name="kernel" dev="proc" ino=167394 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075671.004:9413): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075484.114:8470): avc: denied { write } for pid=46227 comm="msgr-worker-1" laddr=172.21.15.80 lport=6814 faddr=172.21.15.97 fport=43198 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075328.738:7637): avc: denied { read } for pid=35348 comm="node_exporter" name="fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075644.277:9188): avc: denied { search } for pid=42010 comm="grafana-server" name="/" dev="overlay" ino=1968169 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075239.233:7124): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=394794 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.738:9395): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075587.145:9005): avc: denied { search } for pid=26728 comm="safe_timer" name="libpod-7157ed55dd2bb6f82af892cdc2cadcbaa2c5f5b0b22e740b7b8d1bea0b6c44b3.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075522.073:8663): avc: denied { read } for pid=26330 comm="conmon" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075484.945:8476): avc: denied { read } for pid=51959 comm="msgr-worker-1" path="pipe:[207622]" dev="pipefs" ino=207622 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075272.643:7360): avc: denied { setopt } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075400.033:7955): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075338.742:7703): avc: denied { search } for pid=35348 comm="node_exporter" name="host" dev="sda1" ino=1968013 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075180.906:6904): avc: denied { search } for pid=26353 comm="safe_timer" name="mon.smithi080" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.739:8368): avc: denied { search } for pid=35348 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616075176.276:6839): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075178.739:6864): avc: denied { search } for pid=35348 comm="node_exporter" name="1" dev="proc" ino=167025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075175.905:6835): avc: denied { search } for pid=26353 comm="safe_timer" name="var" dev="sda1" ino=1442603 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075262.644:7304): avc: denied { search } for pid=44080 comm="prometheus" name="etc" dev="sda1" ino=1968146 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075478.739:8359): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=30846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075340.945:7714): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075408.739:8086): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075257.319:7234): avc: denied { search } for pid=26728 comm="safe_timer" name="libpod-7157ed55dd2bb6f82af892cdc2cadcbaa2c5f5b0b22e740b7b8d1bea0b6c44b3.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075662.231:9302): avc: denied { search } for pid=51959 comm="safe_timer" name="/" dev="overlay" ino=1968225 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c631,c994 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075566.597:8861): avc: denied { search } for pid=57451 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075418.062:8099): avc: denied { write } for pid=26330 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075428.742:8207): avc: denied { search } for pid=35348 comm="node_exporter" name="1" dev="proc" ino=167025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075179.941:6898): avc: denied { write } for pid=26330 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075508.741:8644): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075587.277:9015): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-detail.json" dev="overlay" ino=1444779 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075667.539:9351): avc: denied { read } for pid=26728 comm="safe_timer" name="meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075248.739:7174): avc: denied { search } for pid=35348 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075258.739:7245): avc: denied { search } for pid=35348 comm="node_exporter" name="fs" dev="proc" ino=171371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075421.963:8147): avc: denied { write } for pid=26330 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075194.787:6918): avc: denied { open } for pid=44080 comm="prometheus" path="/prometheus" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.740:7789): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075434.793:8214): avc: denied { read } for pid=44080 comm="prometheus" name="data" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.739:8359): avc: denied { read } for pid=35348 comm="node_exporter" name="cpuinfo_max_freq" dev="sysfs" ino=30846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075500.011:8541): avc: denied { write } for pid=26330 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075342.817:7750): avc: denied { search } for pid=57451 comm="safe_timer" name="/" dev="overlay" ino=1968244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c179,c314 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075479.278:8381): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075500.276:8544): avc: denied { search } for pid=42010 comm="grafana-server" name="/" dev="overlay" ino=1968169 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075237.481:7065): avc: denied { read } for pid=51959 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.047:9359): avc: denied { write } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075488.073:8487): avc: denied { read } for pid=26330 comm="conmon" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075176.276:6838): avc: denied { search } for pid=42010 comm="grafana-server" name="etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075488.740:8502): avc: denied { search } for pid=35348 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075179.277:6890): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075644.278:9191): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.740:7111): avc: denied { search } for pid=35348 comm="node_exporter" name="host" dev="sda1" ino=1968013 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075497.994:8519): avc: denied { search } for pid=57451 comm="safe_timer" name="/" dev="overlay" ino=1968244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c179,c314 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.738:9031): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.739:7784): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/fs/xfs/stats/stats" dev="sysfs" ino=45563 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075420.960:8132): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.276:9369): avc: denied { search } for pid=42010 comm="grafana-server" name="etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075587.277:9014): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075422.236:8154): avc: denied { read } for pid=26728 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075175.905:6835): avc: denied { search } for pid=26353 comm="safe_timer" name="/" dev="overlay" ino=1442592 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075318.738:7511): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075319.002:7522): avc: denied { write } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075650.277:9282): avc: denied { search } for pid=42010 comm="grafana-server" name="/" dev="overlay" ino=1968169 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075672.643:9420): avc: denied { connect } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075328.738:7635): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075667.398:9347): avc: denied { read } for pid=26353 comm="msgr-worker-2" path="pipe:[126774]" dev="pipefs" ino=126774 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.739:8357): avc: denied { search } for pid=35348 comm="node_exporter" name="1" dev="proc" ino=167025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075178.737:6850): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075580.058:8943): avc: denied { write } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075400.103:7962): avc: denied { search } for pid=26728 comm="safe_timer" name="libpod-7157ed55dd2bb6f82af892cdc2cadcbaa2c5f5b0b22e740b7b8d1bea0b6c44b3.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075328.738:7634): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075400.115:7984): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.521:7909): avc: denied { append } for pid=46227 comm="log" path="/var/log/ceph/ceph-osd.1.log" dev="sda1" ino=395892 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075155.903:6714): avc: denied { search } for pid=26353 comm="safe_timer" name="/" dev="overlay" ino=1442592 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.738:8346): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075418.741:8119): avc: denied { search } for pid=35348 comm="node_exporter" name="user" dev="tmpfs" ino=16726 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075341.991:7724): avc: denied { search } for pid=26728 comm="mgr-fin" name="usr" dev="sda1" ino=786698 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075261.023:7280): avc: denied { use } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075567.060:8866): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075506.206:8616): avc: denied { search } for pid=46227 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968207 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c79,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.739:7691): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=43630 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075428.739:8194): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075674.793:9427): avc: denied { getattr } for pid=44080 comm="prometheus" path="/prometheus/wal" dev="dm-4" ino=8388752 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075342.429:7733): avc: denied { search } for pid=34534 comm="ceph-crash" name="/" dev="overlay" ino=1444628 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c85,c406 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.741:6871): avc: denied { search } for pid=35348 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616075503.288:8579): avc: denied { read } for pid=51959 comm="msgr-worker-2" path="pipe:[207623]" dev="pipefs" ino=207623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075585.989:8984): avc: denied { dac_read_search } for pid=26353 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075568.739:8879): avc: denied { read } for pid=35348 comm="node_exporter" name="xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075504.742:8605): avc: denied { search } for pid=26728 comm="safe_timer" name="/" dev="overlay" ino=1442611 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.741:6872): avc: denied { search } for pid=35348 comm="node_exporter" name="host" dev="sda1" ino=1968013 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075408.737:8070): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075482.608:8433): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075490.076:8506): avc: denied { use } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075421.466:8134): avc: denied { read } for pid=42602 comm="msgr-worker-1" path="socket:[278924]" dev="sockfs" ino=278924 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075255.929:7209): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075482.644:8436): avc: denied { signal } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075321.421:7575): avc: denied { search } for pid=42602 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c166,c597 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.739:7104): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075404.041:8044): avc: denied { read } for pid=26330 comm="conmon" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075498.738:8534): avc: denied { read } for pid=35348 comm="node_exporter" name="mounts" dev="proc" ino=167607 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075652.644:9289): avc: denied { search } for pid=44080 comm="prometheus" name="etc" dev="sda1" ino=1968146 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075668.740:9403): avc: denied { search } for pid=35348 comm="node_exporter" name="user" dev="tmpfs" ino=16726 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075261.023:7283): avc: denied { search } for pid=26330 comm="conmon" name="systemd" dev="tmpfs" ino=16404 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075662.456:9317): avc: denied { search } for pid=46227 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075587.276:9009): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.739:8873): avc: denied { read } for pid=35348 comm="node_exporter" name="fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075680.806:9431): avc: denied { open } for pid=105979 comm="pgrep" path="/proc/26353/status" dev="proc" ino=152649 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.737:6845): avc: denied { read } for pid=35348 comm="node_exporter" path="socket:[191428]" dev="sockfs" ino=191428 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075503.971:8592): avc: denied { open } for pid=42602 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.740:7108): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075176.276:6838): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075151.976:6659): avc: denied { search } for pid=26728 comm="mgr-fin" name="/" dev="overlay" ino=1442611 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075258.738:7238): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075236.204:7036): avc: denied { read } for pid=75528 comm="msgr-worker-0" path="pipe:[274958]" dev="pipefs" ino=274958 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075499.437:8539): avc: denied { search } for pid=57451 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075261.023:7283): avc: denied { write } for pid=26330 comm="conmon" name="socket" dev="tmpfs" ino=16686 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075586.013:8989): avc: denied { search } for pid=51959 comm="safe_timer" name="/" dev="overlay" ino=1968225 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c631,c994 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075405.956:8063): avc: denied { search } for pid=26353 comm="safe_timer" name="/" dev="overlay" ino=1442592 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075418.738:8105): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.758:6876): avc: denied { append } for pid=44080 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075162.644:6785): avc: denied { getattr } for pid=44080 comm="prometheus" laddr=172.21.15.80 lport=46262 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075662.041:9301): avc: denied { read } for pid=26353 comm="fn_monstore" path="/var/lib/ceph/mon/ceph-smithi080/store.db/000023.sst" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075320.038:7552): avc: denied { search } for pid=42602 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075587.277:9012): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075242.644:7162): avc: denied { write } for pid=44080 comm="prometheus" path="socket:[320584]" dev="sockfs" ino=320584 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.741:7944): avc: denied { read } for pid=35348 comm="node_exporter" name="entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075267.367:7324): avc: denied { read } for pid=26728 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075422.277:8157): avc: denied { search } for pid=42010 comm="grafana-server" name="/" dev="overlay" ino=1968169 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075256.986:7220): avc: denied { read } for pid=26728 comm="mgr-fin" name="localtime" dev="sda1" ino=394776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075572.644:8921): avc: denied { create } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075418.062:8100): avc: denied { write } for pid=26330 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075341.991:7724): avc: denied { search } for pid=26728 comm="mgr-fin" name="diff" dev="sda1" ino=1442611 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075342.645:7749): avc: denied { append } for pid=44080 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075408.740:8090): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.741:9041): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075400.115:7983): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.741:7944): avc: denied { search } for pid=35348 comm="node_exporter" name="kernel" dev="proc" ino=167394 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075257.278:7232): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075562.031:8786): avc: denied { use } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075255.553:7204): avc: denied { read } for pid=51959 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075500.973:8553): avc: denied { search } for pid=26353 comm="safe_timer" name="/" dev="overlay" ino=1442592 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075399.431:7952): avc: denied { search } for pid=42602 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c166,c597 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.737:9020): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075179.277:6890): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075268.739:7340): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075236.984:7051): avc: denied { search } for pid=26728 comm="mgr-fin" name="etc" dev="sda1" ino=1442620 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075260.613:7265): avc: denied { search } for pid=51959 comm="safe_timer" name="/" dev="overlay" ino=1968225 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c631,c994 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075482.645:8445): avc: denied { append } for pid=44080 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075479.278:8383): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="sda1" ino=1444771 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075648.740:9265): avc: denied { read } for pid=35348 comm="node_exporter" name="file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075260.473:7258): avc: denied { read } for pid=46227 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075337.748:7668): avc: denied { search } for pid=26728 comm="safe_timer" name="usr" dev="sda1" ino=786698 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075478.739:8364): avc: denied { getattr } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16396 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075151.587:6644): avc: denied { read } for pid=26353 comm="msgr-worker-2" path="pipe:[126774]" dev="pipefs" ino=126774 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.739:8369): avc: denied { search } for pid=35348 comm="node_exporter" name="host" dev="sda1" ino=1968013 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075343.044:7754): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075178.737:6848): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173156 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075563.277:8830): avc: denied { search } for pid=42010 comm="grafana-server" name="etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075155.903:6714): avc: denied { getattr } for pid=26353 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.739:7092): avc: denied { search } for pid=35348 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075179.277:6889): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075505.975:8613): avc: denied { open } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075672.643:9419): avc: denied { setopt } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075172.917:6814): avc: denied { read } for pid=26728 comm="msgr-worker-1" path="pipe:[151559]" dev="pipefs" ino=151559 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075343.044:7754): avc: denied { open } for pid=26330 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075261.023:7283): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075268.737:7331): avc: denied { search } for pid=35348 comm="node_exporter" name="7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075236.278:7047): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075562.644:8803): avc: denied { setopt } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075400.955:7991): avc: denied { search } for pid=26353 comm="safe_timer" name="/" dev="overlay" ino=1442592 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075652.644:9289): avc: denied { search } for pid=44080 comm="prometheus" name="/" dev="overlay" ino=1968129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075480.608:8400): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075428.739:8201): avc: denied { read } for pid=35348 comm="node_exporter" name="stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075503.288:8580): avc: denied { write } for pid=51959 comm="msgr-worker-2" laddr=172.21.15.80 lport=47558 faddr=172.21.15.80 fport=6808 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.740:8891): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.748:8373): avc: denied { append } for pid=44080 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075497.983:8518): avc: denied { search } for pid=26330 comm="conmon" name="systemd" dev="tmpfs" ino=16404 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075668.756:9407): avc: denied { append } for pid=44080 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075400.115:7983): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=394794 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075421.963:8148): avc: denied { write } for pid=26330 comm="conmon" name="socket" dev="tmpfs" ino=16686 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075152.644:6671): avc: denied { create } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.738:7090): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.743:8897): avc: denied { search } for pid=35348 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075680.806:9430): avc: denied { getattr } for pid=105979 comm="pgrep" path="/proc/26353" dev="proc" ino=152605 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075321.421:7575): avc: denied { open } for pid=42602 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.278:7672): avc: denied { lock } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075248.740:7181): avc: denied { search } for pid=35348 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075152.644:6674): avc: denied { getattr } for pid=44080 comm="prometheus" laddr=172.21.15.80 lport=41367 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.738:6853): avc: denied { read } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075504.742:8606): avc: denied { read } for pid=26728 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.740:9403): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.939:6877): avc: denied { write } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075236.405:7050): avc: denied { search } for pid=57451 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075277.429:7368): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075154.831:6707): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.696:8332): avc: denied { read } for pid=78525 comm="msgr-worker-1" path="pipe:[283728]" dev="pipefs" ino=283728 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075237.221:7061): avc: denied { search } for pid=26728 comm="safe_timer" name="libpod-7157ed55dd2bb6f82af892cdc2cadcbaa2c5f5b0b22e740b7b8d1bea0b6c44b3.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.739:6864): avc: denied { read } for pid=35348 comm="node_exporter" name="mounts" dev="proc" ino=167607 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075342.644:7741): avc: denied { search } for pid=44080 comm="prometheus" name="/" dev="overlay" ino=1968129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075159.916:6768): avc: denied { write } for pid=26330 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075238.740:7109): avc: denied { search } for pid=35348 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.738:9022): avc: denied { search } for pid=35348 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075151.905:6654): avc: denied { search } for pid=26330 comm="conmon" name="systemd" dev="tmpfs" ino=16404 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075568.739:8881): avc: denied { search } for pid=35348 comm="node_exporter" name="1" dev="proc" ino=167025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075662.816:9326): avc: denied { signal } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.741:7791): avc: denied { search } for pid=35348 comm="node_exporter" name="1" dev="proc" ino=167025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075421.963:8147): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075428.740:8204): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.277:9374): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075343.044:7754): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075236.277:7043): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075318.738:7512): avc: denied { search } for pid=35348 comm="node_exporter" name="kernel" dev="proc" ino=167394 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075180.906:6906): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.742:7794): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075504.754:8608): avc: denied { search } for pid=26728 comm="safe_timer" name="usr" dev="sda1" ino=786698 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075268.739:7348): avc: denied { search } for pid=35348 comm="node_exporter" name="user" dev="tmpfs" ino=16726 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075484.888:8474): avc: denied { search } for pid=46227 comm="safe_timer" name="/" dev="overlay" ino=1968207 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c79,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075168.739:6799): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075260.930:7276): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075684.072:9434): avc: denied { write } for pid=26330 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075240.926:7130): avc: denied { search } for pid=26353 comm="safe_timer" name="mon.smithi080" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.739:7785): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/fs/xfs/dm-4/stats/stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075328.739:7644): avc: denied { read } for pid=35348 comm="node_exporter" name="hwmon0" dev="sysfs" ino=35068 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075408.738:8084): avc: denied { search } for pid=35348 comm="node_exporter" name="1" dev="proc" ino=167025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075482.644:8438): avc: denied { create } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075257.017:7222): avc: denied { read } for pid=26330 comm="conmon" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075644.278:9192): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075644.010:9181): avc: denied { open } for pid=26330 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075421.399:8133): avc: denied { open } for pid=46227 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075485.278:8479): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075179.276:6885): avc: denied { getattr } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075650.277:9282): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075256.675:7216): avc: denied { search } for pid=46227 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968207 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c79,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075323.662:7620): avc: denied { search } for pid=26728 comm="safe_timer" name="/" dev="overlay" ino=1442611 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075667.551:9354): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075404.040:8043): avc: denied { write } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075478.739:8352): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075319.003:7525): avc: denied { search } for pid=26330 comm="conmon" name="journal" dev="tmpfs" ino=16682 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075500.277:8546): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.739:8364): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075498.717:8525): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075580.058:8944): avc: denied { read } for pid=26330 comm="conmon" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075587.277:9012): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075587.145:9005): avc: denied { open } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075160.849:6771): avc: denied { search } for pid=42010 comm="grafana-server" name="/" dev="overlay" ino=1968169 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075572.644:8923): avc: denied { setopt } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.739:6863): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075512.644:8652): avc: denied { search } for pid=44080 comm="prometheus" name="etc" dev="sda1" ino=1968146 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075563.277:8830): avc: denied { getattr } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075480.060:8391): avc: denied { write } for pid=26330 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075488.738:8498): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.741:7700): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075248.738:7170): avc: denied { search } for pid=35348 comm="node_exporter" name="7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075563.036:8813): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075321.005:7574): avc: denied { write } for pid=26330 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075175.936:6837): avc: denied { write } for pid=26330 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075268.737:7329): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="overlay" ino=1968004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.739:6743): avc: denied { read } for pid=35348 comm="node_exporter" name="dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075155.903:6714): avc: denied { search } for pid=26353 comm="safe_timer" name="var" dev="sda1" ino=1442603 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075401.276:7997): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075261.023:7282): avc: denied { open } for pid=26330 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075480.608:8399): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=394794 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075498.717:8524): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075151.976:6659): avc: denied { read } for pid=26728 comm="mgr-fin" name="localtime" dev="sda1" ino=394776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075587.005:9004): avc: denied { getattr } for pid=26728 comm="mgr-fin" name="UTC" dev="sda1" ino=1311473 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075648.738:9249): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173156 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.740:6755): avc: denied { read } for pid=35348 comm="node_exporter" name="file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075667.539:9352): avc: denied { search } for pid=26728 comm="safe_timer" name="libpod-7157ed55dd2bb6f82af892cdc2cadcbaa2c5f5b0b22e740b7b8d1bea0b6c44b3.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.277:9372): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075672.643:9416): avc: denied { create } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075260.849:7272): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.738:7682): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075643.148:9167): avc: denied { write } for pid=57451 comm="msgr-worker-1" laddr=172.21.15.80 lport=49836 faddr=172.21.15.80 fport=6820 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075261.344:7291): avc: denied { getattr } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075422.277:8157): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075562.143:8795): avc: denied { read } for pid=51959 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.739:7096): avc: denied { read } for pid=35348 comm="node_exporter" name="xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075242.644:7157): avc: denied { search } for pid=44080 comm="prometheus" name="/" dev="overlay" ino=1968129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.843:6766): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075408.738:8077): avc: denied { read } for pid=35348 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075644.278:9190): avc: denied { lock } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075592.644:9049): avc: denied { getattr } for pid=44080 comm="prometheus" laddr=172.21.15.80 lport=52321 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075342.528:7736): avc: denied { search } for pid=51959 comm="safe_timer" name="/" dev="overlay" ino=1968225 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c631,c994 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075179.941:6895): avc: denied { use } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075672.643:9424): avc: denied { read } for pid=44080 comm="prometheus" path="socket:[409009]" dev="sockfs" ino=409009 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075337.736:7667): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075403.352:8041): avc: denied { write } for pid=26353 comm="ms_dispatch" path="pipe:[126774]" dev="pipefs" ino=126774 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075488.737:8491): avc: denied { read } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.742:7794): avc: denied { search } for pid=35348 comm="node_exporter" name="user" dev="tmpfs" ino=16726 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075268.739:7343): avc: denied { read } for pid=35348 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075662.952:9327): avc: denied { write } for pid=42602 comm="bstore_kv_sync" path="/dev/dm-3" dev="devtmpfs" ino=107951 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075152.028:6661): avc: denied { read } for pid=46227 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075508.738:8627): avc: denied { read } for pid=35348 comm="node_exporter" name="stat" dev="proc" ino=173156 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075500.277:8547): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="sda1" ino=1444771 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075428.742:8208): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075440.754:8218): avc: denied { open } for pid=95869 comm="pgrep" path="/proc/26330/status" dev="proc" ino=132512 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075345.946:7770): avc: denied { getattr } for pid=26353 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075240.926:7130): avc: denied { open } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.738:7921): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/stat" dev="proc" ino=4026532033 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075419.278:8125): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075583.121:8969): avc: denied { read } for pid=26728 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075318.738:7508): avc: denied { read } for pid=35348 comm="node_exporter" name="hwmon0" dev="sysfs" ino=35068 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075569.278:8911): avc: denied { read open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075497.777:8517): avc: denied { open } for pid=46227 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.741:9268): avc: denied { getattr } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16396 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075155.903:6716): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.739:6862): avc: denied { read } for pid=35348 comm="node_exporter" name="entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075480.060:8390): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075500.011:8542): avc: denied { write } for pid=26330 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075499.368:8538): avc: denied { append } for pid=26353 comm="log" path="/var/log/ceph/ceph-mon.smithi080.log" dev="sda1" ino=395863 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.740:7936): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075320.277:7556): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075178.753:6873): avc: denied { append } for pid=26353 comm="log" path="/var/log/ceph/ceph-mon.smithi080.log" dev="sda1" ino=395863 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075248.738:7169): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.739:7925): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.741:7941): avc: denied { search } for pid=35348 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075408.737:8073): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.741:6868): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075422.644:8170): avc: denied { connect } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075318.739:7516): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075321.662:7577): avc: denied { search } for pid=26728 comm="safe_timer" name="usr" dev="sda1" ino=786698 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075323.277:7618): avc: denied { read open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075257.017:7224): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075576.087:8931): avc: denied { search } for pid=51959 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.738:9382): avc: denied { search } for pid=35348 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.738:9387): avc: denied { read } for pid=35348 comm="node_exporter" name="mc" dev="sysfs" ino=21498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075179.941:6898): avc: denied { search } for pid=26330 comm="conmon" name="systemd" dev="tmpfs" ino=16404 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075428.738:8188): avc: denied { search } for pid=35348 comm="node_exporter" name="7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075587.276:9009): avc: denied { getattr } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075408.738:8075): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075421.963:8148): avc: denied { search } for pid=26330 comm="conmon" name="journal" dev="tmpfs" ino=16682 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075325.687:7626): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075504.754:8608): avc: denied { getattr } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075421.995:8153): avc: denied { read } for pid=26728 comm="mgr-fin" name="localtime" dev="overlay" ino=394776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.741:8894): avc: denied { search } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=166036 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075155.910:6719): avc: denied { search } for pid=26330 comm="conmon" name="systemd" dev="tmpfs" ino=16404 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075569.278:8911): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075240.994:7144): avc: denied { search } for pid=26330 comm="conmon" name="systemd" dev="tmpfs" ino=16404 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075398.739:7930): avc: denied { read } for pid=35348 comm="node_exporter" name="cpufreq" dev="sysfs" ino=30758 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075318.194:7491): avc: denied { search } for pid=46227 comm="safe_timer" name="/" dev="overlay" ino=1968207 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c79,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075506.278:8620): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075255.930:7210): avc: denied { open } for pid=26353 comm="rstore_compact" path="/var/lib/ceph/mon/ceph-smithi080/store.db/000015.log" dev="dm-4" ino=137 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075650.278:9284): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.738:6738): avc: denied { read } for pid=35348 comm="node_exporter" name="stat" dev="proc" ino=173156 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075168.740:6803): avc: denied { search } for pid=35348 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616075182.643:6917): avc: denied { read } for pid=44080 comm="prometheus" path="socket:[298882]" dev="sockfs" ino=298882 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.991:7116): avc: denied { use } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075344.278:7767): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075172.644:6811): avc: denied { search } for pid=44080 comm="prometheus" name="/" dev="overlay" ino=1968129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075337.035:7660): avc: denied { write } for pid=26330 comm="conmon" name="socket" dev="tmpfs" ino=16686 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075317.991:7488): avc: denied { search } for pid=42602 comm="safe_timer" name="/" dev="overlay" ino=1968187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c166,c597 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075643.148:9170): avc: denied { read } for pid=51959 comm="msgr-worker-0" path="socket:[227824]" dev="sockfs" ino=227824 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.737:6850): avc: denied { read } for pid=35348 comm="node_exporter" name="fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.738:9026): avc: denied { read } for pid=35348 comm="node_exporter" name="xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.705:7086): avc: denied { search } for pid=42602 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c166,c597 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.741:7701): avc: denied { search } for pid=35348 comm="node_exporter" name="user" dev="tmpfs" ino=16726 