sseshasa-2021-03-18_10:14:02-rados-master-distro-basic-smithi/5976978

Description: rados/cephadm/smoke-roleless/{1-start 2-services/{basic rgw} 3-final distro/rhel_8.3_kubic_stable}

Log: http://qa-proxy.ceph.com/teuthology/sseshasa-2021-03-18_10:14:02-rados-master-distro-basic-smithi/5976978/teuthology.log

Failure Reason:

SELinux denials found on ubuntu@smithi080.front.sepia.ceph.com: ['type=AVC msg=audit(1616075585.989:8985): avc: denied { open } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075399.030:7950): avc: denied { write } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075587.277:9014): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075398.741:7938): avc: denied { getattr } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16396 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075242.644:7163): avc: denied { read } for pid=44080 comm="prometheus" path="socket:[319547]" dev="sockfs" ino=319547 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075179.941:6898): avc: denied { write } for pid=26330 comm="conmon" name="socket" dev="tmpfs" ino=16686 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075178.940:6879): avc: denied { read } for pid=26728 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075268.739:7344): avc: denied { read } for pid=35348 comm="node_exporter" name="entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075342.014:7727): avc: denied { write } for pid=78525 comm="msgr-worker-0" laddr=172.21.15.80 lport=54956 faddr=172.21.15.80 fport=3300 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075650.020:9279): avc: denied { open } for pid=26330 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075338.739:7689): avc: denied { read } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075318.737:7496): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173156 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075258.738:7242): avc: denied { read } for pid=35348 comm="node_exporter" name="net" dev="sysfs" ino=21519 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075485.277:8477): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075422.277:8157): avc: denied { search } for pid=42010 comm="grafana-server" name="etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075672.643:9418): avc: denied { setopt } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075248.739:7172): avc: denied { read } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075318.596:7492): avc: denied { search } for pid=51959 comm="safe_timer" name="/" dev="overlay" ino=1968225 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c631,c994 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.738:8872): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173156 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075428.739:8189): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075255.929:7207): avc: denied { getattr } for pid=26353 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.802:9275): avc: denied { append } for pid=26728 comm="log" path="/var/log/ceph/ceph-mgr.smithi080.njtcci.log" dev="sda1" ino=395865 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075585.989:8984): avc: denied { search } for pid=26353 comm="safe_timer" name="/" dev="overlay" ino=1442592 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075182.643:6911): avc: denied { search } for pid=44080 comm="prometheus" name="/" dev="overlay" ino=1968129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075328.742:7649): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.742:7795): avc: denied { search } for pid=35348 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.739:7104): avc: denied { getattr } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16396 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.739:7783): avc: denied { search } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=166036 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.739:6742): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075563.278:8835): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075398.742:7945): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075402.643:8013): avc: denied { create } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075565.986:8841): avc: denied { search } for pid=26353 comm="safe_timer" name="var" dev="sda1" ino=1442603 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075406.043:8066): avc: denied { search } for pid=26330 comm="conmon" name="journal" dev="tmpfs" ino=16682 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075572.645:8929): avc: denied { read } for pid=26353 comm="msgr-worker-2" path="socket:[173169]" dev="sockfs" ino=173169 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075580.988:8952): avc: denied { dac_read_search } for pid=26353 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075585.989:8988): avc: denied { write } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075587.276:9010): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075668.738:9393): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=167607 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075236.988:7056): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075319.649:7550): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075479.278:8380): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075238.740:7109): avc: denied { search } for pid=35348 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075343.044:7753): avc: denied { read } for pid=26330 comm="conmon" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075586.067:8993): avc: denied { open } for pid=26330 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075408.738:8082): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075488.738:8497): avc: denied { search } for pid=35348 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.739:7932): avc: denied { read } for pid=35348 comm="node_exporter" name="file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.740:7788): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.017:9236): avc: denied { search } for pid=26330 comm="conmon" name="journal" dev="tmpfs" ino=16682 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075508.738:8627): avc: denied { search } for pid=35348 comm="node_exporter" name="7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.741:7938): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075674.793:9426): avc: denied { getattr } for pid=44080 comm="prometheus" path="/prometheus/queries.active" dev="dm-4" ino=158 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.775:8902): avc: denied { getattr } for pid=26728 comm="mgr-fin" path="/usr/lib64/python3.6" dev="sda1" ino=922750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075667.539:9352): avc: denied { search } for pid=26728 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075400.033:7956): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075398.791:7947): avc: denied { search } for pid=46227 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968207 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c79,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075321.662:7577): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075478.739:8358): avc: denied { read } for pid=35348 comm="node_exporter" name="cpufreq" dev="sysfs" ino=30758 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075342.644:7740): avc: denied { signal } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075320.941:7570): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075268.738:7334): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/net/arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075318.737:7494): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075586.013:8990): avc: denied { search } for pid=51959 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.740:8371): avc: denied { search } for pid=35348 comm="node_exporter" name="kernel" dev="proc" ino=167394 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.738:9025): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.739:7690): avc: denied { search } for pid=35348 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075418.742:8121): avc: denied { search } for pid=35348 comm="node_exporter" name="host" dev="sda1" ino=1968013 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075582.061:8958): avc: denied { write } for pid=26330 comm="conmon" name="socket" dev="tmpfs" ino=16686 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075328.742:7651): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075236.278:7046): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075482.608:8432): avc: denied { open } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075260.930:7275): avc: denied { open } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075320.277:7556): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075425.701:8182): avc: denied { signal } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.741:7113): avc: denied { search } for pid=35348 comm="node_exporter" name="fs" dev="proc" ino=171371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075498.738:8532): avc: denied { read } for pid=35348 comm="node_exporter" name="cpuinfo_max_freq" dev="sysfs" ino=30846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075324.021:7624): avc: denied { read } for pid=42602 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075344.278:7769): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="overlay" ino=1444771 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075254.278:7188): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="sda1" ino=1444771 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075328.742:7652): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075643.430:9174): avc: denied { search } for pid=26728 comm="safe_timer" name="usr" dev="sda1" ino=786698 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075584.277:8975): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075260.473:7258): avc: denied { search } for pid=46227 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075321.841:7578): avc: denied { read } for pid=26728 comm="msgr-worker-0" path="socket:[281905]" dev="sockfs" ino=281905 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.739:7933): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=43630 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075322.643:7592): avc: denied { setopt } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075563.024:8810): avc: denied { open } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.739:8877): avc: denied { search } for pid=35348 comm="node_exporter" name="fs" dev="proc" ino=171371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075155.903:6715): avc: denied { open } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075667.539:9351): avc: denied { search } for pid=26728 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075488.739:8499): avc: denied { getattr } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16396 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075179.941:6897): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075488.738:8496): avc: denied { read } for pid=35348 comm="node_exporter" name="eno1" dev="sysfs" ino=34869 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075152.278:6667): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.278:7671): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075323.277:7616): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075259.020:7255): avc: denied { search } for pid=26330 comm="conmon" name="systemd" dev="tmpfs" ino=16404 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075480.971:8419): avc: denied { open } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075663.528:9330): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=394794 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075400.033:7954): avc: denied { read } for pid=26330 comm="conmon" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075684.072:9434): avc: denied { open } for pid=26330 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075154.353:6701): avc: denied { write } for pid=26728 comm="safe_timer" path="pipe:[151559]" dev="pipefs" ino=151559 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075261.023:7281): avc: denied { read } for pid=26330 comm="conmon" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075402.643:8017): avc: denied { write } for pid=44080 comm="prometheus" path="socket:[352600]" dev="sockfs" ino=352600 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075172.905:6812): avc: denied { search } for pid=26728 comm="safe_timer" name="libpod-7157ed55dd2bb6f82af892cdc2cadcbaa2c5f5b0b22e740b7b8d1bea0b6c44b3.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.739:7092): avc: denied { read } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075506.278:8623): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="overlay" ino=1444771 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075585.815:8980): avc: denied { write } for pid=46227 comm="osd_srv_heartbt" path="pipe:[189374]" dev="pipefs" ino=189374 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075325.942:7631): avc: denied { search } for pid=26353 comm="safe_timer" name="/" dev="overlay" ino=1442592 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075488.738:8495): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075339.038:7707): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075480.060:8391): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075498.737:8530): avc: denied { read } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.738:9393): avc: denied { read } for pid=35348 comm="node_exporter" name="mounts" dev="proc" ino=167607 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075398.739:7931): avc: denied { read } for pid=35348 comm="node_exporter" name="mounts" dev="proc" ino=167607 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075418.738:8107): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075260.930:7274): avc: denied { dac_read_search } for pid=26353 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075338.739:7693): avc: denied { read } for pid=35348 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.740:9038): avc: denied { search } for pid=35348 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075408.737:8070): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="overlay" ino=1968004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075268.737:7329): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075159.916:6769): avc: denied { write } for pid=26330 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075154.819:6706): avc: denied { search } for pid=26728 comm="safe_timer" name="/" dev="overlay" ino=1442611 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075561.492:8779): avc: denied { read } for pid=57451 comm="msgr-worker-1" path="pipe:[227464]" dev="pipefs" ino=227464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.738:9382): avc: denied { search } for pid=35348 comm="node_exporter" name="fs" dev="proc" ino=171371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075644.278:9191): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075478.696:8333): avc: denied { write } for pid=78525 comm="msgr-worker-1" laddr=172.21.15.80 lport=32780 faddr=172.21.15.80 fport=6802 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075261.023:7283): avc: denied { sendto } for pid=26330 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075422.644:8166): avc: denied { create } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075561.644:8781): avc: denied { write } for pid=26353 comm="ms_dispatch" path="/var/lib/ceph/mon/ceph-smithi080/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075421.963:8145): avc: denied { write } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075338.739:7687): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/fs/xfs/dm-4/stats/stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075323.012:7613): avc: denied { sendto } for pid=26330 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075498.737:8527): avc: denied { search } for pid=35348 comm="node_exporter" name="7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075340.945:7713): avc: denied { search } for pid=26353 comm="safe_timer" name="mon.smithi080" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.738:7684): avc: denied { read } for pid=35348 comm="node_exporter" name="xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075255.930:7210): avc: denied { add_name } for pid=26353 comm="rstore_compact" name="000015.log" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075260.930:7274): avc: denied { getattr } for pid=26353 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.739:9253): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/class/hwmon" dev="sysfs" ino=21483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075263.278:7318): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075238.739:7097): avc: denied { search } for pid=35348 comm="node_exporter" name="1" dev="proc" ino=167025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075418.740:8117): avc: denied { search } for pid=35348 comm="node_exporter" name="kernel" dev="proc" ino=167394 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075570.987:8918): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075242.277:7154): avc: denied { search } for pid=42010 comm="grafana-server" name="etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075490.076:8507): avc: denied { sendto } for pid=26330 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075568.739:8885): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075154.819:6706): avc: denied { search } for pid=26728 comm="safe_timer" name="diff" dev="sda1" ino=1442611 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075257.017:7221): avc: denied { use } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075239.206:7122): avc: denied { search } for pid=57451 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c179,c314 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.739:6864): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=167607 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075582.502:8960): avc: denied { search } for pid=51959 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075672.643:9423): avc: denied { write } for pid=44080 comm="prometheus" path="socket:[405264]" dev="sockfs" ino=405264 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075412.643:8093): avc: denied { search } for pid=44080 comm="prometheus" name="etc" dev="sda1" ino=1968146 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075681.602:9433): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075646.001:9222): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075173.934:6817): avc: denied { use } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075238.991:7115): avc: denied { write } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075668.737:9380): avc: denied { search } for pid=35348 comm="node_exporter" name="7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075498.737:8526): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075419.277:8124): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075161.278:6777): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075643.148:9169): avc: denied { read } for pid=51959 comm="msgr-worker-1" path="socket:[219153]" dev="sockfs" ino=219153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075650.020:9280): avc: denied { write } for pid=26330 comm="conmon" name="socket" dev="tmpfs" ino=16686 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075646.001:9221): avc: denied { read } for pid=26353 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075323.276:7614): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075238.738:7089): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173156 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.739:7779): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075418.738:8108): avc: denied { read } for pid=35348 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075272.643:7359): avc: denied { create } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.738:8871): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075320.277:7558): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075504.754:8608): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075348.742:7792): avc: denied { getattr } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16396 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075422.278:8162): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075341.772:7719): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=394794 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.738:7776): avc: denied { read } for pid=35348 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075482.620:8434): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075568.743:8899): avc: denied { search } for pid=35348 comm="node_exporter" name="host" dev="sda1" ino=1968013 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075569.201:8905): avc: denied { search } for pid=51959 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968225 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c631,c994 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075667.551:9354): avc: denied { search } for pid=26728 comm="safe_timer" name="etc" dev="sda1" ino=1442620 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075164.278:6791): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075666.004:9340): avc: denied { read } for pid=26353 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075269.276:7355): avc: denied { search } for pid=42010 comm="grafana-server" name="/" dev="overlay" ino=1968169 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075647.010:9227): avc: denied { search } for pid=26728 comm="mgr-fin" name="etc" dev="sda1" ino=1442620 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075248.739:7172): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/net/dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.739:7929): avc: denied { search } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=166036 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075194.787:6920): avc: denied { getattr } for pid=44080 comm="prometheus" path="/prometheus/wal" dev="dm-4" ino=8388752 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075176.276:6838): avc: denied { search } for pid=42010 comm="grafana-server" name="/" dev="overlay" ino=1968169 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075585.989:8984): avc: denied { search } for pid=26353 comm="safe_timer" name="var" dev="sda1" ino=1442603 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075238.739:7102): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075662.665:9323): avc: denied { open } for pid=57451 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075508.739:8632): avc: denied { read } for pid=35348 comm="node_exporter" name="entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075581.121:8954): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075323.277:7618): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075242.997:7165): avc: denied { open } for pid=26330 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075568.039:8867): avc: denied { write } for pid=26330 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075151.905:6653): avc: denied { write } for pid=26330 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075501.947:8557): avc: denied { search } for pid=42602 comm="safe_timer" name="/" dev="overlay" ino=1968187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c166,c597 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075260.715:7269): avc: denied { read } for pid=88987 comm="pgrep" name="status" dev="proc" ino=152649 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075563.277:8830): avc: denied { search } for pid=42010 comm="grafana-server" name="/" dev="overlay" ino=1968169 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075586.067:8994): avc: denied { write } for pid=26330 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075268.738:7335): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=167607 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075648.739:9258): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075667.539:9351): avc: denied { open } for pid=26728 comm="safe_timer" path="/proc/meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075418.062:8099): avc: denied { open } for pid=26330 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075478.739:8351): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075666.004:9339): avc: denied { getattr } for pid=26353 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075254.788:7192): avc: denied { getattr } for pid=44080 comm="prometheus" path="/prometheus/wal" dev="dm-4" ino=8388752 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075262.030:7299): avc: denied { read } for pid=26353 comm="rstore_compact" name="logical_block_size" dev="sysfs" ino=45217 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.740:8370): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.738:6851): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.739:9261): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/fs/xfs/dm-4/stats/stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075500.974:8555): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.739:7927): avc: denied { read } for pid=35348 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075337.035:7659): avc: denied { write } for pid=26330 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075400.848:7988): avc: denied { search } for pid=42010 comm="grafana-server" name="/" dev="overlay" ino=1968169 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075562.644:8798): avc: denied { signal } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075152.278:6664): avc: denied { lock } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075500.009:8540): avc: denied { write } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.739:8886): avc: denied { read } for pid=35348 comm="node_exporter" name="stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075582.061:8958): avc: denied { search } for pid=26330 comm="conmon" name="journal" dev="tmpfs" ino=16682 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075580.626:8945): avc: denied { search } for pid=57451 comm="safe_timer" name="diff" dev="sda1" ino=1968244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075338.278:7675): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075154.831:6707): avc: denied { search } for pid=26728 comm="safe_timer" name="etc" dev="sda1" ino=1442620 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075503.636:8585): avc: denied { read } for pid=26353 comm="msgr-worker-2" path="pipe:[126774]" dev="pipefs" ino=126774 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075269.276:7356): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075508.739:8632): avc: denied { search } for pid=35348 comm="node_exporter" name="kernel" dev="proc" ino=167394 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075671.004:9413): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075484.114:8470): avc: denied { write } for pid=46227 comm="msgr-worker-1" laddr=172.21.15.80 lport=6814 faddr=172.21.15.97 fport=43198 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075328.738:7637): avc: denied { read } for pid=35348 comm="node_exporter" name="fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075644.277:9188): avc: denied { search } for pid=42010 comm="grafana-server" name="/" dev="overlay" ino=1968169 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075239.233:7124): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=394794 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.738:9395): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075587.145:9005): avc: denied { search } for pid=26728 comm="safe_timer" name="libpod-7157ed55dd2bb6f82af892cdc2cadcbaa2c5f5b0b22e740b7b8d1bea0b6c44b3.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075522.073:8663): avc: denied { read } for pid=26330 comm="conmon" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075484.945:8476): avc: denied { read } for pid=51959 comm="msgr-worker-1" path="pipe:[207622]" dev="pipefs" ino=207622 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075272.643:7360): avc: denied { setopt } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075400.033:7955): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075338.742:7703): avc: denied { search } for pid=35348 comm="node_exporter" name="host" dev="sda1" ino=1968013 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075180.906:6904): avc: denied { search } for pid=26353 comm="safe_timer" name="mon.smithi080" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.739:8368): avc: denied { search } for pid=35348 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616075176.276:6839): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075178.739:6864): avc: denied { search } for pid=35348 comm="node_exporter" name="1" dev="proc" ino=167025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075175.905:6835): avc: denied { search } for pid=26353 comm="safe_timer" name="var" dev="sda1" ino=1442603 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075262.644:7304): avc: denied { search } for pid=44080 comm="prometheus" name="etc" dev="sda1" ino=1968146 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075478.739:8359): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=30846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075340.945:7714): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075408.739:8086): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075257.319:7234): avc: denied { search } for pid=26728 comm="safe_timer" name="libpod-7157ed55dd2bb6f82af892cdc2cadcbaa2c5f5b0b22e740b7b8d1bea0b6c44b3.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075662.231:9302): avc: denied { search } for pid=51959 comm="safe_timer" name="/" dev="overlay" ino=1968225 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c631,c994 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075566.597:8861): avc: denied { search } for pid=57451 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075418.062:8099): avc: denied { write } for pid=26330 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075428.742:8207): avc: denied { search } for pid=35348 comm="node_exporter" name="1" dev="proc" ino=167025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075179.941:6898): avc: denied { write } for pid=26330 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075508.741:8644): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075587.277:9015): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-detail.json" dev="overlay" ino=1444779 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075667.539:9351): avc: denied { read } for pid=26728 comm="safe_timer" name="meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075248.739:7174): avc: denied { search } for pid=35348 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075258.739:7245): avc: denied { search } for pid=35348 comm="node_exporter" name="fs" dev="proc" ino=171371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075421.963:8147): avc: denied { write } for pid=26330 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075194.787:6918): avc: denied { open } for pid=44080 comm="prometheus" path="/prometheus" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.740:7789): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075434.793:8214): avc: denied { read } for pid=44080 comm="prometheus" name="data" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.739:8359): avc: denied { read } for pid=35348 comm="node_exporter" name="cpuinfo_max_freq" dev="sysfs" ino=30846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075500.011:8541): avc: denied { write } for pid=26330 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075342.817:7750): avc: denied { search } for pid=57451 comm="safe_timer" name="/" dev="overlay" ino=1968244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c179,c314 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075479.278:8381): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075500.276:8544): avc: denied { search } for pid=42010 comm="grafana-server" name="/" dev="overlay" ino=1968169 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075237.481:7065): avc: denied { read } for pid=51959 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.047:9359): avc: denied { write } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075488.073:8487): avc: denied { read } for pid=26330 comm="conmon" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075176.276:6838): avc: denied { search } for pid=42010 comm="grafana-server" name="etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075488.740:8502): avc: denied { search } for pid=35348 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075179.277:6890): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075644.278:9191): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.740:7111): avc: denied { search } for pid=35348 comm="node_exporter" name="host" dev="sda1" ino=1968013 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075497.994:8519): avc: denied { search } for pid=57451 comm="safe_timer" name="/" dev="overlay" ino=1968244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c179,c314 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.738:9031): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.739:7784): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/fs/xfs/stats/stats" dev="sysfs" ino=45563 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075420.960:8132): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.276:9369): avc: denied { search } for pid=42010 comm="grafana-server" name="etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075587.277:9014): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075422.236:8154): avc: denied { read } for pid=26728 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075175.905:6835): avc: denied { search } for pid=26353 comm="safe_timer" name="/" dev="overlay" ino=1442592 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075318.738:7511): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075319.002:7522): avc: denied { write } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075650.277:9282): avc: denied { search } for pid=42010 comm="grafana-server" name="/" dev="overlay" ino=1968169 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075672.643:9420): avc: denied { connect } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075328.738:7635): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075667.398:9347): avc: denied { read } for pid=26353 comm="msgr-worker-2" path="pipe:[126774]" dev="pipefs" ino=126774 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.739:8357): avc: denied { search } for pid=35348 comm="node_exporter" name="1" dev="proc" ino=167025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075178.737:6850): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075580.058:8943): avc: denied { write } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075400.103:7962): avc: denied { search } for pid=26728 comm="safe_timer" name="libpod-7157ed55dd2bb6f82af892cdc2cadcbaa2c5f5b0b22e740b7b8d1bea0b6c44b3.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075328.738:7634): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075400.115:7984): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.521:7909): avc: denied { append } for pid=46227 comm="log" path="/var/log/ceph/ceph-osd.1.log" dev="sda1" ino=395892 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075155.903:6714): avc: denied { search } for pid=26353 comm="safe_timer" name="/" dev="overlay" ino=1442592 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.738:8346): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075418.741:8119): avc: denied { search } for pid=35348 comm="node_exporter" name="user" dev="tmpfs" ino=16726 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075341.991:7724): avc: denied { search } for pid=26728 comm="mgr-fin" name="usr" dev="sda1" ino=786698 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075261.023:7280): avc: denied { use } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075567.060:8866): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075506.206:8616): avc: denied { search } for pid=46227 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968207 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c79,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.739:7691): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=43630 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075428.739:8194): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075674.793:9427): avc: denied { getattr } for pid=44080 comm="prometheus" path="/prometheus/wal" dev="dm-4" ino=8388752 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075342.429:7733): avc: denied { search } for pid=34534 comm="ceph-crash" name="/" dev="overlay" ino=1444628 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c85,c406 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.741:6871): avc: denied { search } for pid=35348 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616075503.288:8579): avc: denied { read } for pid=51959 comm="msgr-worker-2" path="pipe:[207623]" dev="pipefs" ino=207623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075585.989:8984): avc: denied { dac_read_search } for pid=26353 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075568.739:8879): avc: denied { read } for pid=35348 comm="node_exporter" name="xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075504.742:8605): avc: denied { search } for pid=26728 comm="safe_timer" name="/" dev="overlay" ino=1442611 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.741:6872): avc: denied { search } for pid=35348 comm="node_exporter" name="host" dev="sda1" ino=1968013 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075408.737:8070): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075482.608:8433): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075490.076:8506): avc: denied { use } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075421.466:8134): avc: denied { read } for pid=42602 comm="msgr-worker-1" path="socket:[278924]" dev="sockfs" ino=278924 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075255.929:7209): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075482.644:8436): avc: denied { signal } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075321.421:7575): avc: denied { search } for pid=42602 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c166,c597 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.739:7104): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075404.041:8044): avc: denied { read } for pid=26330 comm="conmon" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075498.738:8534): avc: denied { read } for pid=35348 comm="node_exporter" name="mounts" dev="proc" ino=167607 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075652.644:9289): avc: denied { search } for pid=44080 comm="prometheus" name="etc" dev="sda1" ino=1968146 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075668.740:9403): avc: denied { search } for pid=35348 comm="node_exporter" name="user" dev="tmpfs" ino=16726 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075261.023:7283): avc: denied { search } for pid=26330 comm="conmon" name="systemd" dev="tmpfs" ino=16404 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075662.456:9317): avc: denied { search } for pid=46227 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075587.276:9009): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.739:8873): avc: denied { read } for pid=35348 comm="node_exporter" name="fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075680.806:9431): avc: denied { open } for pid=105979 comm="pgrep" path="/proc/26353/status" dev="proc" ino=152649 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.737:6845): avc: denied { read } for pid=35348 comm="node_exporter" path="socket:[191428]" dev="sockfs" ino=191428 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075503.971:8592): avc: denied { open } for pid=42602 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.740:7108): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075176.276:6838): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075151.976:6659): avc: denied { search } for pid=26728 comm="mgr-fin" name="/" dev="overlay" ino=1442611 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075258.738:7238): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075236.204:7036): avc: denied { read } for pid=75528 comm="msgr-worker-0" path="pipe:[274958]" dev="pipefs" ino=274958 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075499.437:8539): avc: denied { search } for pid=57451 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075261.023:7283): avc: denied { write } for pid=26330 comm="conmon" name="socket" dev="tmpfs" ino=16686 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075586.013:8989): avc: denied { search } for pid=51959 comm="safe_timer" name="/" dev="overlay" ino=1968225 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c631,c994 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075405.956:8063): avc: denied { search } for pid=26353 comm="safe_timer" name="/" dev="overlay" ino=1442592 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075418.738:8105): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.758:6876): avc: denied { append } for pid=44080 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075162.644:6785): avc: denied { getattr } for pid=44080 comm="prometheus" laddr=172.21.15.80 lport=46262 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075662.041:9301): avc: denied { read } for pid=26353 comm="fn_monstore" path="/var/lib/ceph/mon/ceph-smithi080/store.db/000023.sst" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075320.038:7552): avc: denied { search } for pid=42602 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075587.277:9012): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075242.644:7162): avc: denied { write } for pid=44080 comm="prometheus" path="socket:[320584]" dev="sockfs" ino=320584 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.741:7944): avc: denied { read } for pid=35348 comm="node_exporter" name="entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075267.367:7324): avc: denied { read } for pid=26728 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075422.277:8157): avc: denied { search } for pid=42010 comm="grafana-server" name="/" dev="overlay" ino=1968169 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075256.986:7220): avc: denied { read } for pid=26728 comm="mgr-fin" name="localtime" dev="sda1" ino=394776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075572.644:8921): avc: denied { create } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075418.062:8100): avc: denied { write } for pid=26330 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075341.991:7724): avc: denied { search } for pid=26728 comm="mgr-fin" name="diff" dev="sda1" ino=1442611 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075342.645:7749): avc: denied { append } for pid=44080 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075408.740:8090): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.741:9041): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075400.115:7983): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.741:7944): avc: denied { search } for pid=35348 comm="node_exporter" name="kernel" dev="proc" ino=167394 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075257.278:7232): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075562.031:8786): avc: denied { use } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075255.553:7204): avc: denied { read } for pid=51959 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075500.973:8553): avc: denied { search } for pid=26353 comm="safe_timer" name="/" dev="overlay" ino=1442592 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075399.431:7952): avc: denied { search } for pid=42602 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c166,c597 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.737:9020): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075179.277:6890): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075268.739:7340): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075236.984:7051): avc: denied { search } for pid=26728 comm="mgr-fin" name="etc" dev="sda1" ino=1442620 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075260.613:7265): avc: denied { search } for pid=51959 comm="safe_timer" name="/" dev="overlay" ino=1968225 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c631,c994 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075482.645:8445): avc: denied { append } for pid=44080 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075479.278:8383): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="sda1" ino=1444771 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075648.740:9265): avc: denied { read } for pid=35348 comm="node_exporter" name="file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075260.473:7258): avc: denied { read } for pid=46227 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075337.748:7668): avc: denied { search } for pid=26728 comm="safe_timer" name="usr" dev="sda1" ino=786698 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075478.739:8364): avc: denied { getattr } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16396 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075151.587:6644): avc: denied { read } for pid=26353 comm="msgr-worker-2" path="pipe:[126774]" dev="pipefs" ino=126774 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.739:8369): avc: denied { search } for pid=35348 comm="node_exporter" name="host" dev="sda1" ino=1968013 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075343.044:7754): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075178.737:6848): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173156 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075563.277:8830): avc: denied { search } for pid=42010 comm="grafana-server" name="etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075155.903:6714): avc: denied { getattr } for pid=26353 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.739:7092): avc: denied { search } for pid=35348 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075179.277:6889): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075505.975:8613): avc: denied { open } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075672.643:9419): avc: denied { setopt } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075172.917:6814): avc: denied { read } for pid=26728 comm="msgr-worker-1" path="pipe:[151559]" dev="pipefs" ino=151559 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075343.044:7754): avc: denied { open } for pid=26330 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075261.023:7283): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075268.737:7331): avc: denied { search } for pid=35348 comm="node_exporter" name="7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075236.278:7047): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075562.644:8803): avc: denied { setopt } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075400.955:7991): avc: denied { search } for pid=26353 comm="safe_timer" name="/" dev="overlay" ino=1442592 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075652.644:9289): avc: denied { search } for pid=44080 comm="prometheus" name="/" dev="overlay" ino=1968129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075480.608:8400): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075428.739:8201): avc: denied { read } for pid=35348 comm="node_exporter" name="stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075503.288:8580): avc: denied { write } for pid=51959 comm="msgr-worker-2" laddr=172.21.15.80 lport=47558 faddr=172.21.15.80 fport=6808 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.740:8891): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.748:8373): avc: denied { append } for pid=44080 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075497.983:8518): avc: denied { search } for pid=26330 comm="conmon" name="systemd" dev="tmpfs" ino=16404 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075668.756:9407): avc: denied { append } for pid=44080 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075400.115:7983): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=394794 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075421.963:8148): avc: denied { write } for pid=26330 comm="conmon" name="socket" dev="tmpfs" ino=16686 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075152.644:6671): avc: denied { create } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.738:7090): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.743:8897): avc: denied { search } for pid=35348 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075680.806:9430): avc: denied { getattr } for pid=105979 comm="pgrep" path="/proc/26353" dev="proc" ino=152605 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075321.421:7575): avc: denied { open } for pid=42602 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.278:7672): avc: denied { lock } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075248.740:7181): avc: denied { search } for pid=35348 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075152.644:6674): avc: denied { getattr } for pid=44080 comm="prometheus" laddr=172.21.15.80 lport=41367 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.738:6853): avc: denied { read } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075504.742:8606): avc: denied { read } for pid=26728 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.740:9403): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.939:6877): avc: denied { write } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075236.405:7050): avc: denied { search } for pid=57451 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075277.429:7368): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075154.831:6707): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.696:8332): avc: denied { read } for pid=78525 comm="msgr-worker-1" path="pipe:[283728]" dev="pipefs" ino=283728 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075237.221:7061): avc: denied { search } for pid=26728 comm="safe_timer" name="libpod-7157ed55dd2bb6f82af892cdc2cadcbaa2c5f5b0b22e740b7b8d1bea0b6c44b3.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.739:6864): avc: denied { read } for pid=35348 comm="node_exporter" name="mounts" dev="proc" ino=167607 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075342.644:7741): avc: denied { search } for pid=44080 comm="prometheus" name="/" dev="overlay" ino=1968129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075159.916:6768): avc: denied { write } for pid=26330 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075238.740:7109): avc: denied { search } for pid=35348 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.738:9022): avc: denied { search } for pid=35348 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075151.905:6654): avc: denied { search } for pid=26330 comm="conmon" name="systemd" dev="tmpfs" ino=16404 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075568.739:8881): avc: denied { search } for pid=35348 comm="node_exporter" name="1" dev="proc" ino=167025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075662.816:9326): avc: denied { signal } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.741:7791): avc: denied { search } for pid=35348 comm="node_exporter" name="1" dev="proc" ino=167025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075421.963:8147): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075428.740:8204): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.277:9374): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075343.044:7754): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075236.277:7043): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075318.738:7512): avc: denied { search } for pid=35348 comm="node_exporter" name="kernel" dev="proc" ino=167394 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075180.906:6906): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.742:7794): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075504.754:8608): avc: denied { search } for pid=26728 comm="safe_timer" name="usr" dev="sda1" ino=786698 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075268.739:7348): avc: denied { search } for pid=35348 comm="node_exporter" name="user" dev="tmpfs" ino=16726 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075484.888:8474): avc: denied { search } for pid=46227 comm="safe_timer" name="/" dev="overlay" ino=1968207 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c79,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075168.739:6799): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075260.930:7276): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075684.072:9434): avc: denied { write } for pid=26330 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075240.926:7130): avc: denied { search } for pid=26353 comm="safe_timer" name="mon.smithi080" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.739:7785): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/fs/xfs/dm-4/stats/stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075328.739:7644): avc: denied { read } for pid=35348 comm="node_exporter" name="hwmon0" dev="sysfs" ino=35068 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075408.738:8084): avc: denied { search } for pid=35348 comm="node_exporter" name="1" dev="proc" ino=167025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075482.644:8438): avc: denied { create } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075257.017:7222): avc: denied { read } for pid=26330 comm="conmon" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075644.278:9192): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075644.010:9181): avc: denied { open } for pid=26330 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075421.399:8133): avc: denied { open } for pid=46227 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075485.278:8479): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075179.276:6885): avc: denied { getattr } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075650.277:9282): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075256.675:7216): avc: denied { search } for pid=46227 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968207 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c79,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075323.662:7620): avc: denied { search } for pid=26728 comm="safe_timer" name="/" dev="overlay" ino=1442611 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075667.551:9354): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075404.040:8043): avc: denied { write } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075478.739:8352): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075319.003:7525): avc: denied { search } for pid=26330 comm="conmon" name="journal" dev="tmpfs" ino=16682 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075500.277:8546): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.739:8364): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075498.717:8525): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075580.058:8944): avc: denied { read } for pid=26330 comm="conmon" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075587.277:9012): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075587.145:9005): avc: denied { open } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075160.849:6771): avc: denied { search } for pid=42010 comm="grafana-server" name="/" dev="overlay" ino=1968169 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075572.644:8923): avc: denied { setopt } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.739:6863): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075512.644:8652): avc: denied { search } for pid=44080 comm="prometheus" name="etc" dev="sda1" ino=1968146 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075563.277:8830): avc: denied { getattr } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075480.060:8391): avc: denied { write } for pid=26330 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075488.738:8498): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.741:7700): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075248.738:7170): avc: denied { search } for pid=35348 comm="node_exporter" name="7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075563.036:8813): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075321.005:7574): avc: denied { write } for pid=26330 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075175.936:6837): avc: denied { write } for pid=26330 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075268.737:7329): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="overlay" ino=1968004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.739:6743): avc: denied { read } for pid=35348 comm="node_exporter" name="dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075155.903:6714): avc: denied { search } for pid=26353 comm="safe_timer" name="var" dev="sda1" ino=1442603 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075401.276:7997): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075261.023:7282): avc: denied { open } for pid=26330 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075480.608:8399): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=394794 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075498.717:8524): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075151.976:6659): avc: denied { read } for pid=26728 comm="mgr-fin" name="localtime" dev="sda1" ino=394776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075587.005:9004): avc: denied { getattr } for pid=26728 comm="mgr-fin" name="UTC" dev="sda1" ino=1311473 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075648.738:9249): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173156 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.740:6755): avc: denied { read } for pid=35348 comm="node_exporter" name="file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075667.539:9352): avc: denied { search } for pid=26728 comm="safe_timer" name="libpod-7157ed55dd2bb6f82af892cdc2cadcbaa2c5f5b0b22e740b7b8d1bea0b6c44b3.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.277:9372): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075672.643:9416): avc: denied { create } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075260.849:7272): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.738:7682): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075643.148:9167): avc: denied { write } for pid=57451 comm="msgr-worker-1" laddr=172.21.15.80 lport=49836 faddr=172.21.15.80 fport=6820 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075261.344:7291): avc: denied { getattr } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075422.277:8157): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075562.143:8795): avc: denied { read } for pid=51959 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.739:7096): avc: denied { read } for pid=35348 comm="node_exporter" name="xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075242.644:7157): avc: denied { search } for pid=44080 comm="prometheus" name="/" dev="overlay" ino=1968129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.843:6766): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075408.738:8077): avc: denied { read } for pid=35348 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075644.278:9190): avc: denied { lock } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075592.644:9049): avc: denied { getattr } for pid=44080 comm="prometheus" laddr=172.21.15.80 lport=52321 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075342.528:7736): avc: denied { search } for pid=51959 comm="safe_timer" name="/" dev="overlay" ino=1968225 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c631,c994 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075179.941:6895): avc: denied { use } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075672.643:9424): avc: denied { read } for pid=44080 comm="prometheus" path="socket:[409009]" dev="sockfs" ino=409009 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075337.736:7667): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075403.352:8041): avc: denied { write } for pid=26353 comm="ms_dispatch" path="pipe:[126774]" dev="pipefs" ino=126774 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075488.737:8491): avc: denied { read } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.742:7794): avc: denied { search } for pid=35348 comm="node_exporter" name="user" dev="tmpfs" ino=16726 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075268.739:7343): avc: denied { read } for pid=35348 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075662.952:9327): avc: denied { write } for pid=42602 comm="bstore_kv_sync" path="/dev/dm-3" dev="devtmpfs" ino=107951 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075152.028:6661): avc: denied { read } for pid=46227 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075508.738:8627): avc: denied { read } for pid=35348 comm="node_exporter" name="stat" dev="proc" ino=173156 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075500.277:8547): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="sda1" ino=1444771 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075428.742:8208): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075440.754:8218): avc: denied { open } for pid=95869 comm="pgrep" path="/proc/26330/status" dev="proc" ino=132512 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075345.946:7770): avc: denied { getattr } for pid=26353 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075240.926:7130): avc: denied { open } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.738:7921): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/stat" dev="proc" ino=4026532033 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075419.278:8125): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075583.121:8969): avc: denied { read } for pid=26728 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075318.738:7508): avc: denied { read } for pid=35348 comm="node_exporter" name="hwmon0" dev="sysfs" ino=35068 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075569.278:8911): avc: denied { read open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075497.777:8517): avc: denied { open } for pid=46227 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.741:9268): avc: denied { getattr } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16396 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075155.903:6716): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.739:6862): avc: denied { read } for pid=35348 comm="node_exporter" name="entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075480.060:8390): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075500.011:8542): avc: denied { write } for pid=26330 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075499.368:8538): avc: denied { append } for pid=26353 comm="log" path="/var/log/ceph/ceph-mon.smithi080.log" dev="sda1" ino=395863 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.740:7936): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075320.277:7556): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075178.753:6873): avc: denied { append } for pid=26353 comm="log" path="/var/log/ceph/ceph-mon.smithi080.log" dev="sda1" ino=395863 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075248.738:7169): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.739:7925): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.741:7941): avc: denied { search } for pid=35348 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075408.737:8073): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.741:6868): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075422.644:8170): avc: denied { connect } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075318.739:7516): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075321.662:7577): avc: denied { search } for pid=26728 comm="safe_timer" name="usr" dev="sda1" ino=786698 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075323.277:7618): avc: denied { read open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075257.017:7224): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075576.087:8931): avc: denied { search } for pid=51959 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.738:9382): avc: denied { search } for pid=35348 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.738:9387): avc: denied { read } for pid=35348 comm="node_exporter" name="mc" dev="sysfs" ino=21498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075179.941:6898): avc: denied { search } for pid=26330 comm="conmon" name="systemd" dev="tmpfs" ino=16404 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075428.738:8188): avc: denied { search } for pid=35348 comm="node_exporter" name="7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075587.276:9009): avc: denied { getattr } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075408.738:8075): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075421.963:8148): avc: denied { search } for pid=26330 comm="conmon" name="journal" dev="tmpfs" ino=16682 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075325.687:7626): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075504.754:8608): avc: denied { getattr } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075421.995:8153): avc: denied { read } for pid=26728 comm="mgr-fin" name="localtime" dev="overlay" ino=394776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.741:8894): avc: denied { search } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=166036 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075155.910:6719): avc: denied { search } for pid=26330 comm="conmon" name="systemd" dev="tmpfs" ino=16404 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075569.278:8911): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075240.994:7144): avc: denied { search } for pid=26330 comm="conmon" name="systemd" dev="tmpfs" ino=16404 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075398.739:7930): avc: denied { read } for pid=35348 comm="node_exporter" name="cpufreq" dev="sysfs" ino=30758 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075318.194:7491): avc: denied { search } for pid=46227 comm="safe_timer" name="/" dev="overlay" ino=1968207 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c79,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075506.278:8620): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075255.930:7210): avc: denied { open } for pid=26353 comm="rstore_compact" path="/var/lib/ceph/mon/ceph-smithi080/store.db/000015.log" dev="dm-4" ino=137 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075650.278:9284): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.738:6738): avc: denied { read } for pid=35348 comm="node_exporter" name="stat" dev="proc" ino=173156 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075168.740:6803): avc: denied { search } for pid=35348 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616075182.643:6917): avc: denied { read } for pid=44080 comm="prometheus" path="socket:[298882]" dev="sockfs" ino=298882 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.991:7116): avc: denied { use } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075344.278:7767): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075172.644:6811): avc: denied { search } for pid=44080 comm="prometheus" name="/" dev="overlay" ino=1968129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075337.035:7660): avc: denied { write } for pid=26330 comm="conmon" name="socket" dev="tmpfs" ino=16686 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075317.991:7488): avc: denied { search } for pid=42602 comm="safe_timer" name="/" dev="overlay" ino=1968187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c166,c597 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075643.148:9170): avc: denied { read } for pid=51959 comm="msgr-worker-0" path="socket:[227824]" dev="sockfs" ino=227824 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.737:6850): avc: denied { read } for pid=35348 comm="node_exporter" name="fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.738:9026): avc: denied { read } for pid=35348 comm="node_exporter" name="xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.705:7086): avc: denied { search } for pid=42602 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c166,c597 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.741:7701): avc: denied { search } for pid=35348 comm="node_exporter" name="user" dev="tmpfs" ino=16726 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075506.277:8617): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.739:8877): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075400.955:7992): avc: denied { search } for pid=26353 comm="safe_timer" name="mon.smithi080" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075162.297:6780): avc: denied { open } for pid=42602 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075256.986:7220): avc: denied { search } for pid=26728 comm="mgr-fin" name="/" dev="overlay" ino=1442611 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075500.276:8544): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.738:6854): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/class/net" dev="sysfs" ino=21519 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.739:7924): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=21498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.739:8348): avc: denied { read } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075672.643:9415): avc: denied { search } for pid=44080 comm="prometheus" name="/" dev="overlay" ino=1968129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.740:9265): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075506.278:8620): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075570.044:8913): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075668.738:9395): avc: denied { read } for pid=35348 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075341.991:7724): avc: denied { search } for pid=26728 comm="mgr-fin" name="etc" dev="sda1" ino=1442620 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075158.739:6747): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075585.360:8976): avc: denied { append } for pid=51959 comm="log" path="/var/log/ceph/ceph-osd.2.log" dev="sda1" ino=395894 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.739:9400): avc: denied { getattr } for pid=35348 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075484.945:8475): avc: denied { write } for pid=46227 comm="tp_osd_tp" path="pipe:[189374]" dev="pipefs" ino=189374 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075319.649:7550): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075152.807:6678): avc: denied { read } for pid=26728 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075652.644:9292): avc: denied { setopt } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075405.957:8064): avc: denied { read } for pid=26353 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075242.644:7159): avc: denied { setopt } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075587.005:9004): avc: denied { read } for pid=26728 comm="mgr-fin" name="localtime" dev="sda1" ino=394776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075168.739:6798): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075562.031:8789): avc: denied { write } for pid=26330 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075422.278:8160): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075592.644:9046): avc: denied { create } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075643.418:9171): avc: denied { search } for pid=26728 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075318.738:7499): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.741:6870): avc: denied { search } for pid=35348 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075497.777:8517): avc: denied { read } for pid=46227 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.739:9397): avc: denied { read } for pid=35348 comm="node_exporter" name="entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075569.277:8907): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075238.738:7089): avc: denied { search } for pid=35348 comm="node_exporter" name="7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075152.028:6660): avc: denied { open } for pid=46227 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075236.988:7053): avc: denied { use } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075328.742:7654): avc: denied { search } for pid=35348 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075405.957:8064): avc: denied { open } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075318.738:7500): avc: denied { search } for pid=35348 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075484.632:8473): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=394794 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075562.644:8806): avc: denied { getattr } for pid=44080 comm="prometheus" laddr=172.21.15.80 lport=37245 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.739:7923): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.739:8886): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/fs/xfs/dm-4/stats/stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.939:8904): avc: denied { search } for pid=26705 comm="conmon" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075342.014:7726): avc: denied { read } for pid=78525 comm="msgr-worker-0" path="pipe:[283727]" dev="pipefs" ino=283727 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075236.984:7051): avc: denied { read } for pid=26728 comm="mgr-fin" name="localtime" dev="sda1" ino=394776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075479.278:8384): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/pool-overview.json" dev="overlay" ino=1444778 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075343.784:7762): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075500.766:8550): avc: denied { read } for pid=99158 comm="pgrep" name="status" dev="proc" ino=132512 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075328.738:7636): avc: denied { read } for pid=35348 comm="node_exporter" name="stat" dev="proc" ino=173156 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075168.739:6797): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075318.739:7520): avc: denied { search } for pid=35348 comm="node_exporter" name="host" dev="sda1" ino=1968013 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075479.157:8376): avc: denied { read } for pid=42602 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075260.930:7275): avc: denied { read } for pid=26353 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.599:7085): avc: denied { read } for pid=26353 comm="msgr-worker-2" path="pipe:[126774]" dev="pipefs" ino=126774 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075482.608:8432): avc: denied { read } for pid=26728 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075686.277:9439): avc: denied { search } for pid=42010 comm="grafana-server" name="/" dev="overlay" ino=1968169 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075667.398:9346): avc: denied { write } for pid=26353 comm="ms_dispatch" path="pipe:[126774]" dev="pipefs" ino=126774 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075503.278:8574): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.739:7101): avc: denied { search } for pid=35348 comm="node_exporter" name="kernel" dev="proc" ino=167394 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075236.204:7040): avc: denied { read } for pid=26728 comm="msgr-worker-2" path="socket:[278228]" dev="sockfs" ino=278228 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075267.281:7322): avc: denied { open } for pid=26705 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075568.740:8892): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075268.738:7338): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075268.739:7343): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075686.075:9438): avc: denied { write } for pid=26330 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075404.277:8057): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075440.964:8223): avc: denied { write } for pid=26353 comm="safe_timer" path="pipe:[126774]" dev="pipefs" ino=126774 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075179.276:6885): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075479.277:8377): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075643.430:9174): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075158.843:6766): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075320.277:7557): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075500.973:8554): avc: denied { search } for pid=26353 comm="safe_timer" name="mon.smithi080" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075342.644:7743): avc: denied { create } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075565.986:8841): avc: denied { search } for pid=26353 comm="safe_timer" name="/" dev="overlay" ino=1442592 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075403.306:8037): avc: denied { write } for pid=57451 comm="msgr-worker-1" laddr=172.21.15.80 lport=6832 faddr=172.21.15.97 fport=42740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075155.055:6710): avc: denied { search } for pid=51959 comm="safe_timer" name="/" dev="overlay" ino=1968225 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c631,c994 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.739:8881): avc: denied { read } for pid=35348 comm="node_exporter" name="mounts" dev="proc" ino=167607 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075567.036:8863): avc: denied { write } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075578.738:8941): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/class/net/eno1" dev="sysfs" ino=34869 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075175.936:6836): avc: denied { write } for pid=26330 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075343.772:7761): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075174.929:6831): avc: denied { search } for pid=26728 comm="safe_timer" name="etc" dev="sda1" ino=1442620 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075504.021:8594): avc: denied { use } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075562.513:8797): avc: denied { search } for pid=46227 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968207 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c79,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.739:7696): avc: denied { read } for pid=35348 comm="node_exporter" name="file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075421.466:8135): avc: denied { write } for pid=42602 comm="msgr-worker-1" laddr=172.21.15.80 lport=6802 faddr=172.21.15.97 fport=58318 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075561.554:8780): avc: denied { search } for pid=42602 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1968187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075151.905:6654): avc: denied { write } for pid=26330 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075236.988:7056): avc: denied { search } for pid=26330 comm="conmon" name="systemd" dev="tmpfs" ino=16404 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075668.738:9382): avc: denied { read } for pid=35348 comm="node_exporter" name="file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075421.928:8143): avc: denied { read } for pid=57451 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075342.429:7733): avc: denied { dac_override } for pid=34534 comm="ceph-crash" capability=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075180.906:6903): avc: denied { dac_read_search } for pid=26353 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075400.115:7983): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075644.010:9180): avc: denied { read } for pid=26330 comm="conmon" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075648.740:9267): avc: denied { search } for pid=35348 comm="node_exporter" name="1" dev="proc" ino=167025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075262.032:7302): avc: denied { unlink } for pid=26353 comm="rocksdb:high0" name="000015.log" dev="dm-4" ino=137 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075644.010:9181): avc: denied { write } for pid=26330 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075318.739:7515): avc: denied { read } for pid=35348 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.740:6865): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.737:6843): avc: denied { signal } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075422.236:8154): avc: denied { search } for pid=26728 comm="safe_timer" name="libpod-7157ed55dd2bb6f82af892cdc2cadcbaa2c5f5b0b22e740b7b8d1bea0b6c44b3.