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075506.277:8617): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.739:8877): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075400.955:7992): avc: denied { search } for pid=26353 comm="safe_timer" name="mon.smithi080" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075162.297:6780): avc: denied { open } for pid=42602 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075256.986:7220): avc: denied { search } for pid=26728 comm="mgr-fin" name="/" dev="overlay" ino=1442611 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075500.276:8544): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.738:6854): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/class/net" dev="sysfs" ino=21519 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.739:7924): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=21498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.739:8348): avc: denied { read } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075672.643:9415): avc: denied { search } for pid=44080 comm="prometheus" name="/" dev="overlay" ino=1968129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.740:9265): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075506.278:8620): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075570.044:8913): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075668.738:9395): avc: denied { read } for pid=35348 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075341.991:7724): avc: denied { search } for pid=26728 comm="mgr-fin" name="etc" dev="sda1" ino=1442620 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075158.739:6747): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075585.360:8976): avc: denied { append } for pid=51959 comm="log" path="/var/log/ceph/ceph-osd.2.log" dev="sda1" ino=395894 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.739:9400): avc: denied { getattr } for pid=35348 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075484.945:8475): avc: denied { write } for pid=46227 comm="tp_osd_tp" path="pipe:[189374]" dev="pipefs" ino=189374 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075319.649:7550): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075152.807:6678): avc: denied { read } for pid=26728 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075652.644:9292): avc: denied { setopt } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075405.957:8064): avc: denied { read } for pid=26353 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075242.644:7159): avc: denied { setopt } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075587.005:9004): avc: denied { read } for pid=26728 comm="mgr-fin" name="localtime" dev="sda1" ino=394776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075168.739:6798): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075562.031:8789): avc: denied { write } for pid=26330 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075422.278:8160): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075592.644:9046): avc: denied { create } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075643.418:9171): avc: denied { search } for pid=26728 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075318.738:7499): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.741:6870): avc: denied { search } for pid=35348 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075497.777:8517): avc: denied { read } for pid=46227 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.739:9397): avc: denied { read } for pid=35348 comm="node_exporter" name="entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075569.277:8907): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075238.738:7089): avc: denied { search } for pid=35348 comm="node_exporter" name="7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075152.028:6660): avc: denied { open } for pid=46227 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075236.988:7053): avc: denied { use } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075328.742:7654): avc: denied { search } for pid=35348 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075405.957:8064): avc: denied { open } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075318.738:7500): avc: denied { search } for pid=35348 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075484.632:8473): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=394794 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075562.644:8806): avc: denied { getattr } for pid=44080 comm="prometheus" laddr=172.21.15.80 lport=37245 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.739:7923): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.739:8886): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/fs/xfs/dm-4/stats/stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.939:8904): avc: denied { search } for pid=26705 comm="conmon" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075342.014:7726): avc: denied { read } for pid=78525 comm="msgr-worker-0" path="pipe:[283727]" dev="pipefs" ino=283727 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075236.984:7051): avc: denied { read } for pid=26728 comm="mgr-fin" name="localtime" dev="sda1" ino=394776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075479.278:8384): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/pool-overview.json" dev="overlay" ino=1444778 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075343.784:7762): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075500.766:8550): avc: denied { read } for pid=99158 comm="pgrep" name="status" dev="proc" ino=132512 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075328.738:7636): avc: denied { read } for pid=35348 comm="node_exporter" name="stat" dev="proc" ino=173156 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075168.739:6797): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075318.739:7520): avc: denied { search } for pid=35348 comm="node_exporter" name="host" dev="sda1" ino=1968013 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075479.157:8376): avc: denied { read } for pid=42602 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075260.930:7275): avc: denied { read } for pid=26353 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.599:7085): avc: denied { read } for pid=26353 comm="msgr-worker-2" path="pipe:[126774]" dev="pipefs" ino=126774 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075482.608:8432): avc: denied { read } for pid=26728 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075686.277:9439): avc: denied { search } for pid=42010 comm="grafana-server" name="/" dev="overlay" ino=1968169 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075667.398:9346): avc: denied { write } for pid=26353 comm="ms_dispatch" path="pipe:[126774]" dev="pipefs" ino=126774 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075503.278:8574): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.739:7101): avc: denied { search } for pid=35348 comm="node_exporter" name="kernel" dev="proc" ino=167394 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075236.204:7040): avc: denied { read } for pid=26728 comm="msgr-worker-2" path="socket:[278228]" dev="sockfs" ino=278228 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075267.281:7322): avc: denied { open } for pid=26705 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075568.740:8892): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075268.738:7338): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075268.739:7343): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075686.075:9438): avc: denied { write } for pid=26330 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075404.277:8057): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075440.964:8223): avc: denied { write } for pid=26353 comm="safe_timer" path="pipe:[126774]" dev="pipefs" ino=126774 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075179.276:6885): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075479.277:8377): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075643.430:9174): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075158.843:6766): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075320.277:7557): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075500.973:8554): avc: denied { search } for pid=26353 comm="safe_timer" name="mon.smithi080" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075342.644:7743): avc: denied { create } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075565.986:8841): avc: denied { search } for pid=26353 comm="safe_timer" name="/" dev="overlay" ino=1442592 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075403.306:8037): avc: denied { write } for pid=57451 comm="msgr-worker-1" laddr=172.21.15.80 lport=6832 faddr=172.21.15.97 fport=42740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075155.055:6710): avc: denied { search } for pid=51959 comm="safe_timer" name="/" dev="overlay" ino=1968225 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c631,c994 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.739:8881): avc: denied { read } for pid=35348 comm="node_exporter" name="mounts" dev="proc" ino=167607 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075567.036:8863): avc: denied { write } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075578.738:8941): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/class/net/eno1" dev="sysfs" ino=34869 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075175.936:6836): avc: denied { write } for pid=26330 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075343.772:7761): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075174.929:6831): avc: denied { search } for pid=26728 comm="safe_timer" name="etc" dev="sda1" ino=1442620 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075504.021:8594): avc: denied { use } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075562.513:8797): avc: denied { search } for pid=46227 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968207 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c79,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.739:7696): avc: denied { read } for pid=35348 comm="node_exporter" name="file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075421.466:8135): avc: denied { write } for pid=42602 comm="msgr-worker-1" laddr=172.21.15.80 lport=6802 faddr=172.21.15.97 fport=58318 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075561.554:8780): avc: denied { search } for pid=42602 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1968187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075151.905:6654): avc: denied { write } for pid=26330 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075236.988:7056): avc: denied { search } for pid=26330 comm="conmon" name="systemd" dev="tmpfs" ino=16404 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075668.738:9382): avc: denied { read } for pid=35348 comm="node_exporter" name="file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075421.928:8143): avc: denied { read } for pid=57451 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075342.429:7733): avc: denied { dac_override } for pid=34534 comm="ceph-crash" capability=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075180.906:6903): avc: denied { dac_read_search } for pid=26353 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075400.115:7983): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075644.010:9180): avc: denied { read } for pid=26330 comm="conmon" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075648.740:9267): avc: denied { search } for pid=35348 comm="node_exporter" name="1" dev="proc" ino=167025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075262.032:7302): avc: denied { unlink } for pid=26353 comm="rocksdb:high0" name="000015.log" dev="dm-4" ino=137 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075644.010:9181): avc: denied { write } for pid=26330 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075318.739:7515): avc: denied { read } for pid=35348 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.740:6865): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.737:6843): avc: denied { signal } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075422.236:8154): avc: denied { search } for pid=26728 comm="safe_timer" name="libpod-7157ed55dd2bb6f82af892cdc2cadcbaa2c5f5b0b22e740b7b8d1bea0b6c44b3.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075421.889:8141): avc: denied { read } for pid=75978 comm="msgr-worker-1" path="pipe:[273321]" dev="pipefs" ino=273321 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075328.738:7634): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="overlay" ino=1968004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075576.495:8932): avc: denied { write } for pid=42602 comm="tp_osd_tp" path="pipe:[187565]" dev="pipefs" ino=187565 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075580.626:8946): avc: denied { open } for pid=57451 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075320.727:7564): avc: denied { open } for pid=92179 comm="pgrep" path="/proc/26353/status" dev="proc" ino=152649 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075160.904:6773): avc: denied { read } for pid=26353 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.738:9030): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/fs/xfs/dm-4/stats/stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075328.742:7653): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075236.277:7042): avc: denied { search } for pid=42010 comm="grafana-server" name="etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075588.739:9034): avc: denied { search } for pid=35348 comm="node_exporter" name="1" dev="proc" ino=167025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075402.643:8016): avc: denied { getattr } for pid=44080 comm="prometheus" laddr=172.21.15.80 lport=38203 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075323.674:7622): avc: denied { search } for pid=26728 comm="safe_timer" name="etc" dev="sda1" ino=1442620 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075238.739:7093): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075562.644:8800): avc: denied { create } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.737:6844): avc: denied { write } for pid=44080 comm="prometheus" path="socket:[196812]" dev="sockfs" ino=196812 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.737:9019): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173156 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075268.739:7345): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075482.066:8423): avc: denied { open } for pid=26330 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075152.028:6660): avc: denied { search } for pid=46227 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.740:9404): avc: denied { search } for pid=35348 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.739:7694): avc: denied { search } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=166036 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075400.033:7955): avc: denied { open } for pid=26330 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075343.044:7755): avc: denied { sendto } for pid=26330 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075582.061:8957): avc: denied { write } for pid=26330 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075260.715:7267): avc: denied { open } for pid=88987 comm="pgrep" path="/proc/26330/status" dev="proc" ino=132512 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075484.086:8465): avc: denied { search } for pid=51959 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968225 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c631,c994 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075434.793:8214): avc: denied { open } for pid=44080 comm="prometheus" path="/prometheus" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075401.993:8005): avc: denied { read } for pid=26728 comm="mgr-fin" name="localtime" dev="sda1" ino=394776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075563.278:8834): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075318.738:7501): avc: denied { read } for pid=35348 comm="node_exporter" name="xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075248.739:7172): avc: denied { read } for pid=35348 comm="node_exporter" name="dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075674.793:9425): avc: denied { read } for pid=44080 comm="prometheus" name="data" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075248.738:7171): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075498.705:8522): avc: denied { read } for pid=26728 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075261.332:7288): avc: denied { search } for pid=26728 comm="safe_timer" name="/" dev="overlay" ino=1442611 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075422.644:8165): avc: denied { getattr } for pid=44080 comm="prometheus" path="/etc/hosts" dev="tmpfs" ino=190812 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075322.643:7590): avc: denied { search } for pid=44080 comm="prometheus" name="/" dev="overlay" ino=1968129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075480.971:8419): avc: denied { read } for pid=26353 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075258.738:7240): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.738:9030): avc: denied { read } for pid=35348 comm="node_exporter" name="stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075644.206:9187): avc: denied { search } for pid=51959 comm="safe_timer" name="/" dev="overlay" ino=1968225 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c631,c994 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.310:7677): avc: denied { write } for pid=46227 comm="msgr-worker-2" laddr=172.21.15.80 lport=6814 faddr=172.21.15.97 fport=43132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075420.960:8130): avc: denied { open } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075262.008:7294): avc: denied { search } for pid=42602 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c166,c597 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075578.738:8939): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.740:8370): avc: denied { read } for pid=35348 comm="node_exporter" name="file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075505.701:8610): avc: denied { signal } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075428.739:8197): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=43630 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075277.429:7368): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075647.454:9228): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.739:7091): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075268.737:7330): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.739:7696): avc: denied { search } for pid=35348 comm="node_exporter" name="fs" dev="proc" ino=171371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075400.115:7983): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075338.207:7669): avc: denied { read } for pid=26728 comm="msgr-worker-2" path="socket:[173175]" dev="sockfs" ino=173175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075341.824:7721): avc: denied { read } for pid=57451 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075260.495:7261): avc: denied { write } for pid=42602 comm="tp_osd_tp" path="pipe:[187564]" dev="pipefs" ino=187564 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075322.838:7610): avc: denied { read } for pid=26728 comm="msgr-worker-1" path="pipe:[151559]" dev="pipefs" ino=151559 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.739:8873): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075643.418:9171): avc: denied { search } for pid=26728 comm="safe_timer" name="diff" dev="sda1" ino=1442611 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075178.737:6846): avc: denied { search } for pid=35348 comm="node_exporter" name="diff" dev="sda1" ino=1968004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075479.503:8385): avc: denied { search } for pid=46227 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968207 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c79,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075645.655:9217): avc: denied { search } for pid=57451 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1968244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075668.049:9363): avc: denied { write } for pid=26330 comm="conmon" name="socket" dev="tmpfs" ino=16686 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075179.941:6895): avc: denied { write } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075482.644:8437): avc: denied { search } for pid=44080 comm="prometheus" name="/" dev="overlay" ino=1968129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.843:6764): avc: denied { read } for pid=26728 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075258.738:7244): avc: denied { search } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=166036 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075319.649:7550): avc: denied { search } for pid=26728 comm="safe_timer" name="etc" dev="sda1" ino=1442620 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075508.738:8626): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.739:9401): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.739:8355): avc: denied { read } for pid=35348 comm="node_exporter" name="sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075164.277:6789): avc: denied { lock } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075269.276:7355): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075479.277:8377): avc: denied { search } for pid=42010 comm="grafana-server" name="/" dev="overlay" ino=1968169 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075503.278:8575): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075561.554:8780): avc: denied { open } for pid=42602 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075586.067:8994): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075398.739:7931): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=167607 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075348.741:7790): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075512.644:8659): avc: denied { getattr } for pid=44080 comm="prometheus" laddr=172.21.15.80 lport=33804 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075151.976:6659): avc: denied { getattr } for pid=26728 comm="mgr-fin" path="/usr/share/zoneinfo/UTC" dev="overlay" ino=1311473 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075318.738:7514): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075268.739:7347): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075418.740:8116): avc: denied { read } for pid=35348 comm="node_exporter" name="mounts" dev="proc" ino=167607 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075242.645:7164): avc: denied { append } for pid=44080 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075686.278:9441): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075418.739:8113): avc: denied { search } for pid=35348 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075567.004:8862): avc: denied { getattr } for pid=26728 comm="mgr-fin" path="/usr/share/zoneinfo/UTC" dev="sda1" ino=1311473 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075151.587:6643): avc: denied { write } for pid=26353 comm="safe_timer" path="pipe:[126774]" dev="pipefs" ino=126774 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075327.018:7632): avc: denied { search } for pid=26330 comm="conmon" name="systemd" dev="tmpfs" ino=16404 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075318.738:7511): avc: denied { search } for pid=35348 comm="node_exporter" name="fs" dev="proc" ino=171371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.741:7702): avc: denied { search } for pid=35348 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616075238.738:7087): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075652.644:9290): avc: denied { create } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075317.838:7485): avc: denied { write } for pid=26728 comm="msgr-worker-1" laddr=172.21.15.80 lport=36710 faddr=172.21.15.80 fport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075582.643:8966): avc: denied { write } for pid=44080 comm="prometheus" path="socket:[385809]" dev="sockfs" ino=385809 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075254.278:7189): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/rbd-details.json" dev="sda1" ino=1444782 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075158.739:6745): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075418.224:8104): avc: denied { search } for pid=26728 comm="safe_timer" name="usr" dev="sda1" ino=786698 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075348.738:7776): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075486.345:8486): avc: denied { search } for pid=42602 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c166,c597 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.740:7110): avc: denied { search } for pid=35348 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616075503.213:8571): avc: denied { read } for pid=26728 comm="msgr-worker-2" path="socket:[173175]" dev="sockfs" ino=173175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075241.246:7151): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075272.643:7363): avc: denied { connect } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075261.023:7280): avc: denied { write } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075258.739:7246): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.740:9406): avc: denied { search } for pid=35348 comm="node_exporter" name="host" dev="sda1" ino=1968013 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075348.741:7790): avc: denied { read } for pid=35348 comm="node_exporter" name="file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075434.793:8215): avc: denied { getattr } for pid=44080 comm="prometheus" path="/prometheus/queries.active" dev="dm-4" ino=158 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075672.643:9415): avc: denied { search } for pid=44080 comm="prometheus" name="etc" dev="sda1" ino=1968146 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075592.644:9051): avc: denied { read } for pid=44080 comm="prometheus" path="socket:[396311]" dev="sockfs" ino=396311 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.738:6854): avc: denied { read } for pid=35348 comm="node_exporter" name="net" dev="sysfs" ino=21519 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075422.958:8175): avc: denied { read } for pid=57451 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075423.036:8176): avc: denied { search } for pid=42602 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c166,c597 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.739:6740): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075505.975:8613): avc: denied { search } for pid=26353 comm="safe_timer" name="mon.smithi080" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075323.277:7619): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/osds-overview.json" dev="overlay" ino=1444776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075508.742:8648): avc: denied { search } for pid=35348 comm="node_exporter" name="user" dev="tmpfs" ino=16726 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075650.020:9280): avc: denied { write } for pid=26330 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075337.748:7668): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=394794 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075398.739:7934): avc: denied { read } for pid=35348 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.740:8890): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075151.976:6659): avc: denied { getattr } for pid=26728 comm="mgr-fin" name="UTC" dev="sda1" ino=1311473 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075263.277:7316): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.738:6738): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173156 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075236.984:7051): avc: denied { getattr } for pid=26728 comm="mgr-fin" path="/usr/share/zoneinfo/UTC" dev="overlay" ino=1311473 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075404.277:8058): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075505.975:8612): avc: denied { dac_read_search } for pid=26353 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075318.739:7517): avc: denied { search } for pid=35348 comm="node_exporter" name="user" dev="tmpfs" ino=16726 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.738:9028): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075408.740:8090): avc: denied { read } for pid=35348 comm="node_exporter" name="file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.741:9272): avc: denied { search } for pid=35348 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616075418.224:8104): avc: denied { getattr } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075568.775:8902): avc: denied { getattr } for pid=26728 comm="mgr-fin" path="/usr/lib64/python3.6" dev="overlay" ino=922750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075262.030:7295): avc: denied { open } for pid=26353 comm="rstore_compact" path="/var/lib/ceph/mon/ceph-smithi080/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075434.793:8216): avc: denied { getattr } for pid=44080 comm="prometheus" path="/prometheus/wal" dev="dm-4" ino=8388752 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075408.739:8085): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.740:6752): avc: denied { read } for pid=35348 comm="node_exporter" name="cpufreq" dev="sysfs" ino=30758 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075152.807:6678): avc: denied { open } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075480.060:8391): avc: denied { search } for pid=26330 comm="conmon" name="systemd" dev="tmpfs" ino=16404 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075648.739:9254): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/net/arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075236.988:7055): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075328.740:7646): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075587.277:9011): avc: denied { lock } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075587.157:9008): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075588.739:9035): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075151.905:6654): avc: denied { sendto } for pid=26330 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075500.973:8553): avc: denied { search } for pid=26353 comm="safe_timer" name="var" dev="sda1" ino=1442603 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075151.905:6653): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075168.739:6796): avc: denied { read } for pid=35348 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075343.044:7752): avc: denied { use } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075325.687:7627): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075337.034:7658): avc: denied { write } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075408.739:8089): avc: denied { search } for pid=35348 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616075421.963:8148): avc: denied { write } for pid=26330 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075418.740:8115): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075578.737:8935): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.739:6749): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/devices/system/cpu/cpu0/topology/physical_package_id" dev="sysfs" ino=28908 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.039:8867): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075321.460:7576): avc: denied { search } for pid=51959 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968225 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c631,c994 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075408.738:8076): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.739:7094): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075681.602:9432): avc: denied { read } for pid=26728 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075152.278:6666): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.521:7907): avc: denied { write } for pid=42602 comm="msgr-worker-0" laddr=172.21.15.80 lport=6808 faddr=172.21.15.97 fport=56436 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.739:7685): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.739:7786): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/class/net/eno1" dev="sysfs" ino=34869 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075667.539:9352): avc: denied { read } for pid=26728 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075260.715:7268): avc: denied { getattr } for pid=88987 comm="pgrep" path="/proc/26353" dev="proc" ino=152605 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.738:8342): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="overlay" ino=1968004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075563.036:8813): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075500.766:8552): avc: denied { open } for pid=99158 comm="pgrep" path="/proc/26353/status" dev="proc" ino=152649 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075508.738:8625): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="overlay" ino=1968004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075176.512:6841): avc: denied { search } for pid=57451 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075479.278:8382): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075236.405:7050): avc: denied { open } for pid=57451 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075258.739:7249): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075582.061:8958): avc: denied { sendto } for pid=26330 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075402.643:8011): avc: denied { search } for pid=44080 comm="prometheus" name="etc" dev="sda1" ino=1968146 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075667.311:9344): avc: denied { write } for pid=26353 comm="msgr-worker-1" laddr=172.21.15.80 lport=3300 faddr=172.21.15.97 fport=47416 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075248.739:7178): avc: denied { search } for pid=35348 comm="node_exporter" name="1" dev="proc" ino=167025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075236.278:7046): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075182.643:6912): avc: denied { create } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075319.003:7524): avc: denied { open } for pid=26330 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075343.784:7762): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.739:7778): avc: denied { search } for pid=35348 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.740:6751): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.738:6737): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.738:7775): avc: denied { search } for pid=35348 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075508.741:8644): avc: denied { search } for pid=35348 comm="node_exporter" name="fs" dev="proc" ino=171371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075422.248:8156): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075402.231:8009): avc: denied { search } for pid=42602 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c166,c597 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075569.277:8906): avc: denied { search } for pid=42010 comm="grafana-server" name="/" dev="overlay" ino=1968169 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.738:9027): avc: denied { read } for pid=35348 comm="node_exporter" name="file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075563.278:8833): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075668.737:9381): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.738:9248): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075672.643:9414): avc: denied { signal } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.739:7926): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075501.947:8557): avc: denied { read } for pid=42602 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075343.044:7755): avc: denied { write } for pid=26330 comm="conmon" name="socket" dev="tmpfs" ino=16686 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075645.684:9218): avc: denied { read } for pid=57451 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075236.987:7052): avc: denied { write } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075662.231:9302): avc: denied { read } for pid=51959 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075318.738:7509): avc: denied { getattr } for pid=35348 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075418.212:8103): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075485.972:8484): avc: denied { read } for pid=26353 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075152.644:6676): avc: denied { read } for pid=44080 comm="prometheus" path="socket:[287651]" dev="sockfs" ino=287651 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.894:7949): avc: denied { read } for pid=57451 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.741:6866): avc: denied { getattr } for pid=35348 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075504.742:8606): avc: denied { open } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075508.741:8644): avc: denied { read } for pid=35348 comm="node_exporter" name="file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075561.492:8778): avc: denied { write } for pid=57451 comm="tp_osd_tp" path="pipe:[227464]" dev="pipefs" ino=227464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075664.044:9335): avc: denied { search } for pid=26330 comm="conmon" name="journal" dev="tmpfs" ino=16682 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075421.962:8144): avc: denied { write } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.696:8335): avc: denied { append } for pid=42602 comm="log" path="/var/log/ceph/ceph-osd.0.log" dev="sda1" ino=395891 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.739:9263): avc: denied { read } for pid=35348 comm="node_exporter" name="entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075650.278:9286): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/cephfs-overview.json" dev="sda1" ino=1444772 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075650.278:9284): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075667.539:9351): avc: denied { search } for pid=26728 comm="safe_timer" name="/" dev="overlay" ino=1442611 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.737:9018): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075337.748:7668): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075666.004:9341): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.940:6881): avc: denied { search } for pid=26728 comm="safe_timer" name="usr" dev="sda1" ino=786698 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075344.277:7763): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.738:7773): avc: denied { search } for pid=35348 comm="node_exporter" name="7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075260.473:7257): avc: denied { append } for pid=46227 comm="log" path="/var/log/ceph/ceph-osd.1.log" dev="sda1" ino=395892 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.740:9040): avc: denied { search } for pid=35348 comm="node_exporter" name="host" dev="sda1" ino=1968013 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075398.749:7946): avc: denied { append } for pid=44080 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075319.002:7522): avc: denied { use } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075505.975:8613): avc: denied { read } for pid=26353 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.738:7087): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="overlay" ino=1968004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075428.738:8188): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173156 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075649.017:9276): avc: denied { write } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075484.086:8465): avc: denied { read } for pid=51959 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.742:6757): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.940:6881): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075260.930:7277): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.739:7928): avc: denied { search } for pid=35348 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.741:7113): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.738:9384): avc: denied { read } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075250.927:7187): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075643.148:9164): avc: denied { write } for pid=57451 comm="tp_osd_tp" path="pipe:[227464]" dev="pipefs" ino=227464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075268.738:7335): avc: denied { search } for pid=35348 comm="node_exporter" name="1" dev="proc" ino=167025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075585.989:8985): avc: denied { read } for pid=26353 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075236.277:7042): avc: denied { search } for pid=42010 comm="grafana-server" name="diff" dev="sda1" ino=1968169 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075268.739:7341): avc: denied { read } for pid=35348 comm="node_exporter" name="file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075584.276:8973): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.739:9263): avc: denied { search } for pid=35348 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075342.644:7741): avc: denied { getattr } for pid=44080 comm="prometheus" path="/etc/hosts" dev="tmpfs" ino=190812 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075667.551:9354): avc: denied { search } for pid=26728 comm="safe_timer" name="usr" dev="sda1" ino=786698 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075258.739:7250): avc: denied { search } for pid=35348 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.049:9363): avc: denied { sendto } for pid=26330 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075341.991:7724): avc: denied { read } for pid=26728 comm="mgr-fin" name="localtime" dev="overlay" ino=394776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075317.991:7489): avc: denied { read } for pid=42602 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075422.248:8156): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075562.644:8799): avc: denied { search } for pid=44080 comm="prometheus" name="/" dev="overlay" ino=1968129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075344.278:7766): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075503.288:8578): avc: denied { write } for pid=51959 comm="osd_srv_heartbt" path="pipe:[207623]" dev="pipefs" ino=207623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075318.737:7494): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="overlay" ino=1968004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.738:7921): avc: denied { read } for pid=35348 comm="node_exporter" name="stat" dev="proc" ino=4026532033 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075241.246:7151): avc: denied { search } for pid=26728 comm="safe_timer" name="etc" dev="sda1" ino=1442620 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075664.044:9332): avc: denied { use } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075440.754:8217): avc: denied { getattr } for pid=95869 comm="pgrep" path="/proc/26330" dev="proc" ino=132508 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075262.032:7302): avc: denied { remove_name } for pid=26353 comm="rocksdb:high0" name="000015.log" dev="dm-4" ino=137 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.739:8350): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075428.740:8204): avc: denied { search } for pid=35348 comm="node_exporter" name="kernel" dev="proc" ino=167394 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075498.737:8528): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075500.974:8556): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.742:7795): avc: denied { search } for pid=35348 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075255.943:7215): avc: denied { unlink } for pid=26353 comm="rocksdb:high0" name="000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075337.460:7665): avc: denied { open } for pid=51959 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075570.987:8917): avc: denied { search } for pid=26353 comm="safe_timer" name="mon.smithi080" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.739:8887): avc: denied { read } for pid=35348 comm="node_exporter" name="eno1" dev="sysfs" ino=34869 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075480.608:8399): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.521:7905): avc: denied { read } for pid=46227 comm="msgr-worker-1" path="socket:[243769]" dev="sockfs" ino=243769 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075644.010:9182): avc: denied { write } for pid=26330 comm="conmon" name="socket" dev="tmpfs" ino=16686 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075503.946:8591): avc: denied { read } for pid=42602 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075179.277:6887): avc: denied { lock } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075663.516:9329): avc: denied { search } for pid=26728 comm="safe_timer" name="libpod-7157ed55dd2bb6f82af892cdc2cadcbaa2c5f5b0b22e740b7b8d1bea0b6c44b3.