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075421.889:8141): avc: denied { read } for pid=75978 comm="msgr-worker-1" path="pipe:[273321]" dev="pipefs" ino=273321 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075328.738:7634): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="overlay" ino=1968004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075576.495:8932): avc: denied { write } for pid=42602 comm="tp_osd_tp" path="pipe:[187565]" dev="pipefs" ino=187565 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075580.626:8946): avc: denied { open } for pid=57451 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075320.727:7564): avc: denied { open } for pid=92179 comm="pgrep" path="/proc/26353/status" dev="proc" ino=152649 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075160.904:6773): avc: denied { read } for pid=26353 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.738:9030): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/fs/xfs/dm-4/stats/stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075328.742:7653): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075236.277:7042): avc: denied { search } for pid=42010 comm="grafana-server" name="etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075588.739:9034): avc: denied { search } for pid=35348 comm="node_exporter" name="1" dev="proc" ino=167025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075402.643:8016): avc: denied { getattr } for pid=44080 comm="prometheus" laddr=172.21.15.80 lport=38203 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075323.674:7622): avc: denied { search } for pid=26728 comm="safe_timer" name="etc" dev="sda1" ino=1442620 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075238.739:7093): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075562.644:8800): avc: denied { create } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.737:6844): avc: denied { write } for pid=44080 comm="prometheus" path="socket:[196812]" dev="sockfs" ino=196812 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.737:9019): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173156 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075268.739:7345): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075482.066:8423): avc: denied { open } for pid=26330 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075152.028:6660): avc: denied { search } for pid=46227 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.740:9404): avc: denied { search } for pid=35348 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.739:7694): avc: denied { search } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=166036 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075400.033:7955): avc: denied { open } for pid=26330 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075343.044:7755): avc: denied { sendto } for pid=26330 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075582.061:8957): avc: denied { write } for pid=26330 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075260.715:7267): avc: denied { open } for pid=88987 comm="pgrep" path="/proc/26330/status" dev="proc" ino=132512 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075484.086:8465): avc: denied { search } for pid=51959 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968225 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c631,c994 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075434.793:8214): avc: denied { open } for pid=44080 comm="prometheus" path="/prometheus" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075401.993:8005): avc: denied { read } for pid=26728 comm="mgr-fin" name="localtime" dev="sda1" ino=394776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075563.278:8834): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075318.738:7501): avc: denied { read } for pid=35348 comm="node_exporter" name="xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075248.739:7172): avc: denied { read } for pid=35348 comm="node_exporter" name="dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075674.793:9425): avc: denied { read } for pid=44080 comm="prometheus" name="data" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075248.738:7171): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075498.705:8522): avc: denied { read } for pid=26728 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075261.332:7288): avc: denied { search } for pid=26728 comm="safe_timer" name="/" dev="overlay" ino=1442611 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075422.644:8165): avc: denied { getattr } for pid=44080 comm="prometheus" path="/etc/hosts" dev="tmpfs" ino=190812 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075322.643:7590): avc: denied { search } for pid=44080 comm="prometheus" name="/" dev="overlay" ino=1968129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075480.971:8419): avc: denied { read } for pid=26353 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075258.738:7240): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.738:9030): avc: denied { read } for pid=35348 comm="node_exporter" name="stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075644.206:9187): avc: denied { search } for pid=51959 comm="safe_timer" name="/" dev="overlay" ino=1968225 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c631,c994 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.310:7677): avc: denied { write } for pid=46227 comm="msgr-worker-2" laddr=172.21.15.80 lport=6814 faddr=172.21.15.97 fport=43132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075420.960:8130): avc: denied { open } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075262.008:7294): avc: denied { search } for pid=42602 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c166,c597 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075578.738:8939): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.740:8370): avc: denied { read } for pid=35348 comm="node_exporter" name="file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075505.701:8610): avc: denied { signal } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075428.739:8197): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=43630 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075277.429:7368): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075647.454:9228): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.739:7091): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075268.737:7330): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.739:7696): avc: denied { search } for pid=35348 comm="node_exporter" name="fs" dev="proc" ino=171371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075400.115:7983): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075338.207:7669): avc: denied { read } for pid=26728 comm="msgr-worker-2" path="socket:[173175]" dev="sockfs" ino=173175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075341.824:7721): avc: denied { read } for pid=57451 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075260.495:7261): avc: denied { write } for pid=42602 comm="tp_osd_tp" path="pipe:[187564]" dev="pipefs" ino=187564 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075322.838:7610): avc: denied { read } for pid=26728 comm="msgr-worker-1" path="pipe:[151559]" dev="pipefs" ino=151559 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.739:8873): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075643.418:9171): avc: denied { search } for pid=26728 comm="safe_timer" name="diff" dev="sda1" ino=1442611 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075178.737:6846): avc: denied { search } for pid=35348 comm="node_exporter" name="diff" dev="sda1" ino=1968004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075479.503:8385): avc: denied { search } for pid=46227 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968207 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c79,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075645.655:9217): avc: denied { search } for pid=57451 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1968244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075668.049:9363): avc: denied { write } for pid=26330 comm="conmon" name="socket" dev="tmpfs" ino=16686 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075179.941:6895): avc: denied { write } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075482.644:8437): avc: denied { search } for pid=44080 comm="prometheus" name="/" dev="overlay" ino=1968129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.843:6764): avc: denied { read } for pid=26728 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075258.738:7244): avc: denied { search } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=166036 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075319.649:7550): avc: denied { search } for pid=26728 comm="safe_timer" name="etc" dev="sda1" ino=1442620 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075508.738:8626): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.739:9401): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.739:8355): avc: denied { read } for pid=35348 comm="node_exporter" name="sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075164.277:6789): avc: denied { lock } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075269.276:7355): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075479.277:8377): avc: denied { search } for pid=42010 comm="grafana-server" name="/" dev="overlay" ino=1968169 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075503.278:8575): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075561.554:8780): avc: denied { open } for pid=42602 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075586.067:8994): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075398.739:7931): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=167607 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075348.741:7790): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075512.644:8659): avc: denied { getattr } for pid=44080 comm="prometheus" laddr=172.21.15.80 lport=33804 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075151.976:6659): avc: denied { getattr } for pid=26728 comm="mgr-fin" path="/usr/share/zoneinfo/UTC" dev="overlay" ino=1311473 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075318.738:7514): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075268.739:7347): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075418.740:8116): avc: denied { read } for pid=35348 comm="node_exporter" name="mounts" dev="proc" ino=167607 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075242.645:7164): avc: denied { append } for pid=44080 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075686.278:9441): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075418.739:8113): avc: denied { search } for pid=35348 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075567.004:8862): avc: denied { getattr } for pid=26728 comm="mgr-fin" path="/usr/share/zoneinfo/UTC" dev="sda1" ino=1311473 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075151.587:6643): avc: denied { write } for pid=26353 comm="safe_timer" path="pipe:[126774]" dev="pipefs" ino=126774 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075327.018:7632): avc: denied { search } for pid=26330 comm="conmon" name="systemd" dev="tmpfs" ino=16404 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075318.738:7511): avc: denied { search } for pid=35348 comm="node_exporter" name="fs" dev="proc" ino=171371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.741:7702): avc: denied { search } for pid=35348 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616075238.738:7087): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075652.644:9290): avc: denied { create } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075317.838:7485): avc: denied { write } for pid=26728 comm="msgr-worker-1" laddr=172.21.15.80 lport=36710 faddr=172.21.15.80 fport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075582.643:8966): avc: denied { write } for pid=44080 comm="prometheus" path="socket:[385809]" dev="sockfs" ino=385809 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075254.278:7189): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/rbd-details.json" dev="sda1" ino=1444782 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075158.739:6745): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075418.224:8104): avc: denied { search } for pid=26728 comm="safe_timer" name="usr" dev="sda1" ino=786698 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075348.738:7776): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075486.345:8486): avc: denied { search } for pid=42602 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c166,c597 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.740:7110): avc: denied { search } for pid=35348 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616075503.213:8571): avc: denied { read } for pid=26728 comm="msgr-worker-2" path="socket:[173175]" dev="sockfs" ino=173175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075241.246:7151): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075272.643:7363): avc: denied { connect } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075261.023:7280): avc: denied { write } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075258.739:7246): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.740:9406): avc: denied { search } for pid=35348 comm="node_exporter" name="host" dev="sda1" ino=1968013 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075348.741:7790): avc: denied { read } for pid=35348 comm="node_exporter" name="file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075434.793:8215): avc: denied { getattr } for pid=44080 comm="prometheus" path="/prometheus/queries.active" dev="dm-4" ino=158 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075672.643:9415): avc: denied { search } for pid=44080 comm="prometheus" name="etc" dev="sda1" ino=1968146 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075592.644:9051): avc: denied { read } for pid=44080 comm="prometheus" path="socket:[396311]" dev="sockfs" ino=396311 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.738:6854): avc: denied { read } for pid=35348 comm="node_exporter" name="net" dev="sysfs" ino=21519 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075422.958:8175): avc: denied { read } for pid=57451 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075423.036:8176): avc: denied { search } for pid=42602 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c166,c597 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.739:6740): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075505.975:8613): avc: denied { search } for pid=26353 comm="safe_timer" name="mon.smithi080" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075323.277:7619): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/osds-overview.json" dev="overlay" ino=1444776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075508.742:8648): avc: denied { search } for pid=35348 comm="node_exporter" name="user" dev="tmpfs" ino=16726 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075650.020:9280): avc: denied { write } for pid=26330 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075337.748:7668): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=394794 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075398.739:7934): avc: denied { read } for pid=35348 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.740:8890): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075151.976:6659): avc: denied { getattr } for pid=26728 comm="mgr-fin" name="UTC" dev="sda1" ino=1311473 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075263.277:7316): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.738:6738): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173156 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075236.984:7051): avc: denied { getattr } for pid=26728 comm="mgr-fin" path="/usr/share/zoneinfo/UTC" dev="overlay" ino=1311473 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075404.277:8058): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075505.975:8612): avc: denied { dac_read_search } for pid=26353 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075318.739:7517): avc: denied { search } for pid=35348 comm="node_exporter" name="user" dev="tmpfs" ino=16726 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.738:9028): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075408.740:8090): avc: denied { read } for pid=35348 comm="node_exporter" name="file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.741:9272): avc: denied { search } for pid=35348 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616075418.224:8104): avc: denied { getattr } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075568.775:8902): avc: denied { getattr } for pid=26728 comm="mgr-fin" path="/usr/lib64/python3.6" dev="overlay" ino=922750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075262.030:7295): avc: denied { open } for pid=26353 comm="rstore_compact" path="/var/lib/ceph/mon/ceph-smithi080/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075434.793:8216): avc: denied { getattr } for pid=44080 comm="prometheus" path="/prometheus/wal" dev="dm-4" ino=8388752 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075408.739:8085): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.740:6752): avc: denied { read } for pid=35348 comm="node_exporter" name="cpufreq" dev="sysfs" ino=30758 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075152.807:6678): avc: denied { open } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075480.060:8391): avc: denied { search } for pid=26330 comm="conmon" name="systemd" dev="tmpfs" ino=16404 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075648.739:9254): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/net/arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075236.988:7055): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075328.740:7646): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075587.277:9011): avc: denied { lock } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075587.157:9008): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075588.739:9035): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075151.905:6654): avc: denied { sendto } for pid=26330 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075500.973:8553): avc: denied { search } for pid=26353 comm="safe_timer" name="var" dev="sda1" ino=1442603 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075151.905:6653): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075168.739:6796): avc: denied { read } for pid=35348 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075343.044:7752): avc: denied { use } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075325.687:7627): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075337.034:7658): avc: denied { write } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075408.739:8089): avc: denied { search } for pid=35348 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616075421.963:8148): avc: denied { write } for pid=26330 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075418.740:8115): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075578.737:8935): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.739:6749): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/devices/system/cpu/cpu0/topology/physical_package_id" dev="sysfs" ino=28908 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.039:8867): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075321.460:7576): avc: denied { search } for pid=51959 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968225 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c631,c994 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075408.738:8076): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.739:7094): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075681.602:9432): avc: denied { read } for pid=26728 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075152.278:6666): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.521:7907): avc: denied { write } for pid=42602 comm="msgr-worker-0" laddr=172.21.15.80 lport=6808 faddr=172.21.15.97 fport=56436 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.739:7685): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.739:7786): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/class/net/eno1" dev="sysfs" ino=34869 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075667.539:9352): avc: denied { read } for pid=26728 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075260.715:7268): avc: denied { getattr } for pid=88987 comm="pgrep" path="/proc/26353" dev="proc" ino=152605 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.738:8342): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="overlay" ino=1968004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075563.036:8813): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075500.766:8552): avc: denied { open } for pid=99158 comm="pgrep" path="/proc/26353/status" dev="proc" ino=152649 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075508.738:8625): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="overlay" ino=1968004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075176.512:6841): avc: denied { search } for pid=57451 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075479.278:8382): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075236.405:7050): avc: denied { open } for pid=57451 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075258.739:7249): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075582.061:8958): avc: denied { sendto } for pid=26330 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075402.643:8011): avc: denied { search } for pid=44080 comm="prometheus" name="etc" dev="sda1" ino=1968146 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075667.311:9344): avc: denied { write } for pid=26353 comm="msgr-worker-1" laddr=172.21.15.80 lport=3300 faddr=172.21.15.97 fport=47416 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075248.739:7178): avc: denied { search } for pid=35348 comm="node_exporter" name="1" dev="proc" ino=167025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075236.278:7046): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075182.643:6912): avc: denied { create } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075319.003:7524): avc: denied { open } for pid=26330 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075343.784:7762): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.739:7778): avc: denied { search } for pid=35348 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.740:6751): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.738:6737): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.738:7775): avc: denied { search } for pid=35348 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075508.741:8644): avc: denied { search } for pid=35348 comm="node_exporter" name="fs" dev="proc" ino=171371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075422.248:8156): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075402.231:8009): avc: denied { search } for pid=42602 