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075179.941:6898): avc: denied { sendto } for pid=26330 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075668.049:9362): avc: denied { open } for pid=26330 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075398.741:7944): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075151.905:6653): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075504.021:8597): avc: denied { search } for pid=26330 comm="conmon" name="systemd" dev="tmpfs" ino=16404 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075425.961:8184): avc: denied { search } for pid=26353 comm="safe_timer" name="mon.smithi080" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.739:7780): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075318.759:7521): avc: denied { append } for pid=44080 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075255.494:7200): avc: denied { write } for pid=57451 comm="tp_osd_tp" path="pipe:[227463]" dev="pipefs" ino=227463 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075179.201:6884): avc: denied { open } for pid=51959 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075681.602:9432): avc: denied { open } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075328.742:7650): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075671.004:9412): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075428.739:8192): avc: denied { search } for pid=35348 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075420.960:8130): avc: denied { search } for pid=26353 comm="safe_timer" name="mon.smithi080" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075421.963:8147): avc: denied { open } for pid=26330 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075440.754:8220): avc: denied { search } for pid=95869 comm="pgrep" name="26353" dev="proc" ino=152605 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075562.031:8787): avc: denied { read } for pid=26330 comm="conmon" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075512.644:8660): avc: denied { write } for pid=44080 comm="prometheus" path="socket:[376242]" dev="sockfs" ino=376242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075587.157:9008): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075404.040:8043): avc: denied { use } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075173.975:6822): avc: denied { read } for pid=42602 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.278:7674): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075408.738:8083): avc: denied { search } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=166036 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075508.742:8645): avc: denied { read } for pid=35348 comm="node_exporter" name="mounts" dev="proc" ino=167607 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075320.727:7564): avc: denied { search } for pid=92179 comm="pgrep" name="26353" dev="proc" ino=152605 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.738:6856): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/class/net/eno1" dev="sysfs" ino=34869 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075261.332:7289): avc: denied { open } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.738:9389): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075562.143:8795): avc: denied { search } for pid=51959 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075428.740:8204): avc: denied { read } for pid=35348 comm="node_exporter" name="entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.739:8367): avc: denied { search } for pid=35348 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075342.014:7728): avc: denied { read } for pid=26353 comm="msgr-worker-0" path="socket:[280030]" dev="sockfs" ino=280030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.737:6846): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.276:9369): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075179.277:6888): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075587.005:9004): avc: denied { search } for pid=26728 comm="mgr-fin" name="usr" dev="sda1" ino=786698 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075236.278:7049): avc: denied { read } for pid=42010 comm="grafana-server" name="pool-detail.json" dev="sda1" ino=1444777 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075175.709:6834): avc: denied { append } for pid=44080 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075152.644:6669): avc: denied { search } for pid=44080 comm="prometheus" name="etc" dev="sda1" ino=1968146 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075592.644:9048): avc: denied { connect } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075498.738:8533): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=30846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075672.643:9422): avc: denied { getattr } for pid=44080 comm="prometheus" laddr=172.21.15.80 lport=48620 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075502.644:8567): avc: denied { connect } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.739:8366): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075155.910:6717): avc: denied { use } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075562.644:8807): avc: denied { write } for pid=44080 comm="prometheus" path="socket:[382863]" dev="sockfs" ino=382863 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075272.643:7365): avc: denied { write } for pid=44080 comm="prometheus" path="socket:[324207]" dev="sockfs" ino=324207 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.739:7100): avc: denied { read } for pid=35348 comm="node_exporter" name="stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075258.739:7247): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.740:8370): avc: denied { search } for pid=35348 comm="node_exporter" name="fs" dev="proc" ino=171371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075267.367:7325): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075586.067:8993): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075563.278:8835): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075587.005:9004): avc: denied { search } for pid=26728 comm="mgr-fin" name="etc" dev="sda1" ino=1442620 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075255.484:7195): avc: denied { read } for pid=42602 comm="msgr-worker-1" path="socket:[244290]" dev="sockfs" ino=244290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.741:8893): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/diskstats" dev="proc" ino=4026532083 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075428.742:8208): avc: denied { getattr } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16396 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075321.662:7577): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075402.643:8011): avc: denied { search } for pid=44080 comm="prometheus" name="/" dev="overlay" ino=1968129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075318.739:7518): avc: denied { search } for pid=35348 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.737:9380): avc: denied { read } for pid=35348 comm="node_exporter" name="stat" dev="proc" ino=173156 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075342.528:7737): avc: denied { open } for pid=51959 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075405.824:8062): avc: denied { search } for pid=57451 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c179,c314 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075503.278:8577): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/rbd-details.json" dev="overlay" ino=1444782 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075562.031:8789): avc: denied { search } for pid=26330 comm="conmon" name="systemd" dev="tmpfs" ino=16404 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075180.906:6903): avc: denied { search } for pid=26353 comm="safe_timer" name="/" dev="overlay" ino=1442592 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075255.494:7201): avc: denied { write } for pid=42602 comm="tp_osd_tp" path="pipe:[187564]" dev="pipefs" ino=187564 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075587.157:9008): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075320.941:7569): avc: denied { open } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.739:7685): avc: denied { read } for pid=35348 comm="node_exporter" name="entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075496.705:8513): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=394794 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075152.278:6663): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075588.737:9017): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075318.738:7500): avc: denied { read } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075248.739:7178): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=167607 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075320.276:7554): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075402.643:8012): avc: denied { create } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075569.278:8911): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075237.221:7061): avc: denied { search } for pid=26728 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075651.002:9288): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075494.792:8509): avc: denied { read } for pid=44080 comm="prometheus" name="data" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075569.277:8906): avc: denied { search } for pid=42010 comm="grafana-server" name="etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075398.739:7923): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=21498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075488.738:8498): avc: denied { read } for pid=35348 comm="node_exporter" name="file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075480.972:8421): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075328.739:7643): avc: denied { search } for pid=35348 comm="node_exporter" name="fs" dev="proc" ino=171371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075500.277:8548): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="sda1" ino=1444771 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075508.739:8635): avc: denied { read } for pid=35348 comm="node_exporter" name="cpufreq" dev="sysfs" ino=30758 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075500.277:8548): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-cluster.json" dev="sda1" ino=1444771 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075480.971:8419): avc: denied { search } for pid=26353 comm="safe_timer" name="mon.smithi080" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075152.278:6666): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075569.278:8909): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075568.742:8896): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075322.838:7609): avc: denied { write } for pid=26728 comm="safe_timer" path="pipe:[151559]" dev="pipefs" ino=151559 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.894:7949): avc: denied { open } for pid=57451 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075255.930:7210): avc: denied { create } for pid=26353 comm="rstore_compact" name="000015.log" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075162.644:6786): avc: denied { write } for pid=44080 comm="prometheus" path="socket:[294814]" dev="sockfs" ino=294814 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.739:7697): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075501.999:8558): avc: denied { read } for pid=26728 comm="mgr-fin" name="localtime" dev="sda1" ino=394776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075502.644:8560): avc: denied { signal } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075239.233:7123): avc: denied { search } for pid=26728 comm="safe_timer" name="/" dev="overlay" ino=1442611 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075428.742:8212): avc: denied { search } for pid=35348 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616075668.956:9408): avc: denied { search } for pid=57451 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c179,c314 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075342.528:7737): avc: denied { search } for pid=51959 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075669.069:9409): avc: denied { write } for pid=42602 comm="bstore_kv_sync" path="/dev/dm-3" dev="devtmpfs" ino=107951 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.739:9401): avc: denied { getattr } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16396 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075171.930:6804): avc: denied { write } for pid=26353 comm="msgr-worker-2" laddr=172.21.15.80 lport=3300 faddr=172.21.15.97 fport=47434 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075152.644:6670): avc: denied { create } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075667.551:9354): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=394794 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075643.418:9172): avc: denied { search } for pid=26728 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075261.344:7291): avc: denied { search } for pid=26728 comm="safe_timer" name="etc" dev="sda1" ino=1442620 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075343.044:7755): avc: denied { search } for pid=26330 comm="conmon" name="systemd" dev="tmpfs" ino=16404 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075646.001:9220): avc: denied { dac_read_search } for pid=26353 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075587.145:9005): avc: denied { read } for pid=26728 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075345.946:7770): avc: denied { search } for pid=26353 comm="safe_timer" name="var" dev="sda1" ino=1442603 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075342.528:7736): avc: denied { read } for pid=51959 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075417.059:8096): avc: denied { append } for pid=26353 comm="log" path="/var/log/ceph/ceph-mon.smithi080.log" dev="sda1" ino=395863 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075151.976:6659): avc: denied { search } for pid=26728 comm="mgr-fin" name="usr" dev="sda1" ino=786698 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075248.738:7168): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.739:8362): avc: denied { search } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=166036 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075508.742:8645): avc: denied { search } for pid=35348 comm="node_exporter" name="1" dev="proc" ino=167025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075578.740:8942): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.277:9374): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.696:8331): avc: denied { write } for pid=78525 comm="ceph_timer" path="pipe:[283728]" dev="pipefs" ino=283728 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075262.644:7308): avc: denied { connect } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075567.048:8864): avc: denied { open } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075587.277:9013): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075648.738:9247): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="overlay" ino=1968004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075582.643:8964): avc: denied { connect } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.739:8875): avc: denied { read } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075562.645:8809): avc: denied { append } for pid=44080 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075482.620:8434): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075254.788:7190): avc: denied { read } for pid=44080 comm="prometheus" name="data" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.739:8360): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=30846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.739:9260): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/hwmon/hwmon0/uevent" dev="sysfs" ino=35065 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.738:6854): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075422.645:8174): avc: denied { append } for pid=44080 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.738:8342): avc: denied { search } for pid=35348 comm="node_exporter" name="diff" dev="sda1" ino=1968004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075671.004:9410): avc: denied { search } for pid=26353 comm="safe_timer" name="/" dev="overlay" ino=1442592 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075175.936:6836): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075668.738:9392): avc: denied { search } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=166036 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075248.739:7177): avc: denied { search } for pid=35348 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.739:8357): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=167607 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075158.739:6740): avc: denied { search } for pid=35348 comm="node_exporter" name="kernel" dev="proc" ino=167394 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075248.739:7175): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/fs/xfs/stats/stats" dev="sysfs" ino=45563 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075180.906:6905): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075428.739:8199): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075340.138:7712): avc: denied { search } for pid=46227 comm="safe_timer" name="/" dev="overlay" ino=1968207 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c79,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075586.067:8994): avc: denied { search } for pid=26330 comm="conmon" name="journal" dev="tmpfs" ino=16682 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075152.278:6665): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075565.701:8840): avc: denied { signal } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075328.739:7638): avc: denied { read } for pid=35348 comm="node_exporter" name="hwmon" dev="sysfs" ino=21483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075322.643:7594): avc: denied { getattr } for pid=44080 comm="prometheus" laddr=172.21.15.80 lport=60774 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075503.971:8592): avc: denied { read } for pid=42602 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075268.739:7339): avc: denied { search } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=166036 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075248.738:7170): avc: denied { read } for pid=35348 comm="node_exporter" name="stat" dev="proc" ino=173156 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075154.831:6707): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=394794 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.739:6740): avc: denied { read } for pid=35348 comm="node_exporter" name="entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.940:6881): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=394794 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075338.278:7675): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075503.636:8584): avc: denied { write } for pid=26353 comm="safe_timer" path="pipe:[126774]" dev="pipefs" ino=126774 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075504.754:8609): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075262.645:7312): avc: denied { append } for pid=44080 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.739:7932): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075260.849:7272): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075318.738:7505): avc: denied { search } for pid=35348 comm="node_exporter" name="1" dev="proc" ino=167025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075339.748:7711): avc: denied { search } for pid=26728 comm="safe_timer" name="libpod-7157ed55dd2bb6f82af892cdc2cadcbaa2c5f5b0b22e740b7b8d1bea0b6c44b3.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075480.596:8396): avc: denied { search } for pid=26728 comm="safe_timer" name="/" dev="overlay" ino=1442611 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075650.278:9286): avc: denied { read } for pid=42010 comm="grafana-server" name="cephfs-overview.json" dev="sda1" ino=1444772 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075482.644:8439): avc: denied { create } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.737:9378): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075488.740:8504): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.940:6879): avc: denied { search } for pid=26728 comm="safe_timer" name="libpod-7157ed55dd2bb6f82af892cdc2cadcbaa2c5f5b0b22e740b7b8d1bea0b6c44b3.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075401.277:8001): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/pool-overview.json" dev="overlay" ino=1444778 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075419.277:8123): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075248.738:7170): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173156 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075239.206:7122): avc: denied { search } for pid=57451 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1968244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075238.739:7091): avc: denied { read } for pid=35348 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075236.405:7050): avc: denied { read } for pid=57451 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075662.278:9306): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075261.332:7289): avc: denied { read } for pid=26728 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075261.344:7291): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=394794 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.739:9264): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075257.331:7235): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075662.644:9318): avc: denied { search } for pid=44080 comm="prometheus" name="/" dev="overlay" ino=1968129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.740:9036): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075587.276:9009): avc: denied { search } for pid=42010 comm="grafana-server" name="etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075338.310:7679): avc: denied { write } for pid=51959 comm="msgr-worker-1" laddr=172.21.15.80 lport=6824 faddr=172.21.15.97 fport=37394 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.739:7686): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/fs/xfs/stats/stats" dev="sysfs" ino=45563 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.740:8371): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075498.705:8521): avc: denied { search } for pid=26728 comm="safe_timer" name="/" dev="overlay" ino=1442611 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075488.737:8488): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="overlay" ino=1968004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075480.971:8418): avc: denied { dac_read_search } for pid=26353 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075644.277:9188): avc: denied { search } for pid=42010 comm="grafana-server" name="etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075424.196:8181): avc: denied { search } for pid=46227 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968207 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c79,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075320.727:7563): avc: denied { getattr } for pid=92179 comm="pgrep" path="/proc/26353" dev="proc" ino=152605 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075569.278:8908): avc: denied { lock } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075155.910:6718): avc: denied { read } for pid=26330 comm="conmon" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075258.740:7252): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075162.644:6783): avc: denied { setopt } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075500.011:8541): avc: denied { open } for pid=26330 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075418.224:8104): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075504.754:8608): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.521:7906): avc: denied { read } for pid=51959 comm="msgr-worker-0" path="socket:[239998]" dev="sockfs" ino=239998 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.738:8872): avc: denied { search } for pid=35348 comm="node_exporter" name="7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.738:9024): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/net/arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075428.739:8192): avc: denied { search } for pid=35348 comm="node_exporter" name="fs" dev="proc" ino=171371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075650.020:9279): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075317.914:7487): avc: denied { read } for pid=57451 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075262.644:7304): avc: denied { search } for pid=44080 comm="prometheus" name="/" dev="overlay" ino=1968129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.738:9027): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075343.044:7755): avc: denied { write } for pid=26330 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075401.277:7999): avc: denied { read open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075680.806:9429): avc: denied { open } for pid=105979 comm="pgrep" path="/proc/26330/status" dev="proc" ino=132512 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075158.739:6740): avc: denied { search } for pid=35348 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075320.277:7559): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/cephfs-overview.json" dev="overlay" ino=1444772 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.341:7681): avc: denied { read } for pid=26353 comm="msgr-worker-2" path="pipe:[126774]" dev="pipefs" ino=126774 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.739:9259): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075488.737:8488): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075240.994:7144): avc: denied { search } for pid=26330 comm="conmon" name="journal" dev="tmpfs" ino=16682 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075260.715:7267): avc: denied { read } for pid=88987 comm="pgrep" name="status" dev="proc" ino=132512 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075646.001:9220): avc: denied { search } for pid=26353 comm="safe_timer" name="/" dev="overlay" ino=1442592 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075342.429:7733): avc: denied { search } for pid=34534 comm="ceph-crash" name="var" dev="sda1" ino=1444638 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c85,c406 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075319.649:7550): avc: denied { getattr } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075662.038:9300): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075644.278:9193): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075255.930:7211): avc: denied { getattr } for pid=26353 comm="rstore_compact" path="/sys" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.738:9396): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075671.004:9410): avc: denied { dac_read_search } for pid=26353 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075408.737:8072): avc: denied { search } for pid=35348 comm="node_exporter" name="7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.740:6750): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075272.643:7364): avc: denied { getattr } for pid=44080 comm="prometheus" laddr=172.21.15.80 lport=33644 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075505.975:8612): avc: denied { getattr } for pid=26353 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075321.005:7573): avc: denied { open } for pid=26330 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075508.739:8636): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/net/dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075440.754:8218): avc: denied { search } for pid=95869 comm="pgrep" name="26330" dev="proc" ino=132508 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075478.739:8362): avc: denied { search } for pid=35348 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075686.278:9441): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075643.148:9165): avc: denied { write } for pid=42602 comm="tp_osd_tp" path="pipe:[187564]" dev="pipefs" ino=187564 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075421.995:8153): avc: denied { search } for pid=26728 comm="mgr-fin" name="etc" dev="sda1" ino=1442620 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075562.143:8795): avc: denied { open } for pid=51959 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.738:8872): avc: denied { read } for pid=35348 comm="node_exporter" name="stat" dev="proc" ino=173156 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075652.644:9293): avc: denied { connect } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075318.738:7512): avc: denied { read } for pid=35348 comm="node_exporter" name="entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075584.277:8975): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.740:9039): avc: denied { search } for pid=35348 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616075318.738:7505): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=167607 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075268.739:7348): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075322.007:7580): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075588.738:9022): avc: denied { read } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075643.418:9172): avc: denied { search } for pid=26728 comm="safe_timer" name="libpod-7157ed55dd2bb6f82af892cdc2cadcbaa2c5f5b0b22e740b7b8d1bea0b6c44b3.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075344.278:7768): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075323.662:7621): avc: denied { search } for pid=26728 comm="safe_timer" name="libpod-7157ed55dd2bb6f82af892cdc2cadcbaa2c5f5b0b22e740b7b8d1bea0b6c44b3.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075428.739:8195): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.739:9397): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075171.931:6805): avc: denied { read } for pid=26353 comm="msgr-worker-2" path="socket:[173169]" dev="sockfs" ino=173169 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075572.644:8925): avc: denied { getattr } for pid=44080 comm="prometheus" laddr=172.21.15.80 lport=37238 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075428.739:8193): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/net/arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075562.031:8788): avc: denied { write } for pid=26330 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075152.819:6681): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075239.464:7128): avc: denied { open } for pid=51959 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075663.528:9331): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075319.003:7525): avc: denied { sendto } for pid=26330 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075500.766:8552): avc: denied { search } for pid=99158 comm="pgrep" name="26353" dev="proc" ino=152605 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075151.905:6652): avc: denied { read } for pid=26330 comm="conmon" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075158.742:6761): avc: denied { search } for pid=35348 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616075418.749:8122): avc: denied { append } for pid=44080 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.738:8344): avc: denied { read } for pid=35348 comm="node_exporter" name="stat" dev="proc" ino=173156 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.740:9037): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075644.010:9181): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075155.903:6715): avc: denied { read } for pid=26353 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075485.278:8480): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075492.643:8508): avc: denied { search } for pid=44080 comm="prometheus" name="etc" dev="sda1" ino=1968146 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075652.644:9295): avc: denied { write } for pid=44080 comm="prometheus" path="socket:[407685]" dev="sockfs" ino=407685 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075179.201:6884): avc: denied { read } for pid=51959 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075403.277:8032): avc: denied { search } for pid=51959 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075563.036:8813): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.739:7929): avc: denied { search } for pid=35348 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075257.278:7230): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075425.961:8184): avc: denied { read } for pid=26353 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075240.926:7131): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075320.941:7569): avc: denied { read } for pid=26353 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075344.277:7763): avc: denied { search } for pid=42010 comm="grafana-server" name="etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075478.739:8366): avc: denied { search } for pid=35348 comm="node_exporter" name="user" dev="tmpfs" ino=16726 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075506.278:8621): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075563.277:8830): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075268.739:7341): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.739:8876): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075328.739:7640): avc: denied { read } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075644.010:9182): avc: denied { sendto } for pid=26330 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075319.649:7551): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075342.644:7748): avc: denied { read } for pid=44080 comm="prometheus" path="socket:[340442]" dev="sockfs" ino=340442 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075485.278:8481): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075400.033:7955): avc: denied { write } for pid=26330 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075482.644:8444): avc: denied { read } for pid=44080 comm="prometheus" path="socket:[367870]" dev="sockfs" ino=367870 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075563.024:8810): avc: denied { read } for pid=26728 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075161.278:6777): avc: denied { read open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.739:6741): avc: denied { search } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=166036 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075578.738:8937): avc: denied { read } for pid=35348 comm="node_exporter" name="cpufreq" dev="sysfs" ino=30758 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075260.473:7259): avc: denied { search } for pid=46227 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075277.429:7369): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075237.221:7062): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075404.393:8060): avc: denied { search } for pid=46227 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968207 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c79,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075160.856:6772): avc: denied { search } for pid=26728 comm="safe_timer" name="usr" dev="sda1" ino=786698 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075267.281:7322): avc: denied { write } for pid=26705 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075440.754:8219): avc: denied { getattr } for pid=95869 comm="pgrep" path="/proc/26353" dev="proc" ino=152605 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075421.995:8153): avc: denied { search } for pid=26728 comm="mgr-fin" name="/" dev="overlay" ino=1442611 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075480.608:8399): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075400.848:7990): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075402.643:8014): avc: denied { setopt } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075344.278:7767): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075508.738:8625): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075667.539:9352): avc: denied { open } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075258.739:7248): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.739:7693): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075421.995:8153): avc: denied { search } for pid=26728 comm="mgr-fin" name="usr" dev="sda1" ino=786698 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075588.737:9020): avc: denied { read } for pid=35348 comm="node_exporter" name="fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.739:8877): avc: denied { search } for pid=35348 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075262.030:7300): avc: denied { getattr } for pid=26353 comm="rstore_compact" path="/sys/devices/virtual/block/dm-4/queue/logical_block_size" dev="sysfs" ino=45217 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075488.740:8501): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075419.278:8125): avc: denied { read open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.739:9399): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075260.849:7270): avc: denied { lock } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075480.971:8418): avc: denied { search } for pid=26353 comm="safe_timer" name="/" dev="overlay" ino=1442592 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.741:7699): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075155.903:6714): avc: denied { dac_read_search } for pid=26353 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075255.319:7193): avc: denied { search } for pid=26728 comm="safe_timer" name="usr" dev="sda1" ino=786698 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075342.644:7744): avc: denied { setopt } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075562.644:8804): avc: denied { connect } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.738:6736): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.049:9361): avc: denied { read } for pid=26330 comm="conmon" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075323.277:7617): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075422.236:8154): avc: denied { search } for pid=26728 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075337.035:7659): avc: denied { open } for pid=26330 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075478.739:8356): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075505.975:8612): avc: denied { search } for pid=26353 comm="safe_timer" name="/" dev="overlay" ino=1442592 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075498.717:8524): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.739:9251): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075503.277:8572): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075482.644:8441): avc: denied { connect } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.740:6753): avc: denied { search } for pid=35348 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075261.023:7283): avc: denied { search } for pid=26330 comm="conmon" name="journal" dev="tmpfs" ino=16682 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075428.742:8209): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075241.233:7149): avc: denied { read } for pid=26728 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075337.460:7665): avc: denied { search } for pid=51959 comm="safe_timer" name="/" dev="overlay" ino=1968225 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c631,c994 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075173.934:6817): avc: denied { write } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075428.739:8190): avc: denied { read } for pid=35348 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075262.644:7309): avc: denied { getattr } for pid=44080 comm="prometheus" laddr=172.21.15.80 lport=33433 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075242.644:7158): avc: denied { create } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075643.418:9172): avc: denied { read } for pid=26728 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075428.739:8189): avc: denied { read } for pid=35348 comm="node_exporter" name="fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075485.972:8484): avc: denied { open } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075399.314:7951): avc: denied { search } for pid=51959 comm="safe_timer" name="/" dev="overlay" ino=1968225 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c631,c994 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.739:8882): avc: denied { read } for pid=35348 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075160.904:6773): avc: denied { open } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075344.278:7768): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.738:9391): avc: denied { read } for pid=35348 comm="node_exporter" name="hwmon0" dev="sysfs" ino=35068 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075647.010:9227): avc: denied { search } for pid=26728 comm="mgr-fin" name="/" dev="overlay" ino=1442611 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075422.644:8165): avc: denied { search } for pid=44080 comm="prometheus" name="/" dev="overlay" ino=1968129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.738:7683): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075257.278:7231): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075508.740:8643): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=43630 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075492.643:8508): avc: denied { search } for pid=44080 comm="prometheus" name="/" dev="overlay" ino=1968129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075418.212:8102): avc: denied { open } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075152.277:6662): avc: denied { search } for pid=42010 comm="grafana-server" name="/" dev="overlay" ino=1968169 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075651.002:9287): avc: denied { search } for pid=26353 comm="safe_timer" name="/" dev="overlay" ino=1442592 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075272.643:7362): avc: denied { connect } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075569.278:8911): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075586.013:8990): avc: denied { open } for pid=51959 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075643.430:9174): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=394794 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075260.473:7259): avc: denied { open } for pid=46227 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.741:7940): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075512.644:8654): avc: denied { create } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075341.991:7724): avc: denied { read } for pid=26728 comm="mgr-fin" name="localtime" dev="sda1" ino=394776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075484.086:8465): avc: denied { open } for pid=51959 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075260.473:7258): avc: denied { search } for pid=46227 comm="safe_timer" name="diff" dev="sda1" ino=1968207 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075178.741:6870): avc: denied { search } for pid=35348 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075406.151:8068): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075260.715:7269): avc: denied { search } for pid=88987 comm="pgrep" name="26353" dev="proc" ino=152605 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.741:6867): avc: denied { getattr } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16396 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075649.454:9277): avc: denied { read } for pid=26728 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075585.815:8981): avc: denied { read } for pid=46227 comm="msgr-worker-2" path="pipe:[189374]" dev="pipefs" ino=189374 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075151.587:6645): avc: denied { write } for pid=26353 comm="msgr-worker-2" laddr=172.21.15.80 lport=3300 faddr=172.21.15.97 fport=47434 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075260.849:7273): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.272:7083): avc: denied { search } for pid=46227 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968207 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c79,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.743:8897): avc: denied { search } for pid=35348 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.739:7695): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075508.739:8638): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=30846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075342.644:7747): avc: denied { write } for pid=44080 comm="prometheus" path="socket:[343112]" dev="sockfs" ino=343112 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075242.997:7165): avc: denied { write } for pid=26330 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075272.643:7358): avc: denied { create } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075268.739:7340): avc: denied { getattr } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16396 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075512.644:8658): avc: denied { connect } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075425.961:8185): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075340.945:7713): avc: denied { open } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075173.975:6822): avc: denied { open } for pid=42602 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.739:8881): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=167607 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075585.815:8978): avc: denied { read } for pid=46227 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075645.684:9218): avc: denied { open } for pid=57451 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075484.114:8468): avc: denied { read } for pid=42602 comm="msgr-worker-2" path="socket:[245136]" dev="sockfs" ino=245136 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075485.278:8481): avc: denied { read open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075498.737:8530): avc: denied { search } for pid=35348 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075319.649:7550): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=394794 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075344.278:7768): avc: denied { read open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075562.644:8801): avc: denied { create } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075321.662:7577): avc: denied { getattr } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075323.012:7611): avc: denied { use } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075662.231:9302): avc: denied { open } for pid=51959 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075268.740:7350): avc: denied { search } for pid=35348 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075319.649:7550): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075402.644:8019): avc: denied { append } for pid=44080 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075498.737:8529): avc: denied { read } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.739:9397): avc: denied { search } for pid=35348 comm="node_exporter" name="kernel" dev="proc" ino=167394 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075172.644:6811): avc: denied { search } for pid=44080 comm="prometheus" name="etc" dev="sda1" ino=1968146 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075319.002:7523): avc: denied { read } for pid=26330 comm="conmon" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075318.738:7503): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/fs/xfs/stats/stats" dev="sysfs" ino=45563 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.621:7916): avc: denied { read } for pid=26353 comm="msgr-worker-2" path="pipe:[126774]" dev="pipefs" ino=126774 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075667.311:9343): avc: denied { read } for pid=26353 comm="msgr-worker-1" path="socket:[167588]" dev="sockfs" ino=167588 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075322.643:7590): avc: denied { search } for pid=44080 comm="prometheus" name="etc" dev="sda1" ino=1968146 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075173.934:6819): avc: denied { search } for pid=26330 comm="conmon" name="journal" dev="tmpfs" ino=16682 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075648.739:9250): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075403.306:8039): avc: denied { write } for pid=51959 comm="msgr-worker-2" laddr=172.21.15.80 lport=6822 faddr=172.21.15.97 fport=36036 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.739:7101): avc: denied { read } for pid=35348 comm="node_exporter" name="entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.739:6744): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.739:8880): avc: denied { search } for pid=35348 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075172.284:6810): avc: denied { search } for pid=46227 comm="safe_timer" name="/" dev="overlay" ino=1968207 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c79,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.742:7796): avc: denied { search } for pid=35348 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616075646.001:9223): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075582.061:8957): avc: denied { open } for pid=26330 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075337.736:7666): avc: denied { read } for pid=26728 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.740:7788): avc: denied { read } for pid=35348 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075320.277:7558): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.696:8336): avc: denied { append } for pid=57451 comm="log" path="/var/log/ceph/ceph-osd.3.log" dev="sda1" ino=395896 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075643.418:9171): avc: denied { open } for pid=26728 comm="safe_timer" path="/proc/meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075173.934:6818): avc: denied { read } for pid=26330 comm="conmon" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075263.278:7318): avc: denied { read open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075419.277:8123): avc: denied { getattr } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075479.277:8377): avc: denied { getattr } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075268.738:7334): avc: denied { read } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075506.277:8617): avc: denied { getattr } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075582.643:8962): avc: denied { create } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075481.644:8422): avc: denied { search } for pid=42602 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075242.644:7160): avc: denied { connect } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075339.020:7705): avc: denied { search } for pid=42602 comm="safe_timer" name="/" dev="overlay" ino=1968187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c166,c597 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075255.943:7214): avc: denied { read } for pid=26353 comm="rocksdb:high0" name="000016.sst" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075400.848:7989): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075408.738:8080): avc: denied { search } for pid=35348 comm="node_exporter" name="kernel" dev="proc" ino=167394 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075488.740:8501): avc: denied { search } for pid=35348 comm="node_exporter" name="user" dev="tmpfs" ino=16726 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075258.740:7252): avc: denied { read } for pid=35348 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075173.934:6819): avc: denied { write } for pid=26330 comm="conmon" name="socket" dev="tmpfs" ino=16686 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075664.044:9335): avc: denied { search } for pid=26330 comm="conmon" name="systemd" dev="tmpfs" ino=16404 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075587.005:9004): avc: denied { search } for pid=26728 comm="mgr-fin" name="/" dev="overlay" ino=1442611 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075260.715:7269): avc: denied { open } for pid=88987 comm="pgrep" path="/proc/26353/status" dev="proc" ino=152649 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.739:7778): avc: denied { read } for pid=35348 comm="node_exporter" name="entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075644.010:9181): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075417.059:8097): avc: denied { write } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075428.742:8213): avc: denied { search } for pid=35348 comm="node_exporter" name="host" dev="sda1" ino=1968013 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075161.277:6775): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075488.738:8497): avc: denied { search } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=166036 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075563.036:8813): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075318.738:7505): avc: denied { read } for pid=35348 comm="node_exporter" name="mounts" dev="proc" ino=167607 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075668.277:9372): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075398.739:7925): avc: denied { read } for pid=35348 comm="node_exporter" name="ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075254.278:7189): avc: denied { read } for pid=42010 comm="grafana-server" name="rbd-details.json" dev="sda1" ino=1444782 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075341.041:7716): avc: denied { write } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075400.103:7961): avc: denied { search } for pid=26728 comm="safe_timer" name="/" dev="overlay" ino=1442611 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075268.737:7332): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075340.945:7715): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.741:7940): avc: denied { search } for pid=35348 comm="node_exporter" name="user" dev="tmpfs" ino=16726 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075428.739:8196): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/class/hwmon" dev="sysfs" ino=21483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075419.278:8125): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075485.278:8480): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075490.076:8506): avc: denied { write } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075649.454:9277): avc: denied { open } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.742:6759): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075172.905:6812): avc: denied { search } for pid=26728 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.737:6846): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="overlay" ino=1968004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075508.742:8650): avc: denied { search } for pid=35348 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616075643.430:9174): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.740:9405): avc: denied { search } for pid=35348 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616075402.115:8008): avc: denied { read } for pid=26728 comm="safe_timer" name="meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075561.554:8780): avc: denied { read } for pid=42602 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.049:9363): avc: denied { write } for pid=26330 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075262.644:7307): avc: denied { setopt } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.738:9388): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075585.815:8979): avc: denied { append } for pid=46227 comm="log" path="/var/log/ceph/ceph-osd.1.log" dev="sda1" ino=395892 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075179.277:6890): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075343.033:7751): avc: denied { search } for pid=42602 comm="safe_timer" name="/" dev="overlay" ino=1968187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c166,c597 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075162.644:6784): avc: denied { connect } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075421.838:8138): avc: denied { append } for pid=42602 comm="log" path="/var/log/ceph/ceph-osd.0.log" dev="sda1" ino=395891 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075241.234:7150): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075240.925:7129): avc: denied { search } for pid=26353 comm="safe_timer" name="var" dev="sda1" ino=1442603 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075587.277:9014): avc: denied { read open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075504.754:8608): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=394794 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075262.644:7311): avc: denied { read } for pid=44080 comm="prometheus" path="socket:[320090]" dev="sockfs" ino=320090 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.738:8343): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075664.044:9335): avc: denied { sendto } for pid=26330 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075242.997:7166): avc: denied { write } for pid=26330 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075348.738:7773): avc: denied { read } for pid=35348 comm="node_exporter" name="stat" dev="proc" ino=173156 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.738:9021): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.738:8344): avc: denied { search } for pid=35348 comm="node_exporter" name="7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075400.956:7995): avc: denied { write } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075322.747:7608): avc: denied { search } for pid=57451 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075241.246:7152): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075482.620:8435): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075508.742:8649): avc: denied { search } for pid=35348 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075562.031:8788): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075343.044:7755): avc: denied { search } for pid=26330 comm="conmon" name="journal" dev="tmpfs" ino=16682 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075406.151:8068): avc: denied { search } for pid=26728 comm="safe_timer" name="etc" dev="sda1" ino=1442620 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075648.017:9236): avc: denied { search } for pid=26330 comm="conmon" name="systemd" dev="tmpfs" ino=16404 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075685.416:9436): avc: denied { search } for pid=51959 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075404.401:8061): avc: denied { open } for pid=46227 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075562.004:8782): avc: denied { search } for pid=26728 comm="mgr-fin" name="/" dev="overlay" ino=1442611 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.738:7774): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.739:7097): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=167607 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075643.430:9174): avc: denied { getattr } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075674.793:9425): avc: denied { open } for pid=44080 comm="prometheus" path="/prometheus" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.761:6763): avc: denied { append } for pid=44080 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.277:7670): avc: denied { search } for pid=42010 comm="grafana-server" name="etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075241.233:7149): avc: denied { open } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075152.028:6661): avc: denied { open } for pid=46227 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075421.928:8143): avc: denied { search } for pid=57451 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1968244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075586.067:8991): avc: denied { use } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075644.278:9193): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075174.917:6830): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.712:9377): avc: denied { search } for pid=51959 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968225 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c631,c994 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.737:9381): avc: denied { read } for pid=35348 comm="node_exporter" name="fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075501.947:8557): avc: denied { open } for pid=42602 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075662.278:9308): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075268.738:7333): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/class/hwmon" dev="sysfs" ino=21483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075508.742:8651): avc: denied { search } for pid=35348 comm="node_exporter" name="host" dev="sda1" ino=1968013 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075255.929:7208): avc: denied { open } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075402.038:8006): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075238.738:7089): avc: denied { read } for pid=35348 comm="node_exporter" name="stat" dev="proc" ino=173156 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075440.963:8222): avc: denied { search } for pid=26353 comm="safe_timer" name="diff" dev="sda1" ino=1442592 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075158.739:6739): avc: denied { read } for pid=35348 comm="node_exporter" name="fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075317.991:7489): avc: denied { search } for pid=42602 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075404.277:8057): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075503.946:8591): avc: denied { search } for pid=42602 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c166,c597 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075261.344:7291): avc: denied { search } for pid=26728 comm="safe_timer" name="usr" dev="sda1" ino=786698 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075328.739:7639): avc: denied { search } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=166036 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075342.644:7741): avc: denied { search } for pid=44080 comm="prometheus" name="etc" dev="sda1" ino=1968146 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075588.739:9034): avc: denied { read } for pid=35348 comm="node_exporter" name="mounts" dev="proc" ino=167607 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075662.815:9325): avc: denied { write } for pid=26728 comm="msgr-worker-1" laddr=172.21.15.80 lport=38434 faddr=172.21.15.80 fport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.739:7782): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075257.278:7231): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.756:6874): avc: denied { write } for pid=44080 comm="prometheus" path="pipe:[193696]" dev="pipefs" ino=193696 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075504.019:8593): avc: denied { write } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075152.819:6681): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075179.277:6891): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/pool-overview.json" dev="overlay" ino=1444778 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075643.430:9174): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=394794 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075648.741:9271): avc: denied { search } for pid=35348 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075179.276:6885): avc: denied { search } for pid=42010 comm="grafana-server" name="/" dev="overlay" ino=1968169 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075248.738:7171): avc: denied { read } for pid=35348 comm="node_exporter" name="fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075257.278:7233): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-sync-overview.json" dev="overlay" ino=1444781 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075262.030:7299): avc: denied { open } for pid=26353 comm="rstore_compact" path="/sys/devices/virtual/block/dm-4/queue/logical_block_size" dev="sysfs" ino=45217 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075328.738:7636): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173156 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075562.031:8789): avc: denied { search } for pid=26330 comm="conmon" name="journal" dev="tmpfs" ino=16682 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075398.521:7904): avc: denied { read } for pid=51959 comm="msgr-worker-1" path="socket:[239995]" dev="sockfs" ino=239995 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075255.553:7204): avc: denied { search } for pid=51959 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968225 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c631,c994 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075423.457:8177): avc: denied { search } for pid=51959 comm="safe_timer" name="/" dev="overlay" ino=1968225 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c631,c994 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075328.739:7644): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/hwmon/hwmon0" dev="sysfs" ino=35064 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075320.941:7571): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075239.464:7128): avc: denied { read } for pid=51959 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075643.430:9174): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075152.028:6660): avc: denied { search } for pid=46227 comm="safe_timer" name="/" dev="overlay" ino=1968207 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c79,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.741:7701): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.737:9019): avc: denied { read } for pid=35348 comm="node_exporter" name="stat" dev="proc" ino=173156 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075151.976:6659): avc: denied { search } for pid=26728 comm="mgr-fin" name="etc" dev="sda1" ino=1442620 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075268.740:7352): avc: denied { search } for pid=35348 comm="node_exporter" name="host" dev="sda1" ino=1968013 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075182.643:6915): avc: denied { getattr } for pid=44080 comm="prometheus" laddr=172.21.15.80 lport=42739 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.739:7685): avc: denied { search } for pid=35348 comm="node_exporter" name="kernel" dev="proc" ino=167394 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075179.277:6890): avc: denied { read open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075421.995:8153): avc: denied { read } for pid=26728 comm="mgr-fin" name="localtime" dev="sda1" ino=394776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075248.740:7182): avc: denied { search } for pid=35348 comm="node_exporter" name="host" dev="sda1" ino=1968013 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075152.028:6660): avc: denied { read } for pid=46227 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.742:7792): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.738:7773): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173156 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.741:9270): avc: denied { search } for pid=35348 comm="node_exporter" name="user" dev="tmpfs" ino=16726 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075508.738:8628): avc: denied { read } for pid=35348 comm="node_exporter" name="fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.737:9378): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="overlay" ino=1968004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075582.643:8961): avc: denied { signal } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075269.276:7355): avc: denied { search } for pid=42010 comm="grafana-server" name="etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075484.114:8467): avc: denied { read } for pid=46227 comm="msgr-worker-1" path="socket:[242106]" dev="sockfs" ino=242106 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075562.031:8786): avc: denied { write } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075662.277:9304): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075508.742:8649): avc: denied { search } for pid=35348 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075318.738:7513): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075240.926:7130): avc: denied { read } for pid=26353 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075406.139:8067): avc: denied { search } for pid=26728 comm="safe_timer" name="/" dev="overlay" ino=1442611 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.741:7112): avc: denied { search } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=166036 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075401.277:7999): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075668.049:9362): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075498.737:8531): avc: denied { search } for pid=35348 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075155.903:6715): avc: denied { search } for pid=26353 comm="safe_timer" name="mon.smithi080" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075261.344:7292): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075500.973:8554): avc: denied { open } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075401.277:8001): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/pool-overview.json" dev="sda1" ino=1444778 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075260.473:7258): avc: denied { open } for pid=46227 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.738:7917): avc: denied { signal } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075586.067:8994): avc: denied { search } for pid=26330 comm="conmon" name="systemd" dev="tmpfs" ino=16404 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075643.418:9172): avc: denied { open } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075572.644:8927): avc: denied { read } for pid=44080 comm="prometheus" path="socket:[389505]" dev="sockfs" ino=389505 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075508.738:8627): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173156 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.738:6851): avc: denied { search } for pid=35348 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075662.278:9306): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075400.115:7983): avc: denied { search } for pid=26728 comm="safe_timer" name="etc" dev="sda1" ino=1442620 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075498.738:8534): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=167607 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075348.739:7781): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.738:7922): avc: denied { read } for pid=35348 comm="node_exporter" name="fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075586.067:8994): avc: denied { write } for pid=26330 comm="conmon" name="socket" dev="tmpfs" ino=16686 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075428.739:8202): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=30846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075562.004:8782): avc: denied { search } for pid=26728 comm="mgr-fin" name="etc" dev="sda1" ino=1442620 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075428.739:8190): avc: denied { read } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075488.740:8502): avc: denied { search } for pid=35348 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.741:6756): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=167607 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075178.940:6881): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.738:9026): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075662.278:9305): avc: denied { lock } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075480.596:8398): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.737:6847): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075504.021:8597): avc: denied { sendto } for pid=26330 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075161.918:6778): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075338.738:7683): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.739:8354): avc: denied { read } for pid=35348 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075236.278:7045): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075482.644:8443): avc: denied { write } for pid=44080 comm="prometheus" path="socket:[363381]" dev="sockfs" ino=363381 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075587.156:9007): avc: denied { search } for pid=42602 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c166,c597 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.738:9387): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=21498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075267.804:7326): avc: denied { search } for pid=57451 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.739:8884): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/class/net/eno1" dev="sysfs" ino=34869 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075562.004:8782): avc: denied { search } for pid=26728 comm="mgr-fin" name="usr" dev="sda1" ino=786698 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075248.740:7181): avc: denied { search } for pid=35348 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075328.740:7647): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075484.114:8466): avc: denied { read } for pid=46227 comm="msgr-worker-0" path="socket:[242103]" dev="sockfs" ino=242103 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075562.031:8789): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075480.060:8388): avc: denied { write } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075578.737:8936): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.049:9363): avc: denied { search } for pid=26330 comm="conmon" name="systemd" dev="tmpfs" ino=16404 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075348.738:7771): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075268.738:7333): avc: denied { read } for pid=35348 comm="node_exporter" name="hwmon" dev="sysfs" ino=21483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075154.955:6709): avc: denied { read } for pid=42602 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075572.644:8920): avc: denied { search } for pid=44080 comm="prometheus" name="etc" dev="sda1" ino=1968146 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075668.025:9358): avc: denied { search } for pid=46227 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968207 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c79,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075319.649:7547): avc: denied { search } for pid=26728 comm="safe_timer" name="/" dev="overlay" ino=1442611 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.739:7778): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.741:6869): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075422.277:8157): avc: denied { getattr } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075178.739:6860): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075260.495:7263): avc: denied { read } for pid=42602 comm="msgr-worker-0" path="pipe:[187564]" dev="pipefs" ino=187564 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075652.644:9291): avc: denied { create } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.740:9404): avc: denied { search } for pid=35348 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075236.204:7039): avc: denied { read } for pid=26728 comm="msgr-worker-0" path="socket:[278222]" dev="sockfs" ino=278222 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.740:8888): avc: denied { getattr } for pid=35348 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075261.023:7282): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075260.849:7273): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075237.481:7064): avc: denied { search } for pid=51959 comm="safe_timer" name="/" dev="overlay" ino=1968225 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c631,c994 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075504.021:8594): avc: denied { write } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075503.946:8591): avc: denied { open } for pid=42602 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075422.277:8158): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075343.772:7760): avc: denied { read } for pid=26728 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.341:7680): avc: denied { write } for pid=26353 comm="ms_dispatch" path="pipe:[126774]" dev="pipefs" ino=126774 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075421.963:8147): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075480.971:8420): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075320.276:7553): avc: denied { search } for pid=42010 comm="grafana-server" name="/" dev="overlay" ino=1968169 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075320.277:7555): avc: denied { lock } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075182.643:6914): avc: denied { connect } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075401.276:7996): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075236.278:7049): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/pool-detail.json" dev="overlay" ino=1444777 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075508.739:8640): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=30846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075672.643:9417): avc: denied { create } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075666.004:9340): avc: denied { open } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075488.738:8494): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/class/net/eno1" dev="sysfs" ino=34869 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075320.277:7557): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075418.741:8118): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075504.754:8608): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075236.204:7035): avc: denied { write } for pid=75978 comm="safe_timer" path="pipe:[273320]" dev="pipefs" ino=273320 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075585.815:8978): avc: denied { search } for pid=46227 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968207 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c79,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075663.528:9330): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075179.297:6892): avc: denied { search } for pid=57451 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c179,c314 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075343.772:7760): avc: denied { search } for pid=26728 comm="safe_timer" name="libpod-7157ed55dd2bb6f82af892cdc2cadcbaa2c5f5b0b22e740b7b8d1bea0b6c44b3.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075569.278:8912): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/osds-overview.json" dev="overlay" ino=1444776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075420.427:8128): avc: denied { search } for pid=51959 comm="safe_timer" name="/" dev="overlay" ino=1968225 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c631,c994 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.739:8877): avc: denied { read } for pid=35348 comm="node_exporter" name="file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075662.398:9311): avc: denied { write } for pid=26353 comm="msgr-worker-2" laddr=172.21.15.80 lport=3300 faddr=172.21.15.97 fport=47434 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075262.644:7310): avc: denied { write } for pid=44080 comm="prometheus" path="socket:[315300]" dev="sockfs" ino=315300 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075644.277:9188): avc: denied { getattr } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075255.943:7215): avc: denied { remove_name } for pid=26353 comm="rocksdb:high0" name="000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075262.030:7295): avc: denied { create } for pid=26353 comm="rstore_compact" name="000018.log" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075418.739:8112): avc: denied { search } for pid=35348 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075400.033:7956): avc: denied { write } for pid=26330 comm="conmon" name="socket" dev="tmpfs" ino=16686 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075504.021:8597): avc: denied { write } for pid=26330 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075422.248:8156): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075488.738:8492): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075504.754:8608): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075322.747:7607): avc: denied { search } for pid=57451 comm="safe_timer" name="/" dev="overlay" ino=1968244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c179,c314 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075485.278:8479): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075420.236:8127): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=394794 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075255.930:7210): avc: denied { write } for pid=26353 comm="rstore_compact" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.277:7670): avc: denied { getattr } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075338.310:7678): avc: denied { write } for pid=42602 comm="msgr-worker-0" laddr=172.21.15.80 lport=6808 faddr=172.21.15.97 fport=56436 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.739:7785): avc: denied { read } for pid=35348 comm="node_exporter" name="stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075488.740:8505): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075419.278:8125): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.737:6849): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/stat" dev="proc" ino=4026532033 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.738:9023): avc: denied { search } for pid=35348 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075152.963:6682): avc: denied { search } for pid=42602 comm="safe_timer" name="/" dev="overlay" ino=1968187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c166,c597 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075255.677:7205): avc: denied { search } for pid=51959 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075506.278:8622): avc: denied { read open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.759:7114): avc: denied { append } for pid=44080 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.738:8343): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075482.277:8429): avc: denied { search } for pid=42010 comm="grafana-server" name="/" dev="overlay" ino=1968169 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075592.644:9044): avc: denied { search } for pid=44080 comm="prometheus" name="etc" dev="sda1" ino=1968146 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075258.739:7246): avc: denied { read } for pid=35348 comm="node_exporter" name="entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075400.955:7992): avc: denied { open } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075428.739:8194): avc: denied { read } for pid=35348 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075643.430:9175): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075500.973:8553): avc: denied { dac_read_search } for pid=26353 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075178.737:6848): avc: denied { search } for pid=35348 comm="node_exporter" name="7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.739:8875): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/net/sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075418.738:8105): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="overlay" ino=1968004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075268.737:7331): avc: denied { read } for pid=35348 comm="node_exporter" name="stat" dev="proc" ino=173156 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.738:9028): avc: denied { read } for pid=35348 comm="node_exporter" name="entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.739:9263): avc: denied { search } for pid=35348 comm="node_exporter" name="kernel" dev="proc" ino=167394 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075422.248:8156): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075268.042:7327): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075662.278:9307): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075422.958:8175): avc: denied { open } for pid=57451 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075504.021:8596): avc: denied { open } for pid=26330 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075667.551:9354): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=394794 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075318.738:7512): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.738:9249): avc: denied { read } for pid=35348 comm="node_exporter" name="stat" dev="proc" ino=173156 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075645.710:9219): avc: denied { append } for pid=44080 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075485.278:8482): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/host-details.json" dev="overlay" ino=1444773 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075587.005:9004): avc: denied { getattr } for pid=26728 comm="mgr-fin" path="/usr/share/zoneinfo/UTC" dev="overlay" ino=1311473 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075480.060:8390): avc: denied { write } for pid=26330 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075644.278:9193): avc: denied { read open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075401.277:7999): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075479.278:8382): avc: denied { read open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075482.277:8430): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075318.737:7496): avc: denied { search } for pid=35348 comm="node_exporter" name="7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075425.961:8184): avc: denied { open } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075339.038:7706): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075662.456:9316): avc: denied { search } for pid=46227 comm="safe_timer" name="/" dev="overlay" ino=1968207 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c79,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075328.739:7642): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=43630 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075662.398:9313): avc: denied { read } for pid=26353 comm="msgr-worker-2" path="pipe:[126774]" dev="pipefs" ino=126774 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075151.587:6646): avc: denied { read } for pid=26353 comm="msgr-worker-2" path="socket:[173169]" dev="sockfs" ino=173169 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075480.060:8390): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075320.940:7568): avc: denied { search } for pid=26353 comm="safe_timer" name="var" dev="sda1" ino=1442603 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075338.278:7675): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075484.632:8473): avc: denied { search } for pid=26728 comm="safe_timer" name="usr" dev="sda1" ino=786698 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075572.645:8928): avc: denied { write } for pid=26353 comm="msgr-worker-2" laddr=172.21.15.80 lport=3300 faddr=172.21.15.97 fport=47434 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.740:8891): avc: denied { search } for pid=35348 comm="node_exporter" name="user" dev="tmpfs" ino=16726 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075644.010:9182): avc: denied { write } for pid=26330 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075318.738:7510): avc: denied { getattr } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16396 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075405.956:8063): avc: denied { search } for pid=26353 comm="safe_timer" name="var" dev="sda1" ino=1442603 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075482.277:8429): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.738:8349): avc: denied { search } for pid=35348 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075268.738:7336): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075572.644:8920): avc: denied { search } for pid=44080 comm="prometheus" name="/" dev="overlay" ino=1968129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075585.989:8984): avc: denied { getattr } for pid=26353 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075255.484:7194): avc: denied { read } for pid=42602 comm="msgr-worker-0" path="socket:[244287]" dev="sockfs" ino=244287 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.276:9369): avc: denied { getattr } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075484.114:8469): avc: denied { write } for pid=42602 comm="msgr-worker-2" laddr=172.21.15.80 lport=6808 faddr=172.21.15.97 fport=56514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075508.739:8637): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.738:9029): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/fs/xfs/stats/stats" dev="sysfs" ino=45563 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075661.516:9298): avc: denied { search } for pid=26728 comm="safe_timer" name="usr" dev="sda1" ino=786698 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075164.278:6790): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075503.278:8575): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075318.737:7493): avc: denied { signal } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075667.382:9345): avc: denied { append } for pid=46227 comm="log" path="/var/log/ceph/ceph-osd.1.log" dev="sda1" ino=395892 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075567.048:8864): avc: denied { read } for pid=26728 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075562.644:8805): avc: denied { connect } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075644.278:9192): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.738:6857): avc: denied { read } for pid=35348 comm="node_exporter" name="addr_assign_type" dev="sysfs" ino=34877 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.738:9383): avc: denied { read } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075581.121:8954): avc: denied { search } for pid=26728 comm="safe_timer" name="etc" dev="sda1" ino=1442620 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075482.066:8424): avc: denied { write } for pid=26330 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075562.004:8782): avc: denied { read } for pid=26728 comm="mgr-fin" name="localtime" dev="sda1" ino=394776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075485.972:8484): avc: denied { search } for pid=26353 comm="safe_timer" name="mon.smithi080" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075328.738:7637): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075561.554:8780): avc: denied { search } for pid=42602 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075408.739:8088): avc: denied { search } for pid=35348 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075643.418:9173): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075173.975:6821): avc: denied { search } for pid=42602 comm="safe_timer" name="diff" dev="sda1" ino=1968187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075400.103:7962): avc: denied { open } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075161.278:6777): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.742:8895): avc: denied { search } for pid=35348 comm="node_exporter" name="kernel" dev="proc" ino=167394 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075258.739:7250): avc: denied { search } for pid=35348 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.277:7670): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.741:9270): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.738:8349): avc: denied { read } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075408.738:8077): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075418.224:8104): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075440.754:8220): avc: denied { open } for pid=95869 comm="pgrep" path="/proc/26353/status" dev="proc" ino=152649 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075479.278:8382): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075506.277:8618): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075565.987:8842): avc: denied { search } for pid=26353 comm="safe_timer" name="mon.smithi080" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075485.972:8485): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.739:7931): avc: denied { search } for pid=35348 comm="node_exporter" name="1" dev="proc" ino=167025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075418.738:8106): avc: denied { read } for pid=35348 comm="node_exporter" name="stat" dev="proc" ino=173156 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.742:6762): avc: denied { search } for pid=35348 comm="node_exporter" name="host" dev="sda1" ino=1968013 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075400.848:7987): avc: denied { lock } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075180.982:6907): avc: denied { search } for pid=42602 comm="safe_timer" name="/" dev="overlay" ino=1968187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c166,c597 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.740:6755): avc: denied { search } for pid=35348 comm="node_exporter" name="fs" dev="proc" ino=171371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075164.278:6791): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075238.741:7113): avc: denied { read } for pid=35348 comm="node_exporter" name="file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.940:6881): avc: denied { getattr } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075668.277:9374): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.741:9268): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075404.127:8054): avc: denied { search } for pid=26728 comm="safe_timer" name="libpod-7157ed55dd2bb6f82af892cdc2cadcbaa2c5f5b0b22e740b7b8d1bea0b6c44b3.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075680.806:9428): avc: denied { getattr } for pid=105979 comm="pgrep" path="/proc/26330" dev="proc" ino=132508 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075255.494:7202): avc: denied { read } for pid=57451 comm="msgr-worker-0" path="pipe:[227463]" dev="pipefs" ino=227463 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075341.991:7724): avc: denied { search } for pid=26728 comm="mgr-fin" name="/" dev="overlay" ino=1442611 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.742:6757): avc: denied { getattr } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16396 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075428.739:8191): avc: denied { search } for pid=35348 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075318.737:7497): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075400.956:7993): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.741:8372): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.739:6742): avc: denied { read } for pid=35348 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075151.905:6651): avc: denied { use } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075592.644:9044): avc: denied { search } for pid=44080 comm="prometheus" name="/" dev="overlay" ino=1968129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075479.635:8386): avc: denied { search } for pid=57451 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c179,c314 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075323.012:7611): avc: denied { write } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075328.742:7651): avc: denied { getattr } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16396 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075498.717:8524): avc: denied { search } for pid=26728 comm="safe_timer" name="etc" dev="sda1" ino=1442620 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075321.005:7574): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075180.906:6904): avc: denied { read } for pid=26353 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075272.643:7366): avc: denied { read } for pid=44080 comm="prometheus" path="socket:[327919]" dev="sockfs" ino=327919 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075328.742:7649): avc: denied { read } for pid=35348 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075322.644:7597): avc: denied { append } for pid=44080 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.738:9394): avc: denied { search } for pid=35348 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.739:8354): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075319.649:7548): avc: denied { open } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075263.278:7319): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-detail.json" dev="overlay" ino=1444779 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075342.429:7733): avc: denied { read } for pid=34534 comm="ceph-crash" name="crash" dev="dm-4" ino=8388736 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075569.278:8910): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075480.596:8397): avc: denied { search } for pid=26728 comm="safe_timer" name="libpod-7157ed55dd2bb6f82af892cdc2cadcbaa2c5f5b0b22e740b7b8d1bea0b6c44b3.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.741:7939): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075504.715:8604): avc: denied { search } for pid=51959 comm="safe_timer" name="/" dev="overlay" ino=1968225 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c631,c994 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075242.644:7157): avc: denied { search } for pid=44080 comm="prometheus" name="etc" dev="sda1" ino=1968146 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075238.739:7105): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=43630 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075261.344:7291): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=394794 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075404.276:8056): avc: denied { lock } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.739:9257): avc: denied { read } for pid=35348 comm="node_exporter" name="hwmon0" dev="sysfs" ino=35068 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.742:7793): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075404.277:8059): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/cephfs-overview.json" dev="overlay" ino=1444772 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075402.038:8007): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075318.738:7504): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/fs/xfs/dm-4/stats/stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.739:6748): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/devices/system/cpu/cpu0/topology/physical_package_id" dev="sysfs" ino=28908 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075258.738:7240): avc: denied { read } for pid=35348 comm="node_exporter" name="fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075420.960:8131): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075497.983:8518): avc: denied { search } for pid=26330 comm="conmon" name="journal" dev="tmpfs" ino=16682 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075644.278:9194): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/cephfs-overview.json" dev="overlay" ino=1444772 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075418.742:8120): avc: denied { search } for pid=35348 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616075341.041:7717): avc: denied { read } for pid=26330 comm="conmon" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075165.904:6794): avc: denied { getattr } for pid=26353 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.738:9383): avc: denied { read } for pid=35348 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075428.742:8207): avc: denied { read } for pid=35348 comm="node_exporter" name="mounts" dev="proc" ino=167607 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075151.976:6659): avc: denied { read } for pid=26728 comm="mgr-fin" name="localtime" dev="overlay" ino=394776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075318.738:7504): avc: denied { read } for pid=35348 comm="node_exporter" name="stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075408.738:8078): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075257.017:7224): avc: denied { sendto } for pid=26330 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075584.064:8972): avc: denied { write } for pid=26330 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075668.277:9374): avc: denied { read open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075403.352:8042): avc: denied { read } for pid=26353 comm="msgr-worker-2" path="pipe:[126774]" dev="pipefs" ino=126774 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.738:8345): avc: denied { read } for pid=35348 comm="node_exporter" name="stat" dev="proc" ino=4026532033 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075318.738:7510): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.738:9247): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.741:7790): avc: denied { search } for pid=35348 comm="node_exporter" name="fs" dev="proc" ino=171371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075242.277:7155): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075236.984:7051): avc: denied { search } for pid=26728 comm="mgr-fin" name="/" dev="overlay" ino=1442611 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.940:6881): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075236.984:7051): avc: denied { read } for pid=26728 comm="mgr-fin" name="localtime" dev="overlay" ino=394776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075480.060:8389): avc: denied { read } for pid=26330 comm="conmon" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075422.278:8159): avc: denied { lock } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075585.989:8986): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075488.737:8490): avc: denied { search } for pid=35348 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075318.738:7501): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075272.643:7361): avc: denied { setopt } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075341.991:7724): avc: denied { getattr } for pid=26728 comm="mgr-fin" name="UTC" dev="sda1" ino=1311473 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075237.481:7065): avc: denied { open } for pid=51959 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075180.906:6904): avc: denied { open } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075646.001:9221): avc: denied { search } for pid=26353 comm="safe_timer" name="mon.smithi080" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075422.278:8160): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075506.277:8617): avc: denied { search } for pid=42010 comm="grafana-server" name="etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075480.608:8399): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=394794 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075261.332:7289): avc: denied { search } for pid=26728 comm="safe_timer" name="libpod-7157ed55dd2bb6f82af892cdc2cadcbaa2c5f5b0b22e740b7b8d1bea0b6c44b3.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075408.738:8080): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075155.910:6719): avc: denied { write } for pid=26330 comm="conmon" name="socket" dev="tmpfs" ino=16686 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075400.848:7990): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075652.644:9294): avc: denied { getattr } for pid=44080 comm="prometheus" laddr=172.21.15.80 lport=44272 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075325.942:7631): avc: denied { dac_read_search } for pid=26353 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075400.115:7983): avc: denied { getattr } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075254.788:7190): avc: denied { open } for pid=44080 comm="prometheus" path="/prometheus" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.165:9368): avc: denied { search } for pid=42602 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c166,c597 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.738:6859): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/fs/xfs/stats/stats" dev="sysfs" ino=45563 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075488.737:8489): avc: denied { read } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075646.001:9221): avc: denied { open } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075404.041:8046): avc: denied { sendto } for pid=26330 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075668.049:9360): avc: denied { use } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075318.737:7497): avc: denied { read } for pid=35348 comm="node_exporter" name="fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075479.277:8377): avc: denied { search } for pid=42010 comm="grafana-server" name="dashboards" dev="sda1" ino=1444769 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075482.278:8431): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075563.024:8811): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.940:6881): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075440.754:8218): avc: denied { read } for pid=95869 comm="pgrep" name="status" dev="proc" ino=132512 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075584.276:8973): avc: denied { search } for pid=42010 comm="grafana-server" name="etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075563.278:8833): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.737:9016): avc: denied { signal } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075500.011:8541): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075268.738:7337): avc: denied { read } for pid=35348 comm="node_exporter" name="ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075508.739:8633): avc: denied { read } for pid=35348 comm="node_exporter" name="cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075580.626:8946): avc: denied { read } for pid=57451 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.277:7670): avc: denied { search } for pid=42010 comm="grafana-server" name="/" dev="overlay" ino=1968169 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075647.010:9227): avc: denied { getattr } for pid=26728 comm="mgr-fin" path="/usr/share/zoneinfo/UTC" dev="overlay" ino=1311473 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075261.023:7282): avc: denied { write } for pid=26330 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075242.644:7161): avc: denied { getattr } for pid=44080 comm="prometheus" laddr=172.21.15.80 lport=49418 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075161.277:6775): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075494.792:8511): avc: denied { getattr } for pid=44080 comm="prometheus" path="/prometheus/wal" dev="dm-4" ino=8388752 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075342.429:7733): avc: denied { dac_read_search } for pid=34534 comm="ceph-crash" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075317.914:7487): avc: denied { search } for pid=57451 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c179,c314 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075479.057:8374): avc: denied { write } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075262.030:7298): avc: denied { read } for pid=26353 comm="rstore_compact" name="253:4" dev="sysfs" ino=45180 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.739:7103): avc: denied { getattr } for pid=35348 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075562.031:8789): avc: denied { sendto } for pid=26330 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075484.620:8472): avc: denied { search } for pid=26728 comm="safe_timer" name="libpod-7157ed55dd2bb6f82af892cdc2cadcbaa2c5f5b0b22e740b7b8d1bea0b6c44b3.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075482.644:8440): avc: denied { setopt } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075662.278:9308): avc: denied { read open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075237.221:7061): avc: denied { read } for pid=26728 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075248.794:7185): avc: denied { append } for pid=57451 comm="log" path="/var/log/ceph/ceph-osd.3.log" dev="sda1" ino=395896 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075577.097:8934): avc: denied { search } for pid=26728 comm="safe_timer" name="libpod-7157ed55dd2bb6f82af892cdc2cadcbaa2c5f5b0b22e740b7b8d1bea0b6c44b3.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075488.740:8504): avc: denied { read } for pid=35348 comm="node_exporter" name="entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.739:7096): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.739:6747): avc: denied { read } for pid=35348 comm="node_exporter" name="cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.740:8889): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075328.740:7646): avc: denied { search } for pid=35348 comm="node_exporter" name="kernel" dev="proc" ino=167394 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075317.914:7487): avc: denied { search } for pid=57451 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075337.748:7668): avc: denied { getattr } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075668.739:9398): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.276:9370): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075488.739:8499): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.739:8874): avc: denied { read } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075260.931:7278): avc: denied { write } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/000015.log" dev="dm-4" ino=137 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075402.038:8007): avc: denied { write } for pid=26330 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075428.738:8188): avc: denied { read } for pid=35348 comm="node_exporter" name="stat" dev="proc" ino=173156 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075240.925:7129): avc: denied { search } for pid=26353 comm="safe_timer" name="/" dev="overlay" ino=1442592 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075480.060:8388): avc: denied { use } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075154.831:6707): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.737:9017): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="overlay" ino=1968004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075671.004:9411): avc: denied { open } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075269.277:7357): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075512.644:8655): avc: denied { setopt } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075237.233:7063): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.740:9037): avc: denied { search } for pid=35348 comm="node_exporter" name="user" dev="tmpfs" ino=16726 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075662.644:9318): avc: denied { search } for pid=44080 comm="prometheus" name="diff" dev="sda1" ino=1968129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075318.738:7502): avc: denied { read } for pid=35348 comm="node_exporter" name="arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075277.137:7367): avc: denied { append } for pid=42602 comm="log" path="/var/log/ceph/ceph-osd.0.log" dev="sda1" ino=395891 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075236.988:7056): avc: denied { sendto } for pid=26330 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075403.306:8040): avc: denied { write } for pid=42602 comm="msgr-worker-1" laddr=172.21.15.80 lport=6806 faddr=172.21.15.97 fport=45430 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075402.038:8006): avc: denied { write } for pid=26330 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075401.277:8001): avc: denied { read } for pid=42010 comm="grafana-server" name="pool-overview.json" dev="sda1" ino=1444778 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075562.004:8782): avc: denied { read } for pid=26728 comm="mgr-fin" name="localtime" dev="overlay" ino=394776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075680.806:9431): avc: denied { search } for pid=105979 comm="pgrep" name="26353" dev="proc" ino=152605 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075318.738:7498): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075400.848:7988): avc: denied { search } for pid=42010 comm="grafana-server" name="var" dev="sda1" ino=1968178 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075503.278:8574): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075503.278:8573): avc: denied { lock } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075337.460:7665): avc: denied { read } for pid=51959 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075586.067:8993): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075568.742:8895): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075262.030:7297): avc: denied { getattr } for pid=26353 comm="rstore_compact" path="/sys/dev/block/253:4" dev="sysfs" ino=45180 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.276:9369): avc: denied { search } for pid=42010 comm="grafana-server" name="/" dev="overlay" ino=1968169 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075504.742:8606): avc: denied { search } for pid=26728 comm="safe_timer" name="libpod-7157ed55dd2bb6f82af892cdc2cadcbaa2c5f5b0b22e740b7b8d1bea0b6c44b3.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.739:6860): avc: denied { read } for pid=35348 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075262.644:7305): avc: denied { create } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075174.929:6831): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.741:7699): avc: denied { getattr } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16396 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.738:9249): avc: denied { search } for pid=35348 comm="node_exporter" name="7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075503.278:8576): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075586.587:9003): avc: denied { search } for pid=57451 comm="safe_timer" name="/" dev="overlay" ino=1968244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c179,c314 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075268.739:7341): avc: denied { search } for pid=35348 comm="node_exporter" name="fs" dev="proc" ino=171371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075342.528:7736): avc: denied { open } for pid=51959 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.739:6741): avc: denied { search } for pid=35348 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075255.484:7196): avc: denied { write } for pid=42602 comm="msgr-worker-1" laddr=172.21.15.80 lport=6806 faddr=172.21.15.97 fport=45430 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075418.738:8107): avc: denied { read } for pid=35348 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075160.904:6773): avc: denied { search } for pid=26353 comm="safe_timer" name="mon.smithi080" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.738:6857): avc: denied { read } for pid=35348 comm="node_exporter" name="eno1" dev="sysfs" ino=34869 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075257.017:7224): avc: denied { search } for pid=26330 comm="conmon" name="journal" dev="tmpfs" ino=16682 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075318.737:7495): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.741:9271): avc: denied { search } for pid=35348 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075428.740:8203): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075337.284:7663): avc: denied { search } for pid=46227 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075562.004:8782): avc: denied { getattr } for pid=26728 comm="mgr-fin" name="UTC" dev="sda1" ino=1311473 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075418.739:8114): avc: denied { read } for pid=35348 comm="node_exporter" name="file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075152.807:6679): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075664.044:9333): avc: denied { read } for pid=26330 comm="conmon" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075344.278:7768): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075428.738:8186): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="overlay" ino=1968004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075168.739:6795): avc: denied { search } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=166036 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075255.484:7197): avc: denied { write } for pid=51959 comm="msgr-worker-1" laddr=172.21.15.80 lport=6824 faddr=172.21.15.97 fport=37552 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075508.740:8641): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.740:9267): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=167607 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075320.941:7572): avc: denied { write } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075666.004:9340): avc: denied { search } for pid=26353 comm="safe_timer" name="mon.smithi080" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075425.961:8183): avc: denied { search } for pid=26353 comm="safe_timer" name="/" dev="overlay" ino=1442592 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.740:7935): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075320.276:7553): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075508.739:8632): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075565.986:8841): avc: denied { dac_read_search } for pid=26353 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075158.738:6738): avc: denied { search } for pid=35348 comm="node_exporter" name="7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.740:8889): avc: denied { getattr } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16396 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075425.961:8183): avc: denied { dac_read_search } for pid=26353 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075503.278:8576): avc: denied { read open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075161.278:6777): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075268.737:7332): avc: denied { read } for pid=35348 comm="node_exporter" name="fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075512.644:8657): avc: denied { connect } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075401.276:7996): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075161.277:6776): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075668.737:9380): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173156 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075561.428:8773): avc: denied { append } for pid=46227 comm="log" path="/var/log/ceph/ceph-osd.1.log" dev="sda1" ino=395892 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075480.060:8391): avc: denied { search } for pid=26330 comm="conmon" name="journal" dev="tmpfs" ino=16682 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075568.773:8901): avc: denied { search } for pid=26728 comm="mgr-fin" name="usr" dev="sda1" ino=786698 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075648.740:9267): avc: denied { read } for pid=35348 comm="node_exporter" name="mounts" dev="proc" ino=167607 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075401.276:7998): avc: denied { search } for pid=42010 comm="grafana-server" name="dashboards" dev="sda1" ino=1444769 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075236.204:7041): avc: denied { append } for pid=26728 comm="log" path="/var/log/ceph/ceph-mgr.smithi080.njtcci.log" dev="sda1" ino=395865 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075262.030:7295): avc: denied { add_name } for pid=26353 comm="rstore_compact" name="000018.log" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075667.551:9354): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075236.988:7056): avc: denied { write } for pid=26330 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075323.277:7617): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075562.031:8788): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075587.157:9008): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075258.607:7237): avc: denied { search } for pid=42602 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c166,c597 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075506.278:8622): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075498.738:8534): avc: denied { search } for pid=35348 comm="node_exporter" name="1" dev="proc" ino=167025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075338.278:7673): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075422.278:8161): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075646.001:9220): avc: denied { search } for pid=26353 comm="safe_timer" name="var" dev="sda1" ino=1442603 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075668.738:9385): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/net/sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.738:7920): avc: denied { search } for pid=35348 comm="node_exporter" name="7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075263.278:7318): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075504.021:8595): avc: denied { read } for pid=26330 comm="conmon" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075418.740:8116): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=167607 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075408.737:8074): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.278:7675): avc: denied { read open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075562.004:8782): avc: denied { getattr } for pid=26728 comm="mgr-fin" path="/usr/share/zoneinfo/UTC" dev="overlay" ino=1311473 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075503.636:8587): avc: denied { read } for pid=26353 comm="msgr-worker-2" path="socket:[173169]" dev="sockfs" ino=173169 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075650.277:9282): avc: denied { search } for pid=42010 comm="grafana-server" name="etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075319.003:7524): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075644.010:9182): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075508.742:8646): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075502.017:8559): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075402.475:8010): avc: denied { search } for pid=51959 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968225 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c631,c994 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075319.003:7525): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075506.278:8621): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075585.815:8978): avc: denied { open } for pid=46227 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.738:7684): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075152.644:6675): avc: denied { write } for pid=44080 comm="prometheus" path="socket:[287651]" dev="sockfs" ino=287651 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.733:9246): avc: denied { search } for pid=57451 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075317.754:7479): avc: denied { append } for pid=57451 comm="log" path="/var/log/ceph/ceph-osd.3.log" dev="sda1" ino=395896 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075420.960:8129): avc: denied { getattr } for pid=26353 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075321.005:7573): avc: denied { write } for pid=26330 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075568.739:8878): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075498.705:8523): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075562.143:8794): avc: denied { search } for pid=51959 comm="safe_timer" name="/" dev="overlay" ino=1968225 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c631,c994 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.741:9269): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075236.988:7055): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075242.997:7165): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075572.644:8926): avc: denied { write } for pid=44080 comm="prometheus" path="socket:[377698]" dev="sockfs" ino=377698 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075428.742:8210): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075325.687:7626): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075248.739:7178): avc: denied { read } for pid=35348 comm="node_exporter" name="mounts" dev="proc" ino=167607 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075179.144:6883): avc: denied { search } for pid=51959 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968225 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c631,c994 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075422.644:8167): avc: denied { create } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075328.739:7640): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075152.644:6669): avc: denied { search } for pid=44080 comm="prometheus" name="/" dev="overlay" ino=1968129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075255.553:7204): avc: denied { open } for pid=51959 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075317.914:7487): avc: denied { open } for pid=57451 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075587.145:9006): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.738:7776): avc: denied { read } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075260.930:7275): avc: denied { search } for pid=26353 comm="safe_timer" name="mon.smithi080" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075421.889:8142): avc: denied { write } for pid=75978 comm="msgr-worker-1" laddr=172.21.15.80 lport=60882 faddr=172.21.15.80 fport=6802 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075402.643:8015): avc: denied { connect } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075165.144:6793): avc: denied { search } for pid=51959 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968225 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c631,c994 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075236.988:7053): avc: denied { write } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075643.148:9166): avc: denied { read } for pid=57451 comm="msgr-worker-1" path="pipe:[227464]" dev="pipefs" ino=227464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075662.278:9309): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/cephfs-overview.json" dev="overlay" ino=1444772 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075485.278:8478): avc: denied { lock } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.739:6748): avc: denied { read } for pid=35348 comm="node_exporter" name="physical_package_id" dev="sysfs" ino=28908 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075236.204:7037): avc: denied { write } for pid=75528 comm="msgr-worker-0" laddr=172.21.15.80 lport=37588 faddr=172.21.15.80 fport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075320.940:7568): avc: denied { dac_read_search } for pid=26353 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075568.741:8893): avc: denied { read } for pid=35348 comm="node_exporter" name="diskstats" dev="proc" ino=4026532083 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075404.139:8055): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=394794 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075159.916:6768): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075408.739:8087): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.739:7778): avc: denied { search } for pid=35348 comm="node_exporter" name="kernel" dev="proc" ino=167394 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075242.644:7156): avc: denied { signal } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075418.212:8102): avc: denied { read } for pid=26728 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.843:6764): avc: denied { open } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.740:7937): avc: denied { getattr } for pid=35348 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.739:8356): avc: denied { read } for pid=35348 comm="node_exporter" name="cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075569.278:8910): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.738:7918): avc: denied { search } for pid=35348 comm="node_exporter" name="diff" dev="sda1" ino=1968004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075588.738:9028): avc: denied { search } for pid=35348 comm="node_exporter" name="kernel" dev="proc" ino=167394 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.738:9390): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=43630 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.743:8898): avc: denied { search } for pid=35348 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616075318.738:7506): avc: denied { search } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=166036 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075422.278:8163): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/pool-overview.json" dev="overlay" ino=1444778 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075644.008:9178): avc: denied { write } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075504.021:8597): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075236.277:7042): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075323.277:7616): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.737:6848): avc: denied { read } for pid=35348 comm="node_exporter" name="stat" dev="proc" ino=173156 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075322.643:7595): avc: denied { write } for pid=44080 comm="prometheus" path="socket:[330707]" dev="sockfs" ino=330707 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075317.838:7486): avc: denied { read } for pid=26728 comm="msgr-worker-0" path="socket:[150183]" dev="sockfs" ino=150183 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075160.849:6771): avc: denied { search } for pid=42010 comm="grafana-server" name="var" dev="sda1" ino=1968178 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075328.739:7638): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/class/hwmon" dev="sysfs" ino=21483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.738:8342): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075320.727:7562): avc: denied { open } for pid=92179 comm="pgrep" path="/proc/26330/status" dev="proc" ino=132512 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075408.740:8091): avc: denied { search } for pid=35348 comm="node_exporter" name="host" dev="sda1" ino=1968013 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075588.741:9042): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075182.643:6911): avc: denied { search } for pid=44080 comm="prometheus" name="etc" dev="sda1" ino=1968146 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075178.940:6878): avc: denied { search } for pid=26728 comm="safe_timer" name="/" dev="overlay" ino=1442611 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075402.038:8006): avc: denied { open } for pid=26330 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075428.740:8206): avc: denied { search } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=166036 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075502.644:8564): avc: denied { setopt } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075585.815:8983): avc: denied { read } for pid=42602 comm="msgr-worker-0" path="socket:[202851]" dev="sockfs" ino=202851 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075428.739:8192): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075408.739:8085): avc: denied { getattr } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16396 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075563.278:8832): avc: denied { lock } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.739:8357): avc: denied { read } for pid=35348 comm="node_exporter" name="mounts" dev="proc" ino=167607 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075582.061:8958): avc: denied { search } for pid=26330 comm="conmon" name="systemd" dev="tmpfs" ino=16404 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075158.742:6759): avc: denied { search } for pid=35348 comm="node_exporter" name="user" dev="tmpfs" ino=16726 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075344.278:7765): avc: denied { lock } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075152.277:6662): avc: denied { getattr } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075152.644:6669): avc: denied { getattr } for pid=44080 comm="prometheus" path="/etc/hosts" dev="tmpfs" ino=190812 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075342.644:7745): avc: denied { connect } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.739:9033): avc: denied { read } for pid=35348 comm="node_exporter" name="hwmon0" dev="sysfs" ino=35068 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075404.401:8061): avc: denied { read } for pid=46227 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075261.344:7291): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075154.955:6709): avc: denied { open } for pid=42602 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075268.738:7334): avc: denied { read } for pid=35348 comm="node_exporter" name="arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.738:6853): avc: denied { search } for pid=35348 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075660.006:9297): avc: denied { write } for pid=42602 comm="bstore_kv_sync" path="/dev/dm-3" dev="devtmpfs" ino=107951 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075317.838:7484): avc: denied { read } for pid=26728 comm="msgr-worker-1" path="pipe:[151559]" dev="pipefs" ino=151559 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075328.742:7656): avc: denied { search } for pid=35348 comm="node_exporter" name="host" dev="sda1" ino=1968013 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075257.331:7236): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.741:6867): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075241.673:7153): avc: denied { search } for pid=46227 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075425.961:8183): avc: denied { search } for pid=26353 comm="safe_timer" name="var" dev="sda1" ino=1442603 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075505.975:8612): avc: denied { search } for pid=26353 comm="safe_timer" name="var" dev="sda1" ino=1442603 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075578.738:8938): avc: denied { search } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=166036 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075502.644:8568): avc: denied { getattr } for pid=44080 comm="prometheus" laddr=172.21.15.80 lport=48926 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075480.060:8391): avc: denied { write } for pid=26330 comm="conmon" name="socket" dev="tmpfs" ino=16686 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075152.278:6667): avc: denied { read open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.738:7775): avc: denied { read } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075400.955:7992): avc: denied { read } for pid=26353 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075418.738:8106): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173156 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.741:7941): avc: denied { search } for pid=35348 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075317.999:7490): avc: denied { write } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.742:7797): avc: denied { search } for pid=35348 comm="node_exporter" name="host" dev="sda1" ino=1968013 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075178.940:6880): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075667.539:9353): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075154.353:6702): avc: denied { read } for pid=26728 comm="msgr-worker-1" path="pipe:[151559]" dev="pipefs" ino=151559 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075236.988:7055): avc: denied { write } for pid=26330 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075588.738:9023): avc: denied { search } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=166036 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075342.429:7735): avc: denied { search } for pid=34534 comm="ceph-crash" name="crash" dev="dm-4" ino=8388736 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075504.742:8607): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.738:8344): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173156 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.738:7771): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="overlay" ino=1968004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075328.742:7655): avc: denied { search } for pid=35348 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616075179.941:6897): avc: denied { write } for pid=26330 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075156.512:6720): avc: denied { search } for pid=57451 comm="safe_timer" name="/" dev="overlay" ino=1968244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c179,c314 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075168.739:6801): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075400.115:7983): avc: denied { search } for pid=26728 comm="safe_timer" name="usr" dev="sda1" ino=786698 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075321.662:7577): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=394794 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075172.917:6813): avc: denied { write } for pid=26728 comm="safe_timer" path="pipe:[151559]" dev="pipefs" ino=151559 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.739:9261): avc: denied { read } for pid=35348 comm="node_exporter" name="stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075644.010:9182): avc: denied { search } for pid=26330 comm="conmon" name="systemd" dev="tmpfs" ino=16404 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075648.739:9254): avc: denied { read } for pid=35348 comm="node_exporter" name="arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075151.905:6653): avc: denied { open } for pid=26330 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075649.454:9278): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.738:7774): avc: denied { read } for pid=35348 comm="node_exporter" name="fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075508.517:8624): avc: denied { getattr } for pid=26728 comm="mgr-fin" path="/usr/lib64/python3.6" dev="overlay" ino=922750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075236.278:7047): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075582.643:8965): avc: denied { getattr } for pid=44080 comm="prometheus" laddr=172.21.15.80 lport=53576 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075248.741:7183): avc: denied { search } for pid=35348 comm="node_exporter" name="kernel" dev="proc" ino=167394 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075417.014:8095): avc: denied { search } for pid=57451 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075261.344:7291): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075578.738:8940): avc: denied { search } for pid=35348 comm="node_exporter" name="fs" dev="proc" ino=171371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075506.278:8619): avc: denied { lock } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075508.742:8648): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075428.742:8207): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=167607 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075506.278:8622): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075258.738:7242): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/class/net" dev="sysfs" ino=21519 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075644.010:9179): avc: denied { write } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075236.277:7042): avc: denied { search } for pid=42010 comm="grafana-server" name="/" dev="overlay" ino=1968169 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.738:6851): avc: denied { search } for pid=35348 comm="node_exporter" name="fs" dev="proc" ino=171371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075263.278:7318): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075479.157:8376): avc: denied { open } for pid=42602 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075504.040:8602): avc: denied { search } for pid=57451 comm="safe_timer" name="/" dev="overlay" ino=1968244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c179,c314 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075260.473:7259): avc: denied { read } for pid=46227 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.738:9393): avc: denied { search } for pid=35348 comm="node_exporter" name="1" dev="proc" ino=167025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075421.399:8133): avc: denied { read } for pid=46227 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075587.005:9004): avc: denied { read } for pid=26728 comm="mgr-fin" name="localtime" dev="overlay" ino=394776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.741:6869): avc: denied { search } for pid=35348 comm="node_exporter" name="user" dev="tmpfs" ino=16726 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075325.942:7631): avc: denied { search } for pid=26353 comm="safe_timer" name="var" dev="sda1" ino=1442603 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075158.742:6758): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.739:6739): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075504.021:8596): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075664.044:9334): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075650.278:9285): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="sda1" ino=1444771 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075159.916:6768): avc: denied { open } for pid=26330 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075588.739:9035): avc: denied { getattr } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16396 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075236.278:7049): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/pool-detail.json" dev="sda1" ino=1444777 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075498.739:8535): avc: denied { search } for pid=35348 comm="node_exporter" name="user" dev="tmpfs" ino=16726 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075400.848:7989): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075504.021:8596): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075428.742:8211): avc: denied { search } for pid=35348 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.739:9252): avc: denied { read } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075512.644:8656): avc: denied { setopt } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075508.739:8631): avc: denied { search } for pid=35348 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075319.649:7549): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075587.277:9013): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075320.277:7558): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075508.739:8639): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075419.277:8123): avc: denied { search } for pid=42010 comm="grafana-server" name="etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075178.738:6855): avc: denied { read } for pid=35348 comm="node_exporter" name="arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075500.276:8544): avc: denied { search } for pid=42010 comm="grafana-server" name="etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075508.739:8638): avc: denied { read } for pid=35348 comm="node_exporter" name="cpuinfo_max_freq" dev="sysfs" ino=30846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075644.763:9212): avc: denied { search } for pid=42602 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c166,c597 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075337.748:7668): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075158.740:6754): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/class/net/eno1" dev="sysfs" ino=34869 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075152.644:6673): avc: denied { connect } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.739:7687): avc: denied { read } for pid=35348 comm="node_exporter" name="stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075400.033:7956): avc: denied { write } for pid=26330 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075158.738:6736): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="overlay" ino=1968004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075401.277:8000): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="sda1" ino=1444771 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075506.277:8617): avc: denied { search } for pid=42010 comm="grafana-server" name="/" dev="overlay" ino=1968169 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075562.644:8799): avc: denied { getattr } for pid=44080 comm="prometheus" path="/etc/hosts" dev="tmpfs" ino=190812 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075258.741:7254): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075342.644:7746): avc: denied { getattr } for pid=44080 comm="prometheus" laddr=172.21.15.80 lport=35247 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075644.277:9188): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075152.807:6678): avc: denied { search } for pid=26728 comm="safe_timer" name="libpod-7157ed55dd2bb6f82af892cdc2cadcbaa2c5f5b0b22e740b7b8d1bea0b6c44b3.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075263.277:7316): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075561.554:8780): avc: denied { search } for pid=42602 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c166,c597 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075267.367:7324): avc: denied { open } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.894:7948): avc: denied { search } for pid=57451 comm="safe_timer" name="/" dev="overlay" ino=1968244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c179,c314 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075260.495:7264): avc: denied { write } for pid=42602 comm="msgr-worker-0" laddr=172.21.15.80 lport=6802 faddr=172.21.15.97 fport=58264 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.940:6879): avc: denied { open } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075262.644:7306): avc: denied { create } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075164.278:6790): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075580.988:8952): avc: denied { search } for pid=26353 comm="safe_timer" name="var" dev="sda1" ino=1442603 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075406.151:8068): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075666.004:9339): avc: denied { search } for pid=26353 comm="safe_timer" name="/" dev="overlay" ino=1442592 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075248.739:7176): avc: denied { read } for pid=35348 comm="node_exporter" name="stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075643.418:9171): avc: denied { read } for pid=26728 comm="safe_timer" name="meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075503.946:8591): avc: denied { search } for pid=42602 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1968187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075578.737:8936): avc: denied { read } for pid=35348 comm="node_exporter" name="cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.739:9034): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=167607 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075178.940:6881): avc: denied { search } for pid=26728 comm="safe_timer" name="etc" dev="sda1" ino=1442620 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075178.739:6862): avc: denied { search } for pid=35348 comm="node_exporter" name="kernel" dev="proc" ino=167394 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075160.904:6774): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075318.739:7515): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.738:9384): avc: denied { read } for pid=35348 comm="node_exporter" name="dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075572.915:8930): avc: denied { search } for pid=46227 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968207 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c79,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.738:8347): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.742:8895): avc: denied { read } for pid=35348 comm="node_exporter" name="entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.940:6882): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.738:7919): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075240.926:7132): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075561.447:8777): avc: denied { write } for pid=42602 comm="msgr-worker-0" laddr=172.21.15.80 lport=6808 faddr=172.21.15.97 fport=56436 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075586.067:8991): avc: denied { write } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075408.738:8081): avc: denied { read } for pid=35348 comm="node_exporter" name="eno1" dev="sysfs" ino=34869 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.739:8353): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075508.739:8632): avc: denied { search } for pid=35348 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075428.740:8205): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075337.035:7659): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075178.757:6875): avc: denied { read } for pid=44080 comm="prometheus" path="pipe:[193696]" dev="pipefs" ino=193696 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075643.720:9176): avc: denied { search } for pid=57451 comm="safe_timer" name="/" dev="overlay" ino=1968244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c179,c314 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075410.049:8092): avc: denied { search } for pid=26330 comm="conmon" name="systemd" dev="tmpfs" ino=16404 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075317.838:7483): avc: denied { write } for pid=26728 comm="safe_timer" path="pipe:[151559]" dev="pipefs" ino=151559 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075562.644:8808): avc: denied { read } for pid=44080 comm="prometheus" path="socket:[385260]" dev="sockfs" ino=385260 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075671.004:9411): avc: denied { search } for pid=26353 comm="safe_timer" name="mon.smithi080" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.277:9373): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075236.278:7045): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075512.644:8661): avc: denied { read } for pid=44080 comm="prometheus" path="socket:[379167]" dev="sockfs" ino=379167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075512.644:8653): avc: denied { create } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075268.758:7353): avc: denied { append } for pid=44080 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.741:7791): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=167607 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075179.277:6889): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075421.963:8148): avc: denied { sendto } for pid=26330 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075572.644:8924): avc: denied { connect } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075480.060:8390): avc: denied { open } for pid=26330 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075500.766:8550): avc: denied { search } for pid=99158 comm="pgrep" name="26330" dev="proc" ino=132508 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075420.960:8130): avc: denied { read } for pid=26353 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075152.645:6677): avc: denied { append } for pid=44080 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075248.740:7179): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075662.011:9299): avc: denied { read } for pid=26728 comm="mgr-fin" name="localtime" dev="sda1" ino=394776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075344.277:7763): avc: denied { search } for pid=42010 comm="grafana-server" name="/" dev="overlay" ino=1968169 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075404.041:8045): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075328.742:7654): avc: denied { search } for pid=35348 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075647.815:9229): avc: denied { write } for pid=26728 comm="msgr-worker-1" laddr=172.21.15.80 lport=38434 faddr=172.21.15.80 fport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075400.321:7986): avc: denied { search } for pid=46227 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.739:8875): avc: denied { read } for pid=35348 comm="node_exporter" name="sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075320.940:7568): avc: denied { getattr } for pid=26353 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.738:7918): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075498.738:8532): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=30846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075662.278:9307): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075421.963:8148): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075261.344:7291): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.737:6847): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075268.739:7346): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="overlay" ino=1968004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075320.727:7564): avc: denied { read } for pid=92179 comm="pgrep" name="status" dev="proc" ino=152649 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.621:7915): avc: denied { write } for pid=26353 comm="safe_timer" path="pipe:[126774]" dev="pipefs" ino=126774 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075152.028:6661): avc: denied { search } for pid=46227 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075419.277:8123): avc: denied { search } for pid=42010 comm="grafana-server" name="/" dev="overlay" ino=1968169 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075337.035:7660): avc: denied { write } for pid=26330 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075582.644:8968): avc: denied { append } for pid=44080 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075586.013:8990): avc: denied { read } for pid=51959 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.739:7692): avc: denied { read } for pid=35348 comm="node_exporter" name="hwmon0" dev="sysfs" ino=35068 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075257.017:7221): avc: denied { write } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075398.521:7908): avc: denied { write } for pid=57451 comm="msgr-worker-2" laddr=172.21.15.80 lport=6830 faddr=172.21.15.97 fport=56944 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075152.278:6668): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-sync-overview.json" dev="sda1" ino=1444781 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075400.956:7994): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075502.644:8561): avc: denied { search } for pid=44080 comm="prometheus" name="/" dev="overlay" ino=1968129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.738:9382): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075268.740:7351): avc: denied { search } for pid=35348 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616075320.941:7569): avc: denied { search } for pid=26353 comm="safe_timer" name="mon.smithi080" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075479.277:8377): avc: denied { search } for pid=42010 comm="grafana-server" name="etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075565.987:8842): avc: denied { read } for pid=26353 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075504.754:8608): avc: denied { search } for pid=26728 comm="safe_timer" name="etc" dev="sda1" ino=1442620 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075262.030:7295): avc: denied { write } for pid=26353 comm="rstore_compact" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075342.041:7729): avc: denied { write } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075258.738:7239): avc: denied { search } for pid=35348 comm="node_exporter" name="7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075268.737:7328): avc: denied { signal } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075261.023:7283): avc: denied { write } for pid=26330 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075194.787:6919): avc: denied { getattr } for pid=44080 comm="prometheus" path="/prometheus/queries.active" dev="dm-4" ino=158 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075318.737:7496): avc: denied { read } for pid=35348 comm="node_exporter" name="stat" dev="proc" ino=173156 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.739:6742): avc: denied { read } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075182.643:6916): avc: denied { write } for pid=44080 comm="prometheus" path="socket:[296926]" dev="sockfs" ino=296926 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.739:8361): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/class/net/eno1" dev="sysfs" ino=34869 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075260.930:7274): avc: denied { search } for pid=26353 comm="safe_timer" name="/" dev="overlay" ino=1442592 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075479.278:8382): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075562.644:8799): avc: denied { search } for pid=44080 comm="prometheus" name="etc" dev="sda1" ino=1968146 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075576.495:8933): avc: denied { read } for pid=57451 comm="msgr-worker-1" path="pipe:[227464]" dev="pipefs" ino=227464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075643.720:9177): avc: denied { open } for pid=57451 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.740:9402): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075422.644:8168): avc: denied { setopt } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075582.643:8963): avc: denied { setopt } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075237.221:7061): avc: denied { open } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075498.705:8522): avc: denied { open } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075582.643:8967): avc: denied { read } for pid=44080 comm="prometheus" path="socket:[394433]" dev="sockfs" ino=394433 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075565.987:8843): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075236.278:7047): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.865:8903): avc: denied { search } for pid=42602 comm="safe_timer" name="/" dev="overlay" ino=1968187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c166,c597 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075258.740:7253): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075322.643:7596): avc: denied { read } for pid=44080 comm="prometheus" path="socket:[333815]" dev="sockfs" ino=333815 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075428.739:8192): avc: denied { read } for pid=35348 comm="node_exporter" name="file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.739:7095): avc: denied { read } for pid=35348 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075152.277:6662): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075400.103:7962): avc: denied { read } for pid=26728 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.049:9362): avc: denied { write } for pid=26330 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075586.067:8994): avc: denied { sendto } for pid=26330 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075663.528:9330): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075174.917:6828): avc: denied { search } for pid=26728 comm="safe_timer" name="/" dev="overlay" ino=1442611 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075422.278:8162): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075406.151:8069): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075236.278:7047): avc: denied { read open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075650.020:9279): avc: denied { write } for pid=26330 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075503.636:8586): avc: denied { write } for pid=26353 comm="msgr-worker-2" laddr=172.21.15.80 lport=3300 faddr=172.21.15.97 fport=47434 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075404.127:8053): avc: denied { search } for pid=26728 comm="safe_timer" name="diff" dev="sda1" ino=1442611 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075328.738:7636): avc: denied { search } for pid=35348 comm="node_exporter" name="7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.739:7688): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.740:8371): avc: denied { read } for pid=35348 comm="node_exporter" name="entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075401.277:7999): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075319.003:7524): avc: denied { write } for pid=26330 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075268.739:7342): avc: denied { search } for pid=35348 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075488.738:8493): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075484.114:8471): avc: denied { write } for pid=51959 comm="msgr-worker-2" laddr=172.21.15.80 lport=6822 faddr=172.21.15.97 fport=35966 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.991:7118): avc: denied { sendto } for pid=26330 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075508.739:8637): avc: denied { read } for pid=35348 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075586.067:8993): avc: denied { write } for pid=26330 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075647.454:9228): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075321.871:7579): avc: denied { write } for pid=75978 comm="msgr-worker-1" laddr=172.21.15.80 lport=60882 faddr=172.21.15.80 fport=6802 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075182.643:6913): avc: denied { setopt } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075236.278:7048): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="sda1" ino=1444771 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075502.644:8569): avc: denied { write } for pid=44080 comm="prometheus" path="socket:[369499]" dev="sockfs" ino=369499 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075505.975:8614): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075569.278:8909): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075428.739:8200): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/hwmon/hwmon0/uevent" dev="sysfs" ino=35065 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075570.987:8917): avc: denied { open } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.738:9027): avc: denied { search } for pid=35348 