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c166,c597 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075569.277:8906): avc: denied { search } for pid=42010 comm="grafana-server" name="/" dev="overlay" ino=1968169 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.738:9027): avc: denied { read } for pid=35348 comm="node_exporter" name="file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075563.278:8833): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075668.737:9381): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.738:9248): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075672.643:9414): avc: denied { signal } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.739:7926): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075501.947:8557): avc: denied { read } for pid=42602 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075343.044:7755): avc: denied { write } for pid=26330 comm="conmon" name="socket" dev="tmpfs" ino=16686 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075645.684:9218): avc: denied { read } for pid=57451 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075236.987:7052): avc: denied { write } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075662.231:9302): avc: denied { read } for pid=51959 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075318.738:7509): avc: denied { getattr } for pid=35348 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075418.212:8103): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075485.972:8484): avc: denied { read } for pid=26353 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075152.644:6676): avc: denied { read } for pid=44080 comm="prometheus" path="socket:[287651]" dev="sockfs" ino=287651 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.894:7949): avc: denied { read } for pid=57451 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.741:6866): avc: denied { getattr } for pid=35348 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075504.742:8606): avc: denied { open } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075508.741:8644): avc: denied { read } for pid=35348 comm="node_exporter" name="file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075561.492:8778): avc: denied { write } for pid=57451 comm="tp_osd_tp" path="pipe:[227464]" dev="pipefs" ino=227464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075664.044:9335): avc: denied { search } for pid=26330 comm="conmon" name="journal" dev="tmpfs" ino=16682 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075421.962:8144): avc: denied { write } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.696:8335): avc: denied { append } for pid=42602 comm="log" path="/var/log/ceph/ceph-osd.0.log" dev="sda1" ino=395891 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.739:9263): avc: denied { read } for pid=35348 comm="node_exporter" name="entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075650.278:9286): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/cephfs-overview.json" dev="sda1" ino=1444772 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075650.278:9284): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075667.539:9351): avc: denied { search } for pid=26728 comm="safe_timer" name="/" dev="overlay" ino=1442611 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.737:9018): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075337.748:7668): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075666.004:9341): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.940:6881): avc: denied { search } for pid=26728 comm="safe_timer" name="usr" dev="sda1" ino=786698 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075344.277:7763): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.738:7773): avc: denied { search } for pid=35348 comm="node_exporter" name="7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075260.473:7257): avc: denied { append } for pid=46227 comm="log" path="/var/log/ceph/ceph-osd.1.log" dev="sda1" ino=395892 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.740:9040): avc: denied { search } for pid=35348 comm="node_exporter" name="host" dev="sda1" ino=1968013 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075398.749:7946): avc: denied { append } for pid=44080 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075319.002:7522): avc: denied { use } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075505.975:8613): avc: denied { read } for pid=26353 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.738:7087): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="overlay" ino=1968004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075428.738:8188): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173156 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075649.017:9276): avc: denied { write } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075484.086:8465): avc: denied { read } for pid=51959 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.742:6757): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.940:6881): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075260.930:7277): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.739:7928): avc: denied { search } for pid=35348 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.741:7113): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.738:9384): avc: denied { read } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075250.927:7187): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075643.148:9164): avc: denied { write } for pid=57451 comm="tp_osd_tp" path="pipe:[227464]" dev="pipefs" ino=227464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075268.738:7335): avc: denied { search } for pid=35348 comm="node_exporter" name="1" dev="proc" ino=167025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075585.989:8985): avc: denied { read } for pid=26353 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075236.277:7042): avc: denied { search } for pid=42010 comm="grafana-server" name="diff" dev="sda1" ino=1968169 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075268.739:7341): avc: denied { read } for pid=35348 comm="node_exporter" name="file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075584.276:8973): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.739:9263): avc: denied { search } for pid=35348 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075342.644:7741): avc: denied { getattr } for pid=44080 comm="prometheus" path="/etc/hosts" dev="tmpfs" ino=190812 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075667.551:9354): avc: denied { search } for pid=26728 comm="safe_timer" name="usr" dev="sda1" ino=786698 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075258.739:7250): avc: denied { search } for pid=35348 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.049:9363): avc: denied { sendto } for pid=26330 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075341.991:7724): avc: denied { read } for pid=26728 comm="mgr-fin" name="localtime" dev="overlay" ino=394776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075317.991:7489): avc: denied { read } for pid=42602 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075422.248:8156): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075562.644:8799): avc: denied { search } for pid=44080 comm="prometheus" name="/" dev="overlay" ino=1968129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075344.278:7766): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075503.288:8578): avc: denied { write } for pid=51959 comm="osd_srv_heartbt" path="pipe:[207623]" dev="pipefs" ino=207623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075318.737:7494): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="overlay" ino=1968004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.738:7921): avc: denied { read } for pid=35348 comm="node_exporter" name="stat" dev="proc" ino=4026532033 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075241.246:7151): avc: denied { search } for pid=26728 comm="safe_timer" name="etc" dev="sda1" ino=1442620 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075664.044:9332): avc: denied { use } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075440.754:8217): avc: denied { getattr } for pid=95869 comm="pgrep" path="/proc/26330" dev="proc" ino=132508 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075262.032:7302): avc: denied { remove_name } for pid=26353 comm="rocksdb:high0" name="000015.log" dev="dm-4" ino=137 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.739:8350): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075428.740:8204): avc: denied { search } for pid=35348 comm="node_exporter" name="kernel" dev="proc" ino=167394 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075498.737:8528): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075500.974:8556): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.742:7795): avc: denied { search } for pid=35348 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075255.943:7215): avc: denied { unlink } for pid=26353 comm="rocksdb:high0" name="000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075337.460:7665): avc: denied { open } for pid=51959 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075570.987:8917): avc: denied { search } for pid=26353 comm="safe_timer" name="mon.smithi080" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.739:8887): avc: denied { read } for pid=35348 comm="node_exporter" name="eno1" dev="sysfs" ino=34869 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075480.608:8399): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.521:7905): avc: denied { read } for pid=46227 comm="msgr-worker-1" path="socket:[243769]" dev="sockfs" ino=243769 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075644.010:9182): avc: denied { write } for pid=26330 comm="conmon" name="socket" dev="tmpfs" ino=16686 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075503.946:8591): avc: denied { read } for pid=42602 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075179.277:6887): avc: denied { lock } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075663.516:9329): avc: denied { search } for pid=26728 comm="safe_timer" name="libpod-7157ed55dd2bb6f82af892cdc2cadcbaa2c5f5b0b22e740b7b8d1bea0b6c44b3.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075179.941:6898): avc: denied { sendto } for pid=26330 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075668.049:9362): avc: denied { open } for pid=26330 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075398.741:7944): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075151.905:6653): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075504.021:8597): avc: denied { search } for pid=26330 comm="conmon" name="systemd" dev="tmpfs" ino=16404 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075425.961:8184): avc: denied { search } for pid=26353 comm="safe_timer" name="mon.smithi080" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.739:7780): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075318.759:7521): avc: denied { append } for pid=44080 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075255.494:7200): avc: denied { write } for pid=57451 comm="tp_osd_tp" path="pipe:[227463]" dev="pipefs" ino=227463 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075179.201:6884): avc: denied { open } for pid=51959 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075681.602:9432): avc: denied { open } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075328.742:7650): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075671.004:9412): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075428.739:8192): avc: denied { search } for pid=35348 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075420.960:8130): avc: denied { search } for pid=26353 comm="safe_timer" name="mon.smithi080" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075421.963:8147): avc: denied { open } for pid=26330 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075440.754:8220): avc: denied { search } for pid=95869 comm="pgrep" name="26353" dev="proc" ino=152605 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075562.031:8787): avc: denied { read } for pid=26330 comm="conmon" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075512.644:8660): avc: denied { write } for pid=44080 comm="prometheus" path="socket:[376242]" dev="sockfs" ino=376242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075587.157:9008): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075404.040:8043): avc: denied { use } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075173.975:6822): avc: denied { read } for pid=42602 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.278:7674): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075408.738:8083): avc: denied { search } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=166036 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075508.742:8645): avc: denied { read } for pid=35348 comm="node_exporter" name="mounts" dev="proc" ino=167607 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075320.727:7564): avc: denied { search } for pid=92179 comm="pgrep" name="26353" dev="proc" ino=152605 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.738:6856): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/class/net/eno1" dev="sysfs" ino=34869 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075261.332:7289): avc: denied { open } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.738:9389): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075562.143:8795): avc: denied { search } for pid=51959 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075428.740:8204): avc: denied { read } for pid=35348 comm="node_exporter" name="entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.739:8367): avc: denied { search } for pid=35348 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075342.014:7728): avc: denied { read } for pid=26353 comm="msgr-worker-0" path="socket:[280030]" dev="sockfs" ino=280030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.737:6846): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.276:9369): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075179.277:6888): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075587.005:9004): avc: denied { search } for pid=26728 comm="mgr-fin" name="usr" dev="sda1" ino=786698 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075236.278:7049): avc: denied { read } for pid=42010 comm="grafana-server" name="pool-detail.json" dev="sda1" ino=1444777 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075175.709:6834): avc: denied { append } for pid=44080 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075152.644:6669): avc: denied { search } for pid=44080 comm="prometheus" name="etc" dev="sda1" ino=1968146 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075592.644:9048): avc: denied { connect } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075498.738:8533): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=30846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075672.643:9422): avc: denied { getattr } for pid=44080 comm="prometheus" laddr=172.21.15.80 lport=48620 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075502.644:8567): avc: denied { connect } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.739:8366): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075155.910:6717): avc: denied { use } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075562.644:8807): avc: denied { write } for pid=44080 comm="prometheus" path="socket:[382863]" dev="sockfs" ino=382863 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075272.643:7365): avc: denied { write } for pid=44080 comm="prometheus" path="socket:[324207]" dev="sockfs" ino=324207 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.739:7100): avc: denied { read } for pid=35348 comm="node_exporter" name="stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075258.739:7247): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.740:8370): avc: denied { search } for pid=35348 comm="node_exporter" name="fs" dev="proc" ino=171371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075267.367:7325): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075586.067:8993): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075563.278:8835): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075587.005:9004): avc: denied { search } for pid=26728 comm="mgr-fin" name="etc" dev="sda1" ino=1442620 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075255.484:7195): avc: denied { read } for pid=42602 comm="msgr-worker-1" path="socket:[244290]" dev="sockfs" ino=244290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.741:8893): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/diskstats" dev="proc" ino=4026532083 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075428.742:8208): avc: denied { getattr } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16396 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075321.662:7577): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075402.643:8011): avc: denied { search } for pid=44080 comm="prometheus" name="/" dev="overlay" ino=1968129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075318.739:7518): avc: denied { search } for pid=35348 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.737:9380): avc: denied { read } for pid=35348 comm="node_exporter" name="stat" dev="proc" ino=173156 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075342.528:7737): avc: denied { open } for pid=51959 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075405.824:8062): avc: denied { search } for pid=57451 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c179,c314 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075503.278:8577): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/rbd-details.json" dev="overlay" ino=1444782 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075562.031:8789): avc: denied { search } for pid=26330 comm="conmon" name="systemd" dev="tmpfs" ino=16404 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075180.906:6903): avc: denied { search } for pid=26353 comm="safe_timer" name="/" dev="overlay" ino=1442592 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075255.494:7201): avc: denied { write } for pid=42602 comm="tp_osd_tp" path="pipe:[187564]" dev="pipefs" ino=187564 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075587.157:9008): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075320.941:7569): avc: denied { open } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.739:7685): avc: denied { read } for pid=35348 comm="node_exporter" name="entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075496.705:8513): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=394794 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075152.278:6663): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075588.737:9017): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075318.738:7500): avc: denied { read } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075248.739:7178): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=167607 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075320.276:7554): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075402.643:8012): avc: denied { create } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075569.278:8911): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075237.221:7061): avc: denied { search } for pid=26728 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075651.002:9288): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075494.792:8509): avc: denied { read } for pid=44080 comm="prometheus" name="data" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075569.277:8906): avc: denied { search } for pid=42010 comm="grafana-server" name="etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075398.739:7923): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=21498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075488.738:8498): avc: denied { read } for pid=35348 comm="node_exporter" name="file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075480.972:8421): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075328.739:7643): avc: denied { search } for pid=35348 comm="node_exporter" name="fs" dev="proc" ino=171371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075500.277:8548): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="sda1" ino=1444771 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075508.739:8635): avc: denied { read } for pid=35348 comm="node_exporter" name="cpufreq" dev="sysfs" ino=30758 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075500.277:8548): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-cluster.json" dev="sda1" ino=1444771 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075480.971:8419): avc: denied { search } for pid=26353 