comm="node_exporter" name="fs" dev="proc" ino=171371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075482.066:8423): avc: denied { write } for pid=26330 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075562.031:8789): avc: denied { write } for pid=26330 comm="conmon" name="socket" dev="tmpfs" ino=16686 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075178.737:6849): avc: denied { read } for pid=35348 comm="node_exporter" name="stat" dev="proc" ino=4026532033 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.738:6857): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/net/eno1/addr_assign_type" dev="sysfs" ino=34877 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.739:9250): avc: denied { read } for pid=35348 comm="node_exporter" name="fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075241.246:7151): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075255.929:7208): avc: denied { read } for pid=26353 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075421.928:8143): avc: denied { search } for pid=57451 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c179,c314 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075408.738:8079): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/class/net/eno1" dev="sysfs" ino=34869 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075584.064:8971): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075583.121:8969): avc: denied { open } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075236.988:7056): avc: denied { write } for pid=26330 comm="conmon" name="socket" dev="tmpfs" ino=16686 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075260.715:7266): avc: denied { getattr } for pid=88987 comm="pgrep" path="/proc/26330" dev="proc" ino=132508 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075668.738:9388): avc: denied { read } for pid=35348 comm="node_exporter" name="ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075255.930:7213): avc: denied { read } for pid=26353 comm="rstore_compact" name="253:4" dev="sysfs" ino=45180 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075400.200:7985): avc: denied { append } for pid=42602 comm="log" path="/var/log/ceph/ceph-osd.0.log" dev="sda1" ino=395891 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075422.644:8165): avc: denied { search } for pid=44080 comm="prometheus" name="etc" dev="sda1" ino=1968146 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075257.017:7223): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075327.371:7633): avc: denied { getattr } for pid=26728 comm="mgr-fin" path="/usr/lib64/python3.6" dev="overlay" ino=922750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075319.649:7548): avc: denied { read } for pid=26728 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075179.941:6898): avc: denied { search } for pid=26330 comm="conmon" name="journal" dev="tmpfs" ino=16682 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075171.932:6806): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075500.766:8550): avc: denied { open } for pid=99158 comm="pgrep" path="/proc/26330/status" dev="proc" ino=132512 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075257.277:7228): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075238.739:7098): avc: denied { read } for pid=35348 comm="node_exporter" name="cpufreq" dev="sysfs" ino=30758 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075343.044:7752): avc: denied { write } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075179.941:6897): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075500.973:8554): avc: denied { read } for pid=26353 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075318.739:7517): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075153.596:6683): avc: denied { search } for pid=57451 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c179,c314 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.738:7920): avc: denied { read } for pid=35348 comm="node_exporter" name="stat" dev="proc" ino=173156 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075404.277:8058): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075320.727:7562): avc: denied { search } for pid=92179 comm="pgrep" name="26330" dev="proc" ino=132508 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075269.044:7354): avc: denied { write } for pid=26330 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075319.649:7550): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=394794 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075428.742:8210): avc: denied { search } for pid=35348 comm="node_exporter" name="user" dev="tmpfs" ino=16726 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.738:7088): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075506.278:8622): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075508.742:8647): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075262.032:7301): avc: denied { read } for pid=26353 comm="rocksdb:high0" name="000019.sst" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075508.739:8634): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075667.551:9354): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075592.644:9050): avc: denied { write } for pid=44080 comm="prometheus" path="socket:[392700]" dev="sockfs" ino=392700 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075505.722:8611): avc: denied { append } for pid=44080 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075440.925:8221): avc: denied { search } for pid=42602 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075155.910:6717): avc: denied { write } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075566.036:8844): avc: denied { write } for pid=26330 comm="conmon" name="socket" dev="tmpfs" ino=16686 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075585.815:8978): avc: denied { search } for pid=46227 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075319.003:7524): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075478.696:8334): avc: denied { read } for pid=42602 comm="msgr-worker-2" path="socket:[283732]" dev="sockfs" ino=283732 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075583.121:8970): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075643.430:9174): avc: denied { search } for pid=26728 comm="safe_timer" name="etc" dev="sda1" ino=1442620 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075422.278:8161): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075421.466:8136): avc: denied { write } for pid=57451 comm="msgr-worker-1" laddr=172.21.15.80 lport=6826 faddr=172.21.15.97 fport=43848 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075400.955:7991): avc: denied { search } for pid=26353 comm="safe_timer" name="var" dev="sda1" ino=1442603 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075421.928:8143): avc: denied { search } for pid=57451 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075645.422:9213): avc: denied { search } for pid=46227 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968207 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c79,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075151.905:6654): avc: denied { search } for pid=26330 comm="conmon" name="journal" dev="tmpfs" ino=16682 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075179.941:6896): avc: denied { read } for pid=26330 comm="conmon" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075162.644:6782): avc: denied { create } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.740:7787): avc: denied { read } for pid=35348 comm="node_exporter" name="hwmon0" dev="sysfs" ino=35068 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075236.405:7050): avc: denied { search } for pid=57451 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c179,c314 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.739:7782): avc: denied { read } for pid=35348 comm="node_exporter" name="xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075498.737:8528): avc: denied { read } for pid=35348 comm="node_exporter" name="fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.738:6737): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075496.692:8512): avc: denied { search } for pid=26728 comm="safe_timer" name="diff" dev="sda1" ino=1442611 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075671.004:9411): avc: denied { read } for pid=26353 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.739:9258): avc: denied { read } for pid=35348 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075581.121:8954): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075328.739:7640): avc: denied { read } for pid=35348 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075479.659:8387): avc: denied { search } for pid=51959 comm="safe_timer" name="/" dev="overlay" ino=1968225 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c631,c994 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075503.946:8591): avc: denied { search } for pid=42602 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075257.278:7229): avc: denied { lock } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075686.277:9440): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075508.740:8642): avc: denied { search } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=166036 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.738:9384): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/net/dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075151.976:6659): avc: denied { search } for pid=26728 comm="mgr-fin" name="diff" dev="sda1" ino=1442611 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075421.928:8143): avc: denied { open } for pid=57451 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075651.002:9287): avc: denied { dac_read_search } for pid=26353 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075348.741:7791): avc: denied { read } for pid=35348 comm="node_exporter" name="mounts" dev="proc" ino=167607 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075500.277:8546): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075322.747:7607): avc: denied { search } for pid=57451 comm="safe_timer" name="diff" dev="sda1" ino=1968244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075662.265:9303): avc: denied { search } for pid=42602 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c166,c597 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075686.277:9439): avc: denied { search } for pid=42010 comm="grafana-server" name="etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075179.941:6898): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075570.987:8919): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075421.963:8146): avc: denied { read } for pid=26330 comm="conmon" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075565.987:8842): avc: denied { open } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075402.115:8008): avc: denied { open } for pid=26728 comm="safe_timer" path="/proc/meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075581.121:8955): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075268.739:7344): avc: denied { search } for pid=35348 comm="node_exporter" name="kernel" dev="proc" ino=167394 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075262.644:7303): avc: denied { signal } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075318.739:7519): avc: denied { search } for pid=35348 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616075260.495:7260): avc: denied { read } for pid=42602 comm="msgr-worker-0" path="socket:[281718]" dev="sockfs" ino=281718 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075585.815:8982): avc: denied { write } for pid=46227 comm="msgr-worker-2" laddr=172.21.15.80 lport=47502 faddr=172.21.15.80 fport=6808 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075667.551:9355): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075400.033:7956): avc: denied { search } for pid=26330 comm="conmon" name="journal" dev="tmpfs" ino=16682 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075255.484:7198): avc: denied { write } for pid=46227 comm="msgr-worker-0" laddr=172.21.15.80 lport=6814 faddr=172.21.15.97 fport=43290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.760:9043): avc: denied { append } for pid=44080 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075256.986:7220): avc: denied { read } for pid=26728 comm="mgr-fin" name="localtime" dev="overlay" ino=394776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075422.644:8172): avc: denied { write } for pid=44080 comm="prometheus" path="socket:[361711]" dev="sockfs" ino=361711 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075561.447:8776): avc: denied { read } for pid=42602 comm="msgr-worker-0" path="socket:[242790]" dev="sockfs" ino=242790 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075261.344:7291): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075168.739:6796): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075248.739:7173): avc: denied { read } for pid=35348 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.739:9253): avc: denied { read } for pid=35348 comm="node_exporter" name="hwmon" dev="sysfs" ino=21483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075508.742:8645): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=167607 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075338.755:7704): avc: denied { append } for pid=44080 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075342.644:7742): avc: denied { create } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075408.737:8071): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.738:9024): avc: denied { read } for pid=35348 comm="node_exporter" name="arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075421.995:8153): avc: denied { getattr } for pid=26728 comm="mgr-fin" name="UTC" dev="sda1" ino=1311473 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075176.277:6840): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.278:7674): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075418.739:8110): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/fs/xfs/stats/stats" dev="sysfs" ino=45563 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.738:9386): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=21498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075320.727:7561): avc: denied { getattr } for pid=92179 comm="pgrep" path="/proc/26330" dev="proc" ino=132508 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075342.014:7725): avc: denied { write } for pid=78525 comm="safe_timer" path="pipe:[283727]" dev="pipefs" ino=283727 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075644.278:9193): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075503.636:8583): avc: denied { append } for pid=26353 comm="log" path="/var/log/ceph/ceph-mon.smithi080.log" dev="sda1" ino=395863 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075337.736:7666): avc: denied { open } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075341.824:7720): avc: denied { search } for pid=57451 comm="safe_timer" name="/" dev="overlay" ino=1968244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c179,c314 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075342.429:7734): avc: denied { getattr } for pid=34534 comm="ceph-crash" path="/var/lib/ceph/crash" dev="dm-4" ino=8388736 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075254.788:7191): avc: denied { getattr } for pid=44080 comm="prometheus" path="/prometheus/queries.active" dev="dm-4" ino=158 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075240.925:7129): avc: denied { dac_read_search } for pid=26353 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075318.738:7507): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=43630 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075343.784:7762): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075320.940:7568): avc: denied { search } for pid=26353 comm="safe_timer" name="/" dev="overlay" ino=1442592 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075152.278:6665): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075319.649:7548): avc: denied { search } for pid=26728 comm="safe_timer" name="libpod-7157ed55dd2bb6f82af892cdc2cadcbaa2c5f5b0b22e740b7b8d1bea0b6c44b3.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.049:9363): avc: denied { search } for pid=26330 comm="conmon" name="journal" dev="tmpfs" ino=16682 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075178.738:6858): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075151.587:6647): avc: denied { write } for pid=26353 comm="ms_dispatch" path="/var/lib/ceph/mon/ceph-smithi080/store.db/000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075479.278:8384): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/pool-overview.json" dev="sda1" ino=1444778 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075320.727:7562): avc: denied { read } for pid=92179 comm="pgrep" name="status" dev="proc" ino=132512 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075268.738:7337): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075321.421:7575): avc: denied { read } for pid=42602 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.739:7924): avc: denied { read } for pid=35348 comm="node_exporter" name="mc" dev="sysfs" ino=21498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075421.963:8148): avc: denied { search } for pid=26330 comm="conmon" name="systemd" dev="tmpfs" ino=16404 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075479.157:8375): avc: denied { search } for pid=42602 comm="safe_timer" name="/" dev="overlay" ino=1968187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c166,c597 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075261.023:7282): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075588.737:9019): avc: denied { search } for pid=35348 comm="node_exporter" name="7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075422.644:8173): avc: denied { read } for pid=44080 comm="prometheus" path="socket:[359594]" dev="sockfs" ino=359594 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075164.278:6792): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/hosts-overview.json" dev="overlay" ino=1444774 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075421.963:8145): avc: denied { use } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075260.473:7258): avc: denied { search } for pid=46227 comm="safe_timer" name="/" dev="overlay" ino=1968207 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c79,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075319.649:7550): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075500.276:8545): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075418.062:8099): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075584.276:8974): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075488.740:8500): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075162.297:6780): avc: denied { read } for pid=42602 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075179.276:6886): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075248.740:7180): avc: denied { search } for pid=35348 comm="node_exporter" name="user" dev="tmpfs" ino=16726 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075260.849:7271): avc: denied { search } for pid=42010 comm="grafana-server" name="var" dev="sda1" ino=1968178 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075238.740:7108): avc: denied { search } for pid=35348 comm="node_exporter" name="user" dev="tmpfs" ino=16726 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075585.989:8987): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075174.929:6831): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.843:6765): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075512.644:8652): avc: denied { search } for pid=44080 comm="prometheus" name="/" dev="overlay" ino=1968129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075563.277:8831): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075265.034:7320): avc: denied { write } for pid=26330 comm="conmon" name="socket" dev="tmpfs" ino=16686 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075320.276:7553): avc: denied { search } for pid=42010 comm="grafana-server" name="etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075504.021:8597): avc: denied { write } for pid=26330 comm="conmon" name="socket" dev="tmpfs" ino=16686 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075568.739:8879): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075341.760:7718): avc: denied { search } for pid=26728 comm="safe_timer" name="diff" dev="sda1" ino=1442611 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075398.739:7932): avc: denied { search } for pid=35348 comm="node_exporter" name="fs" dev="proc" ino=171371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075508.742:8646): avc: denied { getattr } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16396 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.039:8867): avc: denied { open } for pid=26330 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075668.277:9375): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-detail.json" dev="overlay" ino=1444779 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075425.961:8183): avc: denied { getattr } for pid=26353 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075236.988:7054): avc: denied { read } for pid=26330 comm="conmon" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075342.584:7738): avc: denied { search } for pid=46227 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968207 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c79,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075504.021:8597): avc: denied { search } for pid=26330 comm="conmon" name="journal" dev="tmpfs" ino=16682 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075260.849:7271): avc: denied { search } for pid=42010 comm="grafana-server" name="/" dev="overlay" ino=1968169 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075151.905:6654): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075158.739:6746): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075236.204:7038): avc: denied { write } for pid=75978 comm="msgr-worker-0" laddr=172.21.15.80 lport=37586 faddr=172.21.15.80 fport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075236.988:7055): avc: denied { open } for pid=26330 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075269.277:7357): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075504.754:8608): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=394794 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075644.010:9179): avc: denied { use } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075194.787:6918): avc: denied { read } for pid=44080 comm="prometheus" name="data" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075503.288:8581): avc: denied { write } for pid=51959 comm="msgr-worker-0" laddr=172.21.15.80 lport=49306 faddr=172.21.15.80 fport=6806 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.739:9262): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.739:7100): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/fs/xfs/dm-4/stats/stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.738:6852): avc: denied { search } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=166036 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075267.107:7321): avc: denied { getattr } for pid=26728 comm="mgr-fin" path="/usr/lib64/python3.6" dev="overlay" ino=922750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075400.115:7983): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=394794 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075236.278:7044): avc: denied { lock } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075403.306:8038): avc: denied { write } for pid=46227 comm="msgr-worker-2" laddr=172.21.15.80 lport=6816 faddr=172.21.15.97 fport=57848 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075400.033:7953): avc: denied { use } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075685.711:9437): avc: denied { append } for pid=44080 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.738:6735): avc: denied { signal } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075440.754:8220): avc: denied { read } for pid=95869 comm="pgrep" name="status" dev="proc" ino=152649 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075422.236:8155): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075421.889:8140): avc: denied { write } for pid=75978 comm="ceph_timer" path="pipe:[273321]" dev="pipefs" ino=273321 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075644.010:9182): avc: denied { search } for pid=26330 comm="conmon" name="journal" dev="tmpfs" ino=16682 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075508.739:8636): avc: denied { read } for pid=35348 comm="node_exporter" name="dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.740:7107): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075500.766:8551): avc: denied { getattr } for pid=99158 comm="pgrep" path="/proc/26353" dev="proc" ino=152605 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075175.936:6836): avc: denied { open } for pid=26330 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075648.740:9265): avc: denied { search } for pid=35348 comm="node_exporter" name="fs" dev="proc" ino=171371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075179.464:6894): avc: denied { search } for pid=46227 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968207 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c79,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075480.596:8397): avc: denied { open } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075494.792:8510): avc: denied { getattr } for pid=44080 comm="prometheus" path="/prometheus/queries.active" dev="dm-4" ino=158 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075663.528:9330): avc: denied { search } for pid=26728 comm="safe_timer" name="etc" dev="sda1" ino=1442620 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075482.644:8442): avc: denied { getattr } for pid=44080 comm="prometheus" laddr=172.21.15.80 lport=40751 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075479.277:8378): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075405.957:8065): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075408.737:8073): avc: denied { read } for pid=35348 comm="node_exporter" name="fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075569.277:8906): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075508.739:8630): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075328.740:7646): avc: denied { read } for pid=35348 comm="node_exporter" name="entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.760:9274): avc: denied { append } for pid=44080 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075479.278:8379): avc: denied { lock } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.740:6750): avc: denied { read } for pid=35348 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075152.277:6662): avc: denied { search } for pid=42010 comm="grafana-server" name="etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075672.643:9421): avc: denied { connect } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075319.649:7550): avc: denied { search } for pid=26728 comm="safe_timer" name="usr" dev="sda1" ino=786698 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075348.738:7777): avc: denied { read } for pid=35348 comm="node_exporter" name="arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075257.331:7235): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075418.738:8109): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/net/arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075504.021:8596): avc: denied { write } for pid=26330 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075257.278:7230): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075502.644:8563): avc: denied { create } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.739:6861): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075152.278:6667): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075268.740:7350): avc: denied { search } for pid=35348 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.739:9255): avc: denied { search } for pid=35348 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075518.740:8662): avc: denied { fork } for pid=35348 comm="node_exporter" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075508.739:8633): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075318.738:7502): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/net/arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075323.674:7622): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=394794 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075255.930:7212): avc: denied { getattr } for pid=26353 comm="rstore_compact" path="/sys/dev/block/253:4" dev="sysfs" ino=45180 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.738:8345): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/stat" dev="proc" ino=4026532033 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075667.551:9354): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.049:9360): avc: denied { write } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075563.278:8835): avc: denied { read open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.738:7090): avc: denied { read } for pid=35348 comm="node_exporter" name="fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.739:7928): avc: denied { read } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075257.278:7232): avc: denied { read open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075255.929:7208): avc: denied { search } for pid=26353 comm="safe_timer" name="mon.smithi080" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075643.148:9163): avc: denied { append } for pid=57451 comm="log" path="/var/log/ceph/ceph-osd.3.log" dev="sda1" ino=395896 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075175.905:6835): avc: denied { dac_read_search } for pid=26353 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075322.643:7591): avc: denied { create } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075500.766:8552): avc: denied { read } for pid=99158 comm="pgrep" name="status" dev="proc" ino=152649 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.739:7095): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075174.917:6829): avc: denied { read } for pid=26728 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075248.741:7184): avc: denied { read } for pid=35348 comm="node_exporter" name="file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075667.539:9351): avc: denied { search } for pid=26728 comm="safe_timer" name="diff" dev="sda1" ino=1442611 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075320.549:7560): avc: denied { append } for pid=51959 comm="log" path="/var/log/ceph/ceph-osd.2.log" dev="sda1" ino=395894 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075258.738:7243): avc: denied { read } for pid=35348 comm="node_exporter" name="hwmon" dev="sysfs" ino=21483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075328.739:7641): avc: denied { read } for pid=35348 comm="node_exporter" name="arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075418.739:8111): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/fs/xfs/dm-4/stats/stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075168.740:6802): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075400.955:7991): avc: denied { dac_read_search } for pid=26353 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075152.816:6680): avc: denied { signal } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075581.121:8954): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=394794 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075248.740:7179): avc: denied { getattr } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16396 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075479.278:8380): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075320.276:7553): avc: denied { getattr } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075502.644:8562): avc: denied { create } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075408.738:8080): avc: denied { read } for pid=35348 comm="node_exporter" name="entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075405.956:8063): avc: denied { dac_read_search } for pid=26353 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075664.044:9332): avc: denied { write } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075168.739:6800): avc: denied { search } for pid=35348 comm="node_exporter" name="fs" dev="proc" ino=171371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075586.067:8992): avc: denied { read } for pid=26330 comm="conmon" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075236.988:7056): avc: denied { search } for pid=26330 comm="conmon" name="journal" dev="tmpfs" ino=16682 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075502.644:8570): avc: denied { read } for pid=44080 comm="prometheus" path="socket:[375995]" dev="sockfs" ino=375995 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075479.278:8381): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075408.738:8076): avc: denied { read } for pid=35348 comm="node_exporter" name="xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075480.060:8391): avc: denied { sendto } for pid=26330 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075592.644:9045): avc: denied { create } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075176.277:6840): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075151.521:6641): avc: denied { append } for pid=51959 comm="log" path="/var/log/ceph/ceph-osd.2.log" dev="sda1" ino=395894 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075488.737:8490): avc: denied { read } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075488.738:8493): avc: denied { read } for pid=35348 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075319.003:7525): avc: denied { write } for pid=26330 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075422.644:8171): avc: denied { getattr } for pid=44080 comm="prometheus" laddr=172.21.15.80 lport=44866 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075179.276:6885): avc: denied { search } for pid=42010 comm="grafana-server" name="etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075428.739:8198): avc: denied { read } for pid=35348 comm="node_exporter" name="hwmon0" dev="sysfs" ino=35068 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075482.644:8437): avc: denied { search } for pid=44080 comm="prometheus" name="etc" dev="sda1" ino=1968146 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075478.738:8347): avc: denied { read } for pid=35348 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075566.464:8860): avc: denied { append } for pid=51959 comm="log" path="/var/log/ceph/ceph-osd.2.log" dev="sda1" ino=395894 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075342.429:7733): avc: denied { open } for pid=34534 comm="ceph-crash" path="/var/lib/ceph/crash" dev="dm-4" ino=8388736 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.739:7934): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075420.065:8126): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075480.971:8418): avc: denied { search } for pid=26353 comm="safe_timer" name="var" dev="sda1" ino=1442603 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075322.643:7593): avc: denied { connect } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.742:6760): avc: denied { search } for pid=35348 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075421.995:8153): avc: denied { getattr } for pid=26728 comm="mgr-fin" path="/usr/share/zoneinfo/UTC" dev="overlay" ino=1311473 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075161.976:6779): avc: denied { read } for pid=26728 comm="mgr-fin" name="localtime" dev="sda1" ino=394776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075158.741:6756): avc: denied { read } for pid=35348 comm="node_exporter" name="mounts" dev="proc" ino=167607 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075494.792:8509): avc: denied { open } for pid=44080 comm="prometheus" path="/prometheus" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075180.906:6903): avc: denied { search } for pid=26353 comm="safe_timer" name="var" dev="sda1" ino=1442603 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075666.004:9339): avc: denied { search } for pid=26353 comm="safe_timer" name="var" dev="sda1" ino=1442603 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075680.806:9431): avc: denied { read } for pid=105979 comm="pgrep" name="status" dev="proc" ino=152649 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075440.964:8224): avc: denied { read } for pid=26353 comm="msgr-worker-2" path="pipe:[126774]" dev="pipefs" ino=126774 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.049:9362): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075175.700:6833): avc: denied { signal } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075260.715:7267): avc: denied { search } for pid=88987 comm="pgrep" name="26330" dev="proc" ino=132508 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075341.824:7721): avc: denied { open } for pid=57451 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075345.946:7770): avc: denied { search } for pid=26353 comm="safe_timer" name="/" dev="overlay" ino=1442592 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075405.957:8064): avc: denied { search } for pid=26353 comm="safe_timer" name="mon.smithi080" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.373:9376): avc: denied { read } for pid=46227 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.843:6767): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075338.741:7698): avc: denied { getattr } for pid=35348 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075319.003:7525): avc: denied { write } for pid=26330 comm="conmon" name="socket" dev="tmpfs" ino=16686 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075421.846:8139): avc: denied { read } for pid=26728 comm="msgr-worker-0" path="socket:[281905]" dev="sockfs" ino=281905 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075482.277:8429): avc: denied { search } for pid=42010 comm="grafana-server" name="etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075238.739:7099): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/fs/xfs/stats/stats" dev="sysfs" ino=45563 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075508.739:8629): avc: denied { read } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075584.276:8973): avc: denied { search } for pid=42010 comm="grafana-server" name="/" dev="overlay" ino=1968169 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075236.277:7042): avc: denied { search } for pid=42010 comm="grafana-server" name="dashboards" dev="sda1" ino=1444769 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075398.741:7942): avc: denied { search } for pid=35348 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616075568.739:8883): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/fs/xfs/stats/stats" dev="sysfs" ino=45563 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.738:8870): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075278.739:7370): avc: denied { fork } for pid=35348 comm="node_exporter" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075662.644:9318): avc: denied { search } for pid=44080 comm="prometheus" name="etc" dev="sda1" ino=1968146 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075686.277:9439): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075341.991:7723): avc: denied { append } for pid=26728 comm="log" path="/var/log/ceph/ceph-mgr.smithi080.njtcci.log" dev="sda1" ino=395865 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075643.148:9168): avc: denied { write } for pid=42602 comm="msgr-worker-0" laddr=172.21.15.80 lport=49784 faddr=172.21.15.80 fport=6820 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075261.408:7293): avc: denied { search } for pid=57451 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c179,c314 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075174.098:6823): avc: denied { search } for pid=57451 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c179,c314 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075343.772:7760): avc: denied { open } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075400.033:7956): avc: denied { search } for pid=26330 comm="conmon" name="systemd" dev="tmpfs" ino=16404 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075567.060:8866): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075650.277:9283): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075563.278:8835): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075502.644:8565): avc: denied { setopt } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075249.003:7186): avc: denied { write } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.739:7101): avc: denied { search } for pid=35348 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075428.738:8186): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075484.069:8461): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075508.738:8628): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075318.738:7506): avc: denied { search } for pid=35348 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075321.005:7573): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075238.739:7097): avc: denied { read } for pid=35348 comm="node_exporter" name="mounts" dev="proc" ino=167607 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075248.739:7176): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/fs/xfs/dm-4/stats/stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075342.528:7736): avc: denied { search } for pid=51959 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075261.332:7290): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075667.551:9354): avc: denied { getattr } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075402.643:8018): avc: denied { read } for pid=44080 