comm="safe_timer" name="mon.smithi080" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075152.278:6666): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075569.278:8909): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075568.742:8896): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075322.838:7609): avc: denied { write } for pid=26728 comm="safe_timer" path="pipe:[151559]" dev="pipefs" ino=151559 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.894:7949): avc: denied { open } for pid=57451 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075255.930:7210): avc: denied { create } for pid=26353 comm="rstore_compact" name="000015.log" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075162.644:6786): avc: denied { write } for pid=44080 comm="prometheus" path="socket:[294814]" dev="sockfs" ino=294814 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.739:7697): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075501.999:8558): avc: denied { read } for pid=26728 comm="mgr-fin" name="localtime" dev="sda1" ino=394776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075502.644:8560): avc: denied { signal } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075239.233:7123): avc: denied { search } for pid=26728 comm="safe_timer" name="/" dev="overlay" ino=1442611 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075428.742:8212): avc: denied { search } for pid=35348 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616075668.956:9408): avc: denied { search } for pid=57451 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c179,c314 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075342.528:7737): avc: denied { search } for pid=51959 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075669.069:9409): avc: denied { write } for pid=42602 comm="bstore_kv_sync" path="/dev/dm-3" dev="devtmpfs" ino=107951 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.739:9401): avc: denied { getattr } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16396 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075171.930:6804): avc: denied { write } for pid=26353 comm="msgr-worker-2" laddr=172.21.15.80 lport=3300 faddr=172.21.15.97 fport=47434 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075152.644:6670): avc: denied { create } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075667.551:9354): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=394794 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075643.418:9172): avc: denied { search } for pid=26728 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075261.344:7291): avc: denied { search } for pid=26728 comm="safe_timer" name="etc" dev="sda1" ino=1442620 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075343.044:7755): avc: denied { search } for pid=26330 comm="conmon" name="systemd" dev="tmpfs" ino=16404 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075646.001:9220): avc: denied { dac_read_search } for pid=26353 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075587.145:9005): avc: denied { read } for pid=26728 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075345.946:7770): avc: denied { search } for pid=26353 comm="safe_timer" name="var" dev="sda1" ino=1442603 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075342.528:7736): avc: denied { read } for pid=51959 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075417.059:8096): avc: denied { append } for pid=26353 comm="log" path="/var/log/ceph/ceph-mon.smithi080.log" dev="sda1" ino=395863 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075151.976:6659): avc: denied { search } for pid=26728 comm="mgr-fin" name="usr" dev="sda1" ino=786698 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075248.738:7168): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.739:8362): avc: denied { search } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=166036 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075508.742:8645): avc: denied { search } for pid=35348 comm="node_exporter" name="1" dev="proc" ino=167025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075578.740:8942): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.277:9374): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.696:8331): avc: denied { write } for pid=78525 comm="ceph_timer" path="pipe:[283728]" dev="pipefs" ino=283728 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075262.644:7308): avc: denied { connect } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075567.048:8864): avc: denied { open } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075587.277:9013): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075648.738:9247): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="overlay" ino=1968004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075582.643:8964): avc: denied { connect } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.739:8875): avc: denied { read } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075562.645:8809): avc: denied { append } for pid=44080 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075482.620:8434): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075254.788:7190): avc: denied { read } for pid=44080 comm="prometheus" name="data" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.739:8360): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=30846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.739:9260): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/hwmon/hwmon0/uevent" dev="sysfs" ino=35065 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.738:6854): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075422.645:8174): avc: denied { append } for pid=44080 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.738:8342): avc: denied { search } for pid=35348 comm="node_exporter" name="diff" dev="sda1" ino=1968004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075671.004:9410): avc: denied { search } for pid=26353 comm="safe_timer" name="/" dev="overlay" ino=1442592 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075175.936:6836): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075668.738:9392): avc: denied { search } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=166036 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075248.739:7177): avc: denied { search } for pid=35348 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.739:8357): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=167607 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075158.739:6740): avc: denied { search } for pid=35348 comm="node_exporter" name="kernel" dev="proc" ino=167394 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075248.739:7175): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/fs/xfs/stats/stats" dev="sysfs" ino=45563 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075180.906:6905): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075428.739:8199): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075340.138:7712): avc: denied { search } for pid=46227 comm="safe_timer" name="/" dev="overlay" ino=1968207 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c79,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075586.067:8994): avc: denied { search } for pid=26330 comm="conmon" name="journal" dev="tmpfs" ino=16682 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075152.278:6665): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075565.701:8840): avc: denied { signal } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075328.739:7638): avc: denied { read } for pid=35348 comm="node_exporter" name="hwmon" dev="sysfs" ino=21483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075322.643:7594): avc: denied { getattr } for pid=44080 comm="prometheus" laddr=172.21.15.80 lport=60774 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075503.971:8592): avc: denied { read } for pid=42602 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075268.739:7339): avc: denied { search } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=166036 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075248.738:7170): avc: denied { read } for pid=35348 comm="node_exporter" name="stat" dev="proc" ino=173156 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075154.831:6707): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=394794 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.739:6740): avc: denied { read } for pid=35348 comm="node_exporter" name="entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.940:6881): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=394794 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075338.278:7675): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075503.636:8584): avc: denied { write } for pid=26353 comm="safe_timer" path="pipe:[126774]" dev="pipefs" ino=126774 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075504.754:8609): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075262.645:7312): avc: denied { append } for pid=44080 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.739:7932): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075260.849:7272): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075318.738:7505): avc: denied { search } for pid=35348 comm="node_exporter" name="1" dev="proc" ino=167025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075339.748:7711): avc: denied { search } for pid=26728 comm="safe_timer" name="libpod-7157ed55dd2bb6f82af892cdc2cadcbaa2c5f5b0b22e740b7b8d1bea0b6c44b3.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075480.596:8396): avc: denied { search } for pid=26728 comm="safe_timer" name="/" dev="overlay" ino=1442611 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075650.278:9286): avc: denied { read } for pid=42010 comm="grafana-server" name="cephfs-overview.json" dev="sda1" ino=1444772 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075482.644:8439): avc: denied { create } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.737:9378): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075488.740:8504): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.940:6879): avc: denied { search } for pid=26728 comm="safe_timer" name="libpod-7157ed55dd2bb6f82af892cdc2cadcbaa2c5f5b0b22e740b7b8d1bea0b6c44b3.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075401.277:8001): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/pool-overview.json" dev="overlay" ino=1444778 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075419.277:8123): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075248.738:7170): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173156 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075239.206:7122): avc: denied { search } for pid=57451 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1968244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075238.739:7091): avc: denied { read } for pid=35348 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075236.405:7050): avc: denied { read } for pid=57451 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075662.278:9306): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075261.332:7289): avc: denied { read } for pid=26728 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075261.344:7291): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=394794 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.739:9264): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075257.331:7235): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075662.644:9318): avc: denied { search } for pid=44080 comm="prometheus" name="/" dev="overlay" ino=1968129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.740:9036): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075587.276:9009): avc: denied { search } for pid=42010 comm="grafana-server" name="etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075338.310:7679): avc: denied { write } for pid=51959 comm="msgr-worker-1" laddr=172.21.15.80 lport=6824 faddr=172.21.15.97 fport=37394 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.739:7686): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/fs/xfs/stats/stats" dev="sysfs" ino=45563 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.740:8371): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075498.705:8521): avc: denied { search } for pid=26728 comm="safe_timer" name="/" dev="overlay" ino=1442611 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075488.737:8488): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="overlay" ino=1968004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075480.971:8418): avc: denied { dac_read_search } for pid=26353 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075644.277:9188): avc: denied { search } for pid=42010 comm="grafana-server" name="etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075424.196:8181): avc: denied { search } for pid=46227 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968207 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c79,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075320.727:7563): avc: denied { getattr } for pid=92179 comm="pgrep" path="/proc/26353" dev="proc" ino=152605 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075569.278:8908): avc: denied { lock } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075155.910:6718): avc: denied { read } for pid=26330 comm="conmon" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075258.740:7252): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075162.644:6783): avc: denied { setopt } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075500.011:8541): avc: denied { open } for pid=26330 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075418.224:8104): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075504.754:8608): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.521:7906): avc: denied { read } for pid=51959 comm="msgr-worker-0" path="socket:[239998]" dev="sockfs" ino=239998 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.738:8872): avc: denied { search } for pid=35348 comm="node_exporter" name="7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.738:9024): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/net/arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075428.739:8192): avc: denied { search } for pid=35348 comm="node_exporter" name="fs" dev="proc" ino=171371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075650.020:9279): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075317.914:7487): avc: denied { read } for pid=57451 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075262.644:7304): avc: denied { search } for pid=44080 comm="prometheus" name="/" dev="overlay" ino=1968129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.738:9027): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075343.044:7755): avc: denied { write } for pid=26330 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075401.277:7999): avc: denied { read open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075680.806:9429): avc: denied { open } for pid=105979 comm="pgrep" path="/proc/26330/status" dev="proc" ino=132512 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075158.739:6740): avc: denied { search } for pid=35348 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075320.277:7559): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/cephfs-overview.json" dev="overlay" ino=1444772 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.341:7681): avc: denied { read } for pid=26353 comm="msgr-worker-2" path="pipe:[126774]" dev="pipefs" ino=126774 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.739:9259): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075488.737:8488): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075240.994:7144): avc: denied { search } for pid=26330 comm="conmon" name="journal" dev="tmpfs" ino=16682 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075260.715:7267): avc: denied { read } for pid=88987 comm="pgrep" name="status" dev="proc" ino=132512 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075646.001:9220): avc: denied { search } for pid=26353 comm="safe_timer" name="/" dev="overlay" ino=1442592 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075342.429:7733): avc: denied { search } for pid=34534 comm="ceph-crash" name="var" dev="sda1" ino=1444638 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c85,c406 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075319.649:7550): avc: denied { getattr } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075662.038:9300): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075644.278:9193): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075255.930:7211): avc: denied { getattr } for pid=26353 comm="rstore_compact" path="/sys" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.738:9396): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075671.004:9410): avc: denied { dac_read_search } for pid=26353 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075408.737:8072): avc: denied { search } for pid=35348 comm="node_exporter" name="7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.740:6750): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075272.643:7364): avc: denied { getattr } for pid=44080 comm="prometheus" laddr=172.21.15.80 lport=33644 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075505.975:8612): avc: denied { getattr } for pid=26353 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075321.005:7573): avc: denied { open } for pid=26330 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075508.739:8636): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/net/dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075440.754:8218): avc: denied { search } for pid=95869 comm="pgrep" name="26330" dev="proc" ino=132508 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075478.739:8362): avc: denied { search } for pid=35348 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075686.278:9441): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075643.148:9165): avc: denied { write } for pid=42602 comm="tp_osd_tp" path="pipe:[187564]" dev="pipefs" ino=187564 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075421.995:8153): avc: denied { search } for pid=26728 comm="mgr-fin" name="etc" dev="sda1" ino=1442620 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075562.143:8795): avc: denied { open } for pid=51959 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.738:8872): avc: denied { read } for pid=35348 comm="node_exporter" name="stat" dev="proc" ino=173156 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075652.644:9293): avc: denied { connect } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075318.738:7512): avc: denied { read } for pid=35348 comm="node_exporter" name="entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075584.277:8975): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.740:9039): avc: denied { search } for pid=35348 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616075318.738:7505): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=167607 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075268.739:7348): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075322.007:7580): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075588.738:9022): avc: denied { read } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075643.418:9172): avc: denied { search } for pid=26728 comm="safe_timer" name="libpod-7157ed55dd2bb6f82af892cdc2cadcbaa2c5f5b0b22e740b7b8d1bea0b6c44b3.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075344.278:7768): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075323.662:7621): avc: denied { search } for pid=26728 comm="safe_timer" name="libpod-7157ed55dd2bb6f82af892cdc2cadcbaa2c5f5b0b22e740b7b8d1bea0b6c44b3.