comm="prometheus" path="socket:[350990]" dev="sockfs" ino=350990 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075502.644:8566): avc: denied { connect } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075343.044:7754): avc: denied { write } for pid=26330 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075671.004:9410): avc: denied { search } for pid=26353 comm="safe_timer" name="var" dev="sda1" ino=1442603 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075152.278:6668): avc: denied { read } for pid=42010 comm="grafana-server" name="radosgw-sync-overview.json" dev="sda1" ino=1444781 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075238.991:7117): avc: denied { read } for pid=26330 comm="conmon" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075480.608:8399): avc: denied { search } for pid=26728 comm="safe_timer" name="etc" dev="sda1" ino=1442620 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075154.831:6708): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075179.941:6897): avc: denied { open } for pid=26330 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075480.596:8397): avc: denied { read } for pid=26728 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075646.001:9220): avc: denied { getattr } for pid=26353 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075151.905:6651): avc: denied { write } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075648.741:9273): avc: denied { search } for pid=35348 comm="node_exporter" name="host" dev="sda1" ino=1968013 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075328.741:7648): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.740:7106): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.738:7920): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173156 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.738:9032): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=43630 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075572.644:8922): avc: denied { create } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075400.103:7963): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075324.021:7624): avc: denied { open } for pid=42602 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075667.815:9356): avc: denied { write } for pid=26728 comm="msgr-worker-1" laddr=172.21.15.80 lport=38434 faddr=172.21.15.80 fport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075403.275:8031): avc: denied { read } for pid=26728 comm="msgr-worker-0" path="socket:[246868]" dev="sockfs" ino=246868 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075643.720:9177): avc: denied { read } for pid=57451 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.738:6851): avc: denied { read } for pid=35348 comm="node_exporter" name="file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075482.278:8431): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075337.033:7657): avc: denied { append } for pid=26353 comm="log" path="/var/log/ceph/ceph-mon.smithi080.log" dev="sda1" ino=395863 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075268.738:7335): avc: denied { read } for pid=35348 comm="node_exporter" name="mounts" dev="proc" ino=167607 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075680.806:9429): avc: denied { read } for pid=105979 comm="pgrep" name="status" dev="proc" ino=132512 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075158.741:6756): avc: denied { search } for pid=35348 comm="node_exporter" name="1" dev="proc" ino=167025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075422.236:8154): avc: denied { open } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075422.644:8169): avc: denied { connect } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.277:9373): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075563.278:8836): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-detail.json" dev="overlay" ino=1444779 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075152.644:6672): avc: denied { setopt } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075418.741:8118): avc: denied { getattr } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16396 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075643.430:9174): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075152.278:6667): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075400.033:7955): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075428.742:8211): avc: denied { search } for pid=35348 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075318.738:7511): avc: denied { read } for pid=35348 comm="node_exporter" name="file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075162.644:6781): avc: denied { create } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.739:7685): avc: denied { search } for pid=35348 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075240.994:7144): avc: denied { write } for pid=26330 comm="conmon" name="socket" dev="tmpfs" ino=16686 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075488.740:8504): avc: denied { search } for pid=35348 comm="node_exporter" name="kernel" dev="proc" ino=167394 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075418.739:8111): avc: denied { read } for pid=35348 comm="node_exporter" name="stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075328.739:7645): avc: denied { search } for pid=35348 comm="node_exporter" name="1" dev="proc" ino=167025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075398.738:7918): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="overlay" ino=1968004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075587.276:9009): avc: denied { search } for pid=42010 comm="grafana-server" name="/" dev="overlay" ino=1968169 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075268.739:7344): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075168.739:6798): avc: denied { read } for pid=35348 comm="node_exporter" name="entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075500.766:8549): avc: denied { getattr } for pid=99158 comm="pgrep" path="/proc/26330" dev="proc" ino=132508 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075592.644:9047): avc: denied { setopt } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.741:7943): avc: denied { search } for pid=35348 comm="node_exporter" name="host" dev="sda1" ino=1968013 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075485.972:8483): avc: denied { getattr } for pid=26353 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075152.278:6668): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-sync-overview.json" dev="overlay" ino=1444781 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075257.331:7235): avc: denied { search } for pid=26728 comm="safe_timer" name="etc" dev="sda1" ino=1442620 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075408.739:8088): avc: denied { search } for pid=35348 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075268.737:7331): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173156 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.739:7101): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075328.739:7643): avc: denied { read } for pid=35348 comm="node_exporter" name="file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075570.987:8917): avc: denied { read } for pid=26353 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.278:7673): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.761:8900): avc: denied { append } for pid=44080 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075587.277:9014): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075400.033:7953): avc: denied { write } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075501.999:8558): avc: denied { search } for pid=26728 comm="mgr-fin" name="usr" dev="sda1" ino=786698 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075398.739:7927): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075662.398:9310): avc: denied { read } for pid=26353 comm="msgr-worker-2" path="socket:[173169]" dev="sockfs" ino=173169 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075652.644:9296): avc: denied { read } for pid=44080 comm="prometheus" path="socket:[406616]" dev="sockfs" ino=406616 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075258.739:7251): avc: denied { search } for pid=35348 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616075498.745:8536): avc: denied { append } for pid=44080 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075342.528:7737): avc: denied { read } for pid=51959 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075567.048:8865): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.739:8882): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075262.030:7296): avc: denied { getattr } for pid=26353 comm="rstore_compact" path="/sys" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.740:9038): avc: denied { search } for pid=35348 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075260.495:7262): avc: denied { write } for pid=57451 comm="tp_osd_tp" path="pipe:[227463]" dev="pipefs" ino=227463 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075565.986:8841): avc: denied { getattr } for pid=26353 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.739:8367): avc: denied { search } for pid=35348 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075341.991:7724): avc: denied { getattr } for pid=26728 comm="mgr-fin" path="/usr/share/zoneinfo/UTC" dev="overlay" ino=1311473 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075680.806:9429): avc: denied { search } for pid=105979 comm="pgrep" name="26330" dev="proc" ino=132508 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075158.742:6760): avc: denied { search } for pid=35348 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075320.277:7558): avc: denied { read open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.049:9363): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075158.740:6755): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075317.991:7489): avc: denied { open } for pid=42602 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.738:7922): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075258.738:7241): avc: denied { search } for pid=35348 comm="node_exporter" name="1" dev="proc" ino=167025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075344.277:7764): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075343.044:7755): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075338.278:7676): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/osds-overview.json" dev="overlay" ino=1444776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075344.277:7763): avc: denied { getattr } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075428.738:8187): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075151.905:6654): avc: denied { write } for pid=26330 comm="conmon" name="socket" dev="tmpfs" ino=16686 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075178.940:6881): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=394794 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075562.031:8788): avc: denied { open } for pid=26330 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075585.989:8985): avc: denied { search } for pid=26353 comm="safe_timer" name="mon.smithi080" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.738:7919): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075505.975:8615): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075174.917:6829): avc: denied { open } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075580.626:8945): avc: denied { search } for pid=57451 comm="safe_timer" name="/" dev="overlay" ino=1968244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c179,c314 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.599:7084): avc: denied { write } for pid=26353 comm="safe_timer" path="pipe:[126774]" dev="pipefs" ino=126774 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075260.930:7274): avc: denied { search } for pid=26353 comm="safe_timer" name="var" dev="sda1" ino=1442603 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075325.016:7625): avc: denied { search } for pid=26330 comm="conmon" name="journal" dev="tmpfs" ino=16682 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075422.278:8162): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075643.418:9171): avc: denied { search } for pid=26728 comm="safe_timer" name="/" dev="overlay" ino=1442611 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.277:9371): avc: denied { lock } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.737:9379): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.739:9256): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=43630 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.738:8870): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="overlay" ino=1968004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075400.033:7956): avc: denied { sendto } for pid=26330 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075478.738:8346): avc: denied { read } for pid=35348 comm="node_exporter" name="fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075562.246:8796): avc: denied { search } for pid=57451 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c179,c314 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075563.024:8810): avc: denied { search } for pid=26728 comm="safe_timer" name="libpod-7157ed55dd2bb6f82af892cdc2cadcbaa2c5f5b0b22e740b7b8d1bea0b6c44b3.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075340.945:7713): avc: denied { read } for pid=26353 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075418.739:8114): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075479.278:8384): avc: denied { read } for pid=42010 comm="grafana-server" name="pool-overview.json" dev="sda1" ino=1444778 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075173.934:6819): avc: denied { sendto } for pid=26330 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075503.971:8592): avc: denied { search } for pid=42602 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075268.740:7349): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075317.914:7487): avc: denied { search } for pid=57451 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1968244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075237.233:7063): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075482.066:8423): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075323.783:7623): avc: denied { search } for pid=46227 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968207 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c79,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075268.739:7339): avc: denied { search } for pid=35348 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075488.740:8503): avc: denied { search } for pid=35348 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616075162.644:6787): avc: denied { read } for pid=44080 comm="prometheus" path="socket:[293756]" dev="sockfs" ino=293756 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.741:9041): avc: denied { read } for pid=35348 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075644.277:9189): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075343.784:7762): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075478.739:8363): avc: denied { getattr } for pid=35348 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075174.929:6832): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075323.277:7615): avc: denied { lock } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075562.644:8802): avc: denied { setopt } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.738:6852): avc: denied { search } for pid=35348 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075323.012:7612): avc: denied { read } for pid=26330 comm="conmon" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075668.373:9376): avc: denied { open } for pid=46227 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075162.915:6788): avc: denied { search } for pid=42602 comm="safe_timer" name="/" dev="overlay" ino=1968187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c166,c597 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075319.003:7525): avc: denied { search } for pid=26330 comm="conmon" name="systemd" dev="tmpfs" ino=16404 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075428.739:8201): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/fs/xfs/dm-4/stats/stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075328.739:7643): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075400.115:7983): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075428.739:8196): avc: denied { read } for pid=35348 comm="node_exporter" name="hwmon" dev="sysfs" ino=21483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075422.278:8162): avc: denied { read open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.739:8365): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075236.277:7042): avc: denied { getattr } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075666.004:9339): avc: denied { dac_read_search } for pid=26353 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075179.277:6888): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075248.738:7168): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="overlay" ino=1968004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075662.665:9323): avc: denied { read } for pid=57451 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075344.278:7766): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075318.739:7518): avc: denied { search } for pid=35348 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.740:9266): avc: denied { search } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=166036 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075155.910:6719): avc: denied { sendto } for pid=26330 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075563.278:8834): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075248.741:7184): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075585.815:8978): avc: denied { search } for pid=46227 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1968207 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075348.738:7772): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.738:7682): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="overlay" ino=1968004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.739:7696): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.738:6855): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/net/arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075662.398:9312): avc: denied { write } for pid=26353 comm="ms_dispatch" path="pipe:[126774]" dev="pipefs" ino=126774 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075263.277:7317): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075568.039:8868): avc: denied { write } for pid=26330 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075178.739:6862): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075645.655:9217): avc: denied { search } for pid=57451 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c179,c314 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075581.108:8953): avc: denied { search } for pid=26728 comm="safe_timer" name="/" dev="overlay" ino=1442611 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.739:9263): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075662.665:9322): avc: denied { search } for pid=57451 comm="safe_timer" name="/" dev="overlay" ino=1968244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c179,c314 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075663.516:9328): avc: denied { search } for pid=26728 comm="safe_timer" name="/" dev="overlay" ino=1442611 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"']

pass 5976979 2021-03-18 10:19:38 2021-03-18 13:24:31 2021-03-18 14:04:18 0:39:47 0:33:09 0:06:38 smithi master rhel 8.3 rados/thrash-erasure-code-isa/{arch/x86_64 ceph clusters/{fixed-2 openstack} mon_election/connectivity msgr-failures/few objectstore/bluestore-hybrid rados recovery-overrides/{default} supported-random-distro$/{rhel_8} thrashers/careful thrashosds-health workloads/ec-rados-plugin=isa-k=2-m=1} 2
pass 5976980 2021-03-18 10:19:39 2021-03-18 13:25:11 2021-03-18 13:58:36 0:33:25 0:25:55 0:07:30 smithi master rhel 8.3 rados/singleton/{all/osd-recovery mon_election/connectivity msgr-failures/many msgr/async-v2only objectstore/bluestore-comp-snappy rados supported-random-distro$/{rhel_8}} 1
pass 5976981 2021-03-18 10:19:40 2021-03-18 13:25:42 2021-03-18 14:00:19 0:34:37 0:23:34 0:11:03 smithi master ubuntu 20.04 rados/cephadm/with-work/{0-distro/ubuntu_20.04 fixed-2 mode/packaged mon_election/connectivity msgr/async-v2only start tasks/rados_python} 2
pass 5976982 2021-03-18 10:19:41 2021-03-18 13:26:42 2021-03-18 13:49:32 0:22:50 0:14:26 0:08:24 smithi master rhel 8.3 rados/thrash-erasure-code-shec/{ceph clusters/{fixed-4 openstack} mon_election/classic msgr-failures/osd-delay objectstore/bluestore-bitmap rados recovery-overrides/{more-async-recovery} supported-random-distro$/{rhel_8} thrashers/default thrashosds-health workloads/ec-rados-plugin=shec-k=4-m=3-c=2} 4
pass 5976983 2021-03-18 10:19:42 2021-03-18 13:28:23 2021-03-18 13:48:17 0:19:54 0:10:43 0:09:11 smithi master centos 8.3 rados/standalone/{mon_election/connectivity supported-random-distro$/{centos_8} workloads/mgr} 1
pass 5976984 2021-03-18 10:19:43 2021-03-18 13:29:23 2021-03-18 14:37:04 1:07:41 0:58:04 0:09:37 smithi master centos 8.2 rados/cephadm/thrash/{0-distro/centos_8.2_kubic_stable 1-start 2-thrash 3-tasks/rados_api_tests fixed-2 msgr/async root} 2
pass 5976985 2021-03-18 10:19:44 2021-03-18 13:29:54 2021-03-18 13:45:51 0:15:57 0:05:59 0:09:58 smithi master ubuntu 18.04 rados/singleton-nomsgr/{all/export-after-evict mon_election/classic rados supported-random-distro$/{ubuntu_latest}} 1
pass 5976986 2021-03-18 10:19:45 2021-03-18 13:30:14 2021-03-18 13:57:30 0:27:16 0:17:06 0:10:10 smithi master ubuntu 18.04 rados/perf/{ceph mon_election/connectivity objectstore/bluestore-basic-min-osd-mem-target openstack scheduler/dmclock_1Shard_16Threads settings/optimized ubuntu_18.04 workloads/cosbench_64K_read_write} 1
pass 5976987 2021-03-18 10:19:46 2021-03-18 13:30:14 2021-03-18 13:51:10 0:20:56 0:15:10 0:05:46 smithi master rhel 8.3 rados/thrash/{0-size-min-size-overrides/3-size-2-min-size 1-pg-log-overrides/short_pg_log 2-recovery-overrides/{more-async-recovery} backoff/normal ceph clusters/{fixed-2 openstack} crc-failures/default d-balancer/on mon_election/connectivity msgr-failures/osd-delay msgr/async-v2only objectstore/bluestore-comp-snappy rados supported-random-distro$/{rhel_8} thrashers/none thrashosds-health workloads/redirect} 2
pass 5976988 2021-03-18 10:19:47 2021-03-18 13:30:14 2021-03-18 13:47:34 0:17:20 0:07:52 0:09:28 smithi master ubuntu 20.04 rados/cephadm/workunits/{0-distro/ubuntu_20.04_kubic_testing mon_election/connectivity task/test_adoption} 1
pass 5976989 2021-03-18 10:19:48 2021-03-18 13:30:35 2021-03-18 13:47:43 0:17:08 0:08:07 0:09:01 smithi master centos 8.3 rados/singleton/{all/peer mon_election/classic msgr-failures/none msgr/async objectstore/bluestore-comp-zlib rados supported-random-distro$/{centos_8}} 1
pass 5976990 2021-03-18 10:19:49 2021-03-18 13:30:35 2021-03-18 13:52:29 0:21:54 0:10:23 0:11:31 smithi master centos 8.3 rados/mgr/{clusters/{2-node-mgr} debug/mgr mon_election/connectivity objectstore/bluestore-comp-zstd supported-random-distro$/{centos_8} tasks/prometheus} 2
pass 5976991 2021-03-18 10:19:50 2021-03-18 13:30:45 2021-03-18 13:48:29 0:17:44 0:07:13 0:10:31 smithi master centos 8.3 rados/multimon/{clusters/6 mon_election/classic msgr-failures/many msgr/async no_pools objectstore/bluestore-comp-zlib rados supported-random-distro$/{centos_8} tasks/mon_clock_with_skews} 2
pass 5976992 2021-03-18 10:19:50 2021-03-18 13:31:06 2021-03-18 13:55:20 0:24:14 0:12:57 0:11:17 smithi master ubuntu 18.04 rados/objectstore/{backends/keyvaluedb supported-random-distro$/{ubuntu_latest}} 1
pass 5976993 2021-03-18 10:19:51 2021-03-18 13:31:56 2021-03-18 13:59:00 0:27:04 0:18:43 0:08:21 smithi master centos 8.3 rados/valgrind-leaks/{1-start 2-inject-leak/osd centos_latest} 1
pass 5976994 2021-03-18 10:19:52 2021-03-18 13:31:56 2021-03-18 14:03:01 0:31:05 0:16:06 0:14:59 smithi master ubuntu 20.04 rados/cephadm/smoke/{distro/ubuntu_20.04 fixed-2 mon_election/connectivity start} 2
pass 5976995 2021-03-18 10:19:53 2021-03-18 13:49:52 408 smithi master ubuntu 18.04 rados/singleton-nomsgr/{all/full-tiering mon_election/connectivity rados supported-random-distro$/{ubuntu_latest}} 1
pass 5976996 2021-03-18 10:19:54 2021-03-18 13:34:38 2021-03-18 14:13:54 0:39:16 0:26:02 0:13:14 smithi master ubuntu 20.04 rados/cephadm/upgrade/{1-start-distro/1-start-ubuntu_20.04 2-repo_digest/repo_digest 3-start-upgrade 4-wait mon_election/connectivity} 2
pass 5976997 2021-03-18 10:19:55 2021-03-18 13:35:48 2021-03-18 14:01:32 0:25:44 0:15:02 0:10:42 smithi master ubuntu 18.04 rados/thrash/{0-size-min-size-overrides/2-size-2-min-size 1-pg-log-overrides/normal_pg_log 2-recovery-overrides/{default} backoff/peering ceph clusters/{fixed-2 openstack} crc-failures/bad_map_crc_failure d-balancer/crush-compat mon_election/classic msgr-failures/fastclose msgr/async objectstore/bluestore-comp-zlib rados supported-random-distro$/{ubuntu_latest} thrashers/pggrow thrashosds-health workloads/redirect_promote_tests} 2
pass 5976998 2021-03-18 10:19:56 2021-03-18 13:35:58 2021-03-18 14:10:17 0:34:19 0:24:15 0:10:04 smithi master centos 8.3 rados/thrash-erasure-code-overwrites/{bluestore-bitmap ceph clusters/{fixed-2 openstack} fast/normal mon_election/connectivity msgr-failures/osd-delay rados recovery-overrides/{more-active-recovery} supported-random-distro$/{centos_8} thrashers/minsize_recovery thrashosds-health workloads/ec-pool-snaps-few-objects-overwrites} 2
pass 5976999 2021-03-18 10:19:57 2021-03-18 13:37:39 2021-03-18 13:57:17 0:19:38 0:08:26 0:11:12 smithi master ubuntu 18.04 rados/singleton/{all/pg-autoscaler-progress-off mon_election/connectivity msgr-failures/few msgr/async-v1only objectstore/bluestore-comp-zstd rados supported-random-distro$/{ubuntu_latest}} 2
pass 5977000 2021-03-18 10:19:58 2021-03-18 13:37:49 2021-03-18 14:25:30 0:47:41 0:35:46 0:11:55 smithi master ubuntu 20.04 rados/cephadm/with-work/{0-distro/ubuntu_20.04_kubic_stable fixed-2 mode/root mon_election/classic msgr/async start tasks/rados_api_tests} 2
fail 5977001 2021-03-18 10:19:59 2021-03-18 13:40:20 2021-03-18 14:01:20 0:21:00 0:11:36 0:09:24 smithi master ubuntu 20.04 rados/cephadm/dashboard/{0-distro/ubuntu_20.04_kubic_stable task/test_e2e} 2
Failure Reason:

Command failed on smithi052 with status 1: 'sudo /home/ubuntu/cephtest/cephadm --image quay.ceph.io/ceph-ci/ceph:0d3df9b9599b6294f204ae84913a36061e78fb76 shell -c /etc/ceph/ceph.conf -k /etc/ceph/ceph.client.admin.keyring --fsid c4e7ad76-87f1-11eb-9099-001a4aab830c -- ceph orch host ls --format=json'

pass 5977002 2021-03-18 10:20:00 2021-03-18 13:40:20 2021-03-18 13:59:59 0:19:39 0:09:24 0:10:15 smithi master centos 8.3 rados/singleton-nomsgr/{all/health-warnings mon_election/classic rados supported-random-distro$/{centos_8}} 1
pass 5977003 2021-03-18 10:20:00 2021-03-18 13:40:50 2021-03-18 14:02:06 0:21:16 0:14:30 0:06:46 smithi master rhel 8.3 rados/basic/{ceph clusters/{fixed-2 openstack} mon_election/connectivity msgr-failures/many msgr/async objectstore/bluestore-comp-zlib rados supported-random-distro$/{rhel_8} tasks/scrub_test} 2
pass 5977004 2021-03-18 10:20:02 2021-03-18 13:41:01 2021-03-18 14:16:55 0:35:54 0:25:25 0:10:29 smithi master ubuntu 18.04 rados/thrash-old-clients/{0-size-min-size-overrides/3-size-2-min-size 1-install/mimic backoff/peering_and_degraded ceph clusters/{openstack three-plus-one} d-balancer/crush-compat distro$/{ubuntu_18.04} mon_election/classic msgr-failures/few rados thrashers/morepggrow thrashosds-health workloads/rbd_cls} 3
pass 5977005 2021-03-18 10:20:02 2021-03-18 13:41:31 2021-03-18 14:09:38 0:28:07 0:16:42 0:11:25 smithi master ubuntu 20.04 rados/cephadm/smoke/{distro/ubuntu_20.04_kubic_stable fixed-2 mon_election/classic start} 2
pass 5977006 2021-03-18 10:20:03 2021-03-18 13:42:01 2021-03-18 14:03:03 0:21:02 0:09:09 0:11:53 smithi master centos 8.3 rados/singleton/{all/pg-autoscaler mon_election/classic msgr-failures/many msgr/async-v2only objectstore/bluestore-hybrid rados supported-random-distro$/{centos_8}} 2
pass 5977007 2021-03-18 10:20:04 2021-03-18 13:43:12 2021-03-18 14:07:15 0:24:03 0:17:26 0:06:37 smithi master rhel 8.3 rados/thrash/{0-size-min-size-overrides/3-size-2-min-size 1-pg-log-overrides/short_pg_log 2-recovery-overrides/{more-partial-recovery} backoff/peering_and_degraded ceph clusters/{fixed-2 openstack} crc-failures/default d-balancer/on mon_election/connectivity msgr-failures/few msgr/async-v1only objectstore/bluestore-comp-zstd rados supported-random-distro$/{rhel_8} thrashers/careful thrashosds-health workloads/redirect_set_object} 2
pass 5977008 2021-03-18 10:20:05 2021-03-18 13:44:12 2021-03-18 14:11:52 0:27:40 0:18:39 0:09:01 smithi master ubuntu 18.04 rados/perf/{ceph mon_election/classic objectstore/bluestore-bitmap openstack scheduler/dmclock_default_shards settings/optimized ubuntu_18.04 workloads/cosbench_64K_write} 1
pass 5977009 2021-03-18 10:20:06 2021-03-18 13:44:12 2021-03-18 14:23:37 0:39:25 0:29:56 0:09:29 smithi master centos 8.3 rados/standalone/{mon_election/classic supported-random-distro$/{centos_8} workloads/misc} 1
pass 5977010 2021-03-18 10:20:07 2021-03-18 13:44:33 2021-03-18 14:24:02 0:39:29 0:31:55 0:07:34 smithi master rhel 8.3 rados/monthrash/{ceph clusters/9-mons mon_election/classic msgr-failures/mon-delay msgr/async-v2only objectstore/bluestore-hybrid rados supported-random-distro$/{rhel_8} thrashers/force-sync-many workloads/snaps-few-objects} 2
pass 5977011 2021-03-18 10:20:08 2021-03-18 13:44:43 2021-03-18 14:13:38 0:28:55 0:23:09 0:05:46 smithi master rhel 8.3 rados/thrash-erasure-code/{ceph clusters/{fixed-2 openstack} fast/fast mon_election/connectivity msgr-failures/few objectstore/bluestore-hybrid rados recovery-overrides/{more-active-recovery} supported-random-distro$/{rhel_8} thrashers/minsize_recovery thrashosds-health workloads/ec-small-objects} 2
pass 5977012 2021-03-18 10:20:09 2021-03-18 13:44:43 2021-03-18 14:21:33 0:36:50 0:25:27 0:11:23 smithi master ubuntu 18.04 rados/thrash-erasure-code-big/{ceph cluster/{12-osds openstack} mon_election/classic msgr-failures/fastclose objectstore/bluestore-hybrid rados recovery-overrides/{more-partial-recovery} supported-random-distro$/{ubuntu_latest} thrashers/pggrow thrashosds-health workloads/ec-rados-plugin=jerasure-k=4-m=2} 3
pass 5977013 2021-03-18 10:20:10 2021-03-18 13:45:54 2021-03-18 16:18:22 2:32:28 2:20:59 0:11:29 smithi master centos 8.3 rados/verify/{centos_latest ceph clusters/{fixed-2 openstack} d-thrash/default/{default thrashosds-health} mon_election/classic msgr-failures/few msgr/async-v2only objectstore/bluestore-hybrid rados tasks/rados_cls_all validater/valgrind} 2
pass 5977014 2021-03-18 10:20:11 2021-03-18 13:46:54 2021-03-18 14:24:34 0:37:40 0:26:42 0:10:58 smithi master ubuntu 18.04 rados/thrash-erasure-code-isa/{arch/x86_64 ceph clusters/{fixed-2 openstack} mon_election/classic msgr-failures/osd-delay objectstore/bluestore-low-osd-mem-target rados recovery-overrides/{more-async-partial-recovery} supported-random-distro$/{ubuntu_latest} thrashers/default thrashosds-health workloads/ec-rados-plugin=isa-k=2-m=1} 2
pass 5977015 2021-03-18 10:20:12 2021-03-18 13:47:05 2021-03-18 14:15:11 0:28:06 0:17:01 0:11:05 smithi master ubuntu 18.04 rados/cephadm/smoke-roleless/{1-start 2-services/{basic rgw} 3-final distro/ubuntu_18.04} 2
pass 5977016 2021-03-18 10:20:13 2021-03-18 13:47:45 2021-03-18 14:11:11 0:23:26 0:10:23 0:13:03 smithi master ubuntu 18.04 rados/thrash-erasure-code-shec/{ceph clusters/{fixed-4 openstack} mon_election/connectivity msgr-failures/fastclose objectstore/bluestore-comp-lz4 rados recovery-overrides/{more-async-recovery} supported-random-distro$/{ubuntu_latest} thrashers/careful thrashosds-health workloads/ec-rados-plugin=shec-k=4-m=3-c=2} 4
pass 5977017 2021-03-18 10:20:14 2021-03-18 13:49:36 2021-03-18 14:05:12 0:15:36 0:06:44 0:08:52 smithi master ubuntu 18.04 rados/singleton-nomsgr/{all/large-omap-object-warnings mon_election/connectivity rados supported-random-distro$/{ubuntu_latest}} 1
pass 5977018 2021-03-18 10:20:15 2021-03-18 13:49:36 2021-03-18 14:18:31 0:28:55 0:19:44 0:09:11 smithi master centos 8.2 rados/cephadm/workunits/{0-distro/centos_8.2_kubic_stable mon_election/classic task/test_cephadm} 1
pass 5977019 2021-03-18 10:20:16 2021-03-18 13:49:37 2021-03-18 14:06:44 0:17:07 0:10:29 0:06:38 smithi master rhel 8.3 rados/singleton/{all/pg-removal-interruption mon_election/connectivity msgr-failures/none msgr/async objectstore/bluestore-low-osd-mem-target rados supported-random-distro$/{rhel_8}} 1
pass 5977020 2021-03-18 10:20:17 2021-03-18 13:49:37 2021-03-18 14:15:20 0:25:43 0:19:14 0:06:29 smithi master rhel 8.3 rados/thrash/{0-size-min-size-overrides/2-size-2-min-size 1-pg-log-overrides/normal_pg_log 2-recovery-overrides/{more-active-recovery} backoff/normal ceph clusters/{fixed-2 openstack} crc-failures/bad_map_crc_failure d-balancer/crush-compat mon_election/classic msgr-failures/osd-delay msgr/async-v2only objectstore/bluestore-hybrid rados supported-random-distro$/{rhel_8} thrashers/default thrashosds-health workloads/set-chunks-read} 2
pass 5977021 2021-03-18 10:20:18 2021-03-18 13:49:37 2021-03-18 14:16:32 0:26:55 0:15:49 0:11:06 smithi master ubuntu 20.04 rados/cephadm/smoke/{distro/ubuntu_20.04_kubic_testing fixed-2 mon_election/connectivity start} 2
pass 5977022 2021-03-18 10:20:19 2021-03-18 13:50:58 2021-03-18 14:26:53 0:35:55 0:25:24 0:10:31 smithi master rados/upgrade/pacific-x/rgw-multisite/{clusters frontend overrides realm tasks upgrade/secondary} 2
pass 5977023 2021-03-18 10:20:20 2021-03-18 13:51:18 2021-03-18 14:08:57 0:17:39 0:11:27 0:06:12 smithi master rhel 8.3 rados/mgr/{clusters/{2-node-mgr} debug/mgr mon_election/classic objectstore/bluestore-hybrid supported-random-distro$/{rhel_8} tasks/workunits} 2
pass 5977024 2021-03-18 10:20:20 2021-03-18 13:51:38 2021-03-18 15:10:54 1:19:16 1:07:09 0:12:07 smithi master ubuntu 20.04 rados/cephadm/thrash/{0-distro/ubuntu_20.04_kubic_stable 1-start 2-thrash 3-tasks/radosbench fixed-2 msgr/async-v1only root} 2
pass 5977025 2021-03-18 10:20:21 2021-03-18 13:52:39 2021-03-18 14:15:45 0:23:06 0:11:26 0:11:40 smithi master ubuntu 18.04 rados/multimon/{clusters/9 mon_election/connectivity msgr-failures/few msgr/async-v1only no_pools objectstore/bluestore-comp-zstd rados supported-random-distro$/{ubuntu_latest} tasks/mon_recovery} 3
pass 5977026 2021-03-18 10:20:22 2021-03-18 13:53:09 2021-03-18 14:09:52 0:16:43 0:07:49 0:08:54 smithi master ubuntu 18.04 rados/singleton-nomsgr/{all/lazy_omap_stats_output mon_election/classic rados supported-random-distro$/{ubuntu_latest}} 1
pass 5977027 2021-03-18 10:20:23 2021-03-18 13:53:10 2021-03-18 14:14:34 0:21:24 0:12:29 0:08:55 smithi master ubuntu 18.04 rados/singleton/{all/radostool mon_election/classic msgr-failures/few msgr/async-v1only objectstore/bluestore-stupid rados supported-random-distro$/{ubuntu_latest}} 1
pass 5977028 2021-03-18 10:20:24 2021-03-18 13:53:10 2021-03-18 14:27:07 0:33:57 0:23:38 0:10:19 smithi master ubuntu 20.04 rados/cephadm/with-work/{0-distro/ubuntu_20.04_kubic_testing fixed-2 mode/packaged mon_election/connectivity msgr/async-v1only start tasks/rados_python} 2
pass 5977029 2021-03-18 10:20:25 2021-03-18 13:53:40 2021-03-18 14:26:23 0:32:43 0:21:15 0:11:28 smithi master centos 8.3 rados/thrash/{0-size-min-size-overrides/3-size-2-min-size 1-pg-log-overrides/short_pg_log 2-recovery-overrides/{default} backoff/peering ceph clusters/{fixed-2 openstack} crc-failures/default d-balancer/on mon_election/connectivity msgr-failures/fastclose msgr/async objectstore/bluestore-low-osd-mem-target rados supported-random-distro$/{centos_8} thrashers/mapgap thrashosds-health workloads/small-objects-balanced} 2
pass 5977030 2021-03-18 10:20:26 2021-03-18 13:55:31 2021-03-18 14:18:57 0:23:26 0:12:15 0:11:11 smithi master ubuntu 18.04 rados/perf/{ceph mon_election/connectivity objectstore/bluestore-comp openstack scheduler/wpq_default_shards settings/optimized ubuntu_18.04 workloads/fio_4K_rand_read} 1
pass 5977031 2021-03-18 10:20:27 2021-03-18 13:57:21 2021-03-18 14:30:34 0:33:13 0:26:35 0:06:38 smithi master rhel 8.3 rados/objectstore/{backends/objectcacher-stress supported-random-distro$/{rhel_8}} 1
pass 5977032 2021-03-18 10:20:28 2021-03-18 13:57:22 2021-03-18 14:43:17 0:45:55 0:35:44 0:10:11 smithi master centos 8.2 rados/cephadm/smoke/{distro/centos_8.2_kubic_stable fixed-2 mon_election/connectivity start} 2
pass 5977033 2021-03-18 10:20:29 2021-03-18 13:58:12 2021-03-18 14:53:30 0:55:18 0:45:39 0:09:39 smithi master ubuntu 18.04 rados/standalone/{mon_election/connectivity supported-random-distro$/{ubuntu_latest} workloads/mon} 1
pass 5977034 2021-03-18 10:20:30 2021-03-18 13:58:12 2021-03-18 14:33:14 0:35:02 0:28:36 0:06:26 smithi master rhel 8.3 rados/basic/{ceph clusters/{fixed-2 openstack} mon_election/classic msgr-failures/few msgr/async-v1only objectstore/bluestore-comp-zstd rados supported-random-distro$/{rhel_8} tasks/rados_api_tests} 2
pass 5977035 2021-03-18 10:20:31 2021-03-18 13:58:43 2021-03-18 14:28:26 0:29:43 0:18:11 0:11:32 smithi master ubuntu 20.04 rados/cephadm/smoke-roleless/{1-start 2-services/{basic rgw} 3-final distro/ubuntu_20.04} 2
pass 5977036 2021-03-18 10:20:32 2021-03-18 13:59:03 2021-03-18 14:17:47 0:18:44 0:09:47 0:08:57 smithi master centos 8.3 rados/singleton-nomsgr/{all/librados_hello_world mon_election/connectivity rados supported-random-distro$/{centos_8}} 1
pass 5977037 2021-03-18 10:20:32 2021-03-18 13:59:13 2021-03-18 14:25:32 0:26:19 0:16:03 0:10:16 smithi master ubuntu 18.04 rados/singleton/{all/random-eio mon_election/connectivity msgr-failures/many msgr/async-v2only objectstore/filestore-xfs rados supported-random-distro$/{ubuntu_latest}} 2
pass 5977038 2021-03-18 10:20:33 2021-03-18 13:59:43 2021-03-18 14:44:03 0:44:20 0:33:02 0:11:18 smithi master ubuntu 18.04 rados/thrash-old-clients/{0-size-min-size-overrides/2-size-2-min-size 1-install/nautilus-v1only backoff/normal ceph clusters/{openstack three-plus-one} d-balancer/on distro$/{ubuntu_18.04} mon_election/connectivity msgr-failures/osd-delay rados thrashers/none thrashosds-health workloads/snaps-few-objects} 3
pass 5977039 2021-03-18 10:20:34 2021-03-18 14:00:24 2021-03-18 14:33:52 0:33:28 0:22:10 0:11:18 smithi master centos 8.3 rados/cephadm/upgrade/{1-start-distro/1-start-centos_8.3-octopus 2-repo_digest/repo_digest 3-start-upgrade 4-wait mon_election/classic} 2
pass 5977040 2021-03-18 10:20:35 2021-03-18 14:01:24 2021-03-18 14:32:38 0:31:14 0:24:27 0:06:47 smithi master rhel 8.3 rados/thrash/{0-size-min-size-overrides/2-size-2-min-size 1-pg-log-overrides/normal_pg_log 2-recovery-overrides/{default} backoff/peering_and_degraded ceph clusters/{fixed-2 openstack} crc-failures/bad_map_crc_failure d-balancer/crush-compat mon_election/classic msgr-failures/few msgr/async-v1only objectstore/bluestore-stupid rados supported-random-distro$/{rhel_8} thrashers/morepggrow thrashosds-health workloads/small-objects-localized} 2
dead 5977041 2021-03-18 10:20:36 2021-03-18 14:01:35 2021-03-18 14:02:57 0:01:22 smithi master ubuntu 20.04 rados/cephadm/workunits/{0-distro/ubuntu_20.04_kubic_stable mon_election/connectivity task/test_cephadm_repos} 1
Failure Reason:

Error reimaging machines: Failed to power on smithi029

pass 5977042 2021-03-18 10:20:37 2021-03-18 14:01:35 2021-03-18 14:29:19 0:27:44 0:20:00 0:07:44 smithi master rhel 8.3 rados/monthrash/{ceph clusters/3-mons mon_election/connectivity msgr-failures/few msgr/async objectstore/bluestore-low-osd-mem-target rados supported-random-distro$/{rhel_8} thrashers/many workloads/pool-create-delete} 2
pass 5977043 2021-03-18 10:20:38 2021-03-18 14:02:15 2021-03-18 15:00:41 0:58:26 0:47:42 0:10:44 smithi master ubuntu 18.04 rados/thrash-erasure-code/{ceph clusters/{fixed-2 openstack} fast/normal mon_election/classic msgr-failures/osd-delay objectstore/bluestore-low-osd-mem-target rados recovery-overrides/{default} supported-random-distro$/{ubuntu_latest} thrashers/morepggrow thrashosds-health workloads/ec-rados-plugin=clay-k=4-m=2} 2
pass 5977044 2021-03-18 10:20:39 2021-03-18 14:02:36 2021-03-18 14:25:50 0:23:14 0:09:12 0:14:02 smithi master ubuntu 18.04 rados/thrash-erasure-code-big/{ceph cluster/{12-osds openstack} mon_election/connectivity msgr-failures/few objectstore/bluestore-low-osd-mem-target rados recovery-overrides/{default} supported-random-distro$/{ubuntu_latest} thrashers/careful thrashosds-health workloads/ec-rados-plugin=lrc-k=4-m=2-l=3} 3
pass 5977045 2021-03-18 10:20:40 2021-03-18 14:03:06 2021-03-18 14:25:58 0:22:52 0:12:04 0:10:48 smithi master centos 8.3 rados/verify/{centos_latest ceph clusters/{fixed-2 openstack} d-thrash/none mon_election/connectivity msgr-failures/few msgr/async objectstore/bluestore-low-osd-mem-target rados tasks/mon_recovery validater/lockdep} 2
pass 5977046 2021-03-18 10:20:41 2021-03-18 14:03:06 2021-03-18 14:25:44 0:22:38 0:14:05 0:08:33 smithi master rhel 8.3 rados/thrash-erasure-code-shec/{ceph clusters/{fixed-4 openstack} mon_election/classic msgr-failures/few objectstore/bluestore-comp-snappy rados recovery-overrides/{more-async-partial-recovery} supported-random-distro$/{rhel_8} thrashers/default thrashosds-health workloads/ec-rados-plugin=shec-k=4-m=3-c=2} 4
pass 5977047 2021-03-18 10:20:42 2021-03-18 14:04:27 2021-03-18 14:39:06 0:34:39 0:23:13 0:11:26 smithi master ubuntu 18.04 rados/thrash-erasure-code-isa/{arch/x86_64 ceph clusters/{fixed-2 openstack} mon_election/connectivity msgr-failures/fastclose objectstore/bluestore-stupid rados recovery-overrides/{more-active-recovery} supported-random-distro$/{ubuntu_latest} thrashers/mapgap thrashosds-health workloads/ec-rados-plugin=isa-k=2-m=1} 2
pass 5977048 2021-03-18 10:20:43 2021-03-18 14:05:17 2021-03-18 14:28:44 0:23:27 0:16:35 0:06:52 smithi master rhel 8.3 rados/singleton-nomsgr/{all/msgr mon_election/classic rados supported-random-distro$/{rhel_8}} 1