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075428.739:8195): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.739:9397): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075171.931:6805): avc: denied { read } for pid=26353 comm="msgr-worker-2" path="socket:[173169]" dev="sockfs" ino=173169 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075572.644:8925): avc: denied { getattr } for pid=44080 comm="prometheus" laddr=172.21.15.80 lport=37238 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075428.739:8193): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/net/arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075562.031:8788): avc: denied { write } for pid=26330 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075152.819:6681): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075239.464:7128): avc: denied { open } for pid=51959 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075663.528:9331): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075319.003:7525): avc: denied { sendto } for pid=26330 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075500.766:8552): avc: denied { search } for pid=99158 comm="pgrep" name="26353" dev="proc" ino=152605 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075151.905:6652): avc: denied { read } for pid=26330 comm="conmon" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075158.742:6761): avc: denied { search } for pid=35348 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616075418.749:8122): avc: denied { append } for pid=44080 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.738:8344): avc: denied { read } for pid=35348 comm="node_exporter" name="stat" dev="proc" ino=173156 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.740:9037): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075644.010:9181): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075155.903:6715): avc: denied { read } for pid=26353 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075485.278:8480): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075492.643:8508): avc: denied { search } for pid=44080 comm="prometheus" name="etc" dev="sda1" ino=1968146 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075652.644:9295): avc: denied { write } for pid=44080 comm="prometheus" path="socket:[407685]" dev="sockfs" ino=407685 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075179.201:6884): avc: denied { read } for pid=51959 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075403.277:8032): avc: denied { search } for pid=51959 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075563.036:8813): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.739:7929): avc: denied { search } for pid=35348 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075257.278:7230): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075425.961:8184): avc: denied { read } for pid=26353 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075240.926:7131): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075320.941:7569): avc: denied { read } for pid=26353 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075344.277:7763): avc: denied { search } for pid=42010 comm="grafana-server" name="etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075478.739:8366): avc: denied { search } for pid=35348 comm="node_exporter" name="user" dev="tmpfs" ino=16726 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075506.278:8621): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075563.277:8830): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075268.739:7341): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.739:8876): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075328.739:7640): avc: denied { read } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075644.010:9182): avc: denied { sendto } for pid=26330 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075319.649:7551): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075342.644:7748): avc: denied { read } for pid=44080 comm="prometheus" path="socket:[340442]" dev="sockfs" ino=340442 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075485.278:8481): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075400.033:7955): avc: denied { write } for pid=26330 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075482.644:8444): avc: denied { read } for pid=44080 comm="prometheus" path="socket:[367870]" dev="sockfs" ino=367870 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075563.024:8810): avc: denied { read } for pid=26728 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075161.278:6777): avc: denied { read open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.739:6741): avc: denied { search } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=166036 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075578.738:8937): avc: denied { read } for pid=35348 comm="node_exporter" name="cpufreq" dev="sysfs" ino=30758 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075260.473:7259): avc: denied { search } for pid=46227 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075277.429:7369): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075237.221:7062): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075404.393:8060): avc: denied { search } for pid=46227 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968207 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c79,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075160.856:6772): avc: denied { search } for pid=26728 comm="safe_timer" name="usr" dev="sda1" ino=786698 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075267.281:7322): avc: denied { write } for pid=26705 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075440.754:8219): avc: denied { getattr } for pid=95869 comm="pgrep" path="/proc/26353" dev="proc" ino=152605 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075421.995:8153): avc: denied { search } for pid=26728 comm="mgr-fin" name="/" dev="overlay" ino=1442611 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075480.608:8399): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075400.848:7990): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075402.643:8014): avc: denied { setopt } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075344.278:7767): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075508.738:8625): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075667.539:9352): avc: denied { open } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075258.739:7248): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.739:7693): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075421.995:8153): avc: denied { search } for pid=26728 comm="mgr-fin" name="usr" dev="sda1" ino=786698 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075588.737:9020): avc: denied { read } for pid=35348 comm="node_exporter" name="fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.739:8877): avc: denied { search } for pid=35348 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075262.030:7300): avc: denied { getattr } for pid=26353 comm="rstore_compact" path="/sys/devices/virtual/block/dm-4/queue/logical_block_size" dev="sysfs" ino=45217 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075488.740:8501): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075419.278:8125): avc: denied { read open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.739:9399): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075260.849:7270): avc: denied { lock } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075480.971:8418): avc: denied { search } for pid=26353 comm="safe_timer" name="/" dev="overlay" ino=1442592 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.741:7699): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075155.903:6714): avc: denied { dac_read_search } for pid=26353 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075255.319:7193): avc: denied { search } for pid=26728 comm="safe_timer" name="usr" dev="sda1" ino=786698 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075342.644:7744): avc: denied { setopt } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075562.644:8804): avc: denied { connect } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.738:6736): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.049:9361): avc: denied { read } for pid=26330 comm="conmon" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075323.277:7617): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075422.236:8154): avc: denied { search } for pid=26728 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075337.035:7659): avc: denied { open } for pid=26330 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075478.739:8356): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075505.975:8612): avc: denied { search } for pid=26353 comm="safe_timer" name="/" dev="overlay" ino=1442592 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075498.717:8524): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.739:9251): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075503.277:8572): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075482.644:8441): avc: denied { connect } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.740:6753): avc: denied { search } for pid=35348 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075261.023:7283): avc: denied { search } for pid=26330 comm="conmon" name="journal" dev="tmpfs" ino=16682 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075428.742:8209): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075241.233:7149): avc: denied { read } for pid=26728 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075337.460:7665): avc: denied { search } for pid=51959 comm="safe_timer" name="/" dev="overlay" ino=1968225 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c631,c994 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075173.934:6817): avc: denied { write } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075428.739:8190): avc: denied { read } for pid=35348 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075262.644:7309): avc: denied { getattr } for pid=44080 comm="prometheus" laddr=172.21.15.80 lport=33433 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075242.644:7158): avc: denied { create } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075643.418:9172): avc: denied { read } for pid=26728 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075428.739:8189): avc: denied { read } for pid=35348 comm="node_exporter" name="fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075485.972:8484): avc: denied { open } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075399.314:7951): avc: denied { search } for pid=51959 comm="safe_timer" name="/" dev="overlay" ino=1968225 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c631,c994 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.739:8882): avc: denied { read } for pid=35348 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075160.904:6773): avc: denied { open } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075344.278:7768): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.738:9391): avc: denied { read } for pid=35348 comm="node_exporter" name="hwmon0" dev="sysfs" ino=35068 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075647.010:9227): avc: denied { search } for pid=26728 comm="mgr-fin" name="/" dev="overlay" ino=1442611 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075422.644:8165): avc: denied { search } for pid=44080 comm="prometheus" name="/" dev="overlay" ino=1968129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.738:7683): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075257.278:7231): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075508.740:8643): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=43630 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075492.643:8508): avc: denied { search } for pid=44080 comm="prometheus" name="/" dev="overlay" ino=1968129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075418.212:8102): avc: denied { open } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075152.277:6662): avc: denied { search } for pid=42010 comm="grafana-server" name="/" dev="overlay" ino=1968169 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075651.002:9287): avc: denied { search } for pid=26353 comm="safe_timer" name="/" dev="overlay" ino=1442592 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075272.643:7362): avc: denied { connect } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075569.278:8911): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075586.013:8990): avc: denied { open } for pid=51959 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075643.430:9174): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=394794 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075260.473:7259): avc: denied { open } for pid=46227 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.741:7940): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075512.644:8654): avc: denied { create } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075341.991:7724): avc: denied { read } for pid=26728 comm="mgr-fin" name="localtime" dev="sda1" ino=394776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075484.086:8465): avc: denied { open } for pid=51959 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075260.473:7258): avc: denied { search } for pid=46227 comm="safe_timer" name="diff" dev="sda1" ino=1968207 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075178.741:6870): avc: denied { search } for pid=35348 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075406.151:8068): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075260.715:7269): avc: denied { search } for pid=88987 comm="pgrep" name="26353" dev="proc" ino=152605 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.741:6867): avc: denied { getattr } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16396 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075649.454:9277): avc: denied { read } for pid=26728 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075585.815:8981): avc: denied { read } for pid=46227 comm="msgr-worker-2" path="pipe:[189374]" dev="pipefs" ino=189374 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075151.587:6645): avc: denied { write } for pid=26353 comm="msgr-worker-2" laddr=172.21.15.80 lport=3300 faddr=172.21.15.97 fport=47434 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075260.849:7273): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.272:7083): avc: denied { search } for pid=46227 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968207 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c79,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.743:8897): avc: denied { search } for pid=35348 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.739:7695): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075508.739:8638): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=30846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075342.644:7747): avc: denied { write } for pid=44080 comm="prometheus" path="socket:[343112]" dev="sockfs" ino=343112 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075242.997:7165): avc: denied { write } for pid=26330 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075272.643:7358): avc: denied { create } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075268.739:7340): avc: denied { getattr } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16396 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075512.644:8658): avc: denied { connect } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075425.961:8185): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075340.945:7713): avc: denied { open } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075173.975:6822): avc: denied { open } for pid=42602 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.739:8881): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=167607 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075585.815:8978): avc: denied { read } for pid=46227 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075645.684:9218): avc: denied { open } for pid=57451 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075484.114:8468): avc: denied { read } for pid=42602 comm="msgr-worker-2" path="socket:[245136]" dev="sockfs" ino=245136 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075485.278:8481): avc: denied { read open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075498.737:8530): avc: denied { search } for pid=35348 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075319.649:7550): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=394794 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075344.278:7768): avc: denied { read open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075562.644:8801): avc: denied { create } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075321.662:7577): avc: denied { getattr } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075323.012:7611): avc: denied { use } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075662.231:9302): avc: denied { open } for pid=51959 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075268.740:7350): avc: denied { search } for pid=35348 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075319.649:7550): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075402.644:8019): avc: denied { append } for pid=44080 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075498.737:8529): avc: denied { read } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.739:9397): avc: denied { search } for pid=35348 comm="node_exporter" name="kernel" dev="proc" ino=167394 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075172.644:6811): avc: denied { search } for pid=44080 comm="prometheus" name="etc" dev="sda1" ino=1968146 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075319.002:7523): avc: denied { read } for pid=26330 comm="conmon" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075318.738:7503): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/fs/xfs/stats/stats" dev="sysfs" ino=45563 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.621:7916): avc: denied { read } for pid=26353 comm="msgr-worker-2" path="pipe:[126774]" dev="pipefs" ino=126774 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075667.311:9343): avc: denied { read } for pid=26353 comm="msgr-worker-1" path="socket:[167588]" dev="sockfs" ino=167588 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075322.643:7590): avc: denied { search } for pid=44080 comm="prometheus" name="etc" dev="sda1" ino=1968146 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075173.934:6819): avc: denied { search } for pid=26330 comm="conmon" name="journal" dev="tmpfs" ino=16682 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075648.739:9250): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075403.306:8039): avc: denied { write } for pid=51959 comm="msgr-worker-2" laddr=172.21.15.80 lport=6822 faddr=172.21.15.97 fport=36036 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.739:7101): avc: denied { read } for pid=35348 comm="node_exporter" name="entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.739:6744): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.739:8880): avc: denied { search } for pid=35348 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075172.284:6810): avc: denied { search } for pid=46227 comm="safe_timer" name="/" dev="overlay" ino=1968207 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c79,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.742:7796): avc: denied { search } for pid=35348 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616075646.001:9223): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075582.061:8957): avc: denied { open } for pid=26330 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075337.736:7666): avc: denied { read } for pid=26728 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.740:7788): avc: denied { read } for pid=35348 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075320.277:7558): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.696:8336): avc: denied { append } for pid=57451 comm="log" path="/var/log/ceph/ceph-osd.3.log" dev="sda1" ino=395896 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075643.418:9171): avc: denied { open } for pid=26728 comm="safe_timer" path="/proc/meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075173.934:6818): avc: denied { read } for pid=26330 comm="conmon" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075263.278:7318): avc: denied { read open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075419.277:8123): avc: denied { getattr } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075479.277:8377): avc: denied { getattr } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075268.738:7334): avc: denied { read } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075506.277:8617): avc: denied { getattr } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075582.643:8962): avc: denied { create } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075481.644:8422): avc: denied { search } for pid=42602 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075242.644:7160): avc: denied { connect } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075339.020:7705): avc: denied { search } for pid=42602 comm="safe_timer" name="/" dev="overlay" ino=1968187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c166,c597 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075255.943:7214): avc: denied { read } for pid=26353 comm="rocksdb:high0" name="000016.sst" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075400.848:7989): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075408.738:8080): avc: denied { search } for pid=35348 comm="node_exporter" name="kernel" dev="proc" ino=167394 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075488.740:8501): avc: denied { search } for pid=35348 comm="node_exporter" name="user" dev="tmpfs" ino=16726 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075258.740:7252): avc: denied { read } for pid=35348 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075173.934:6819): avc: denied { write } for pid=26330 comm="conmon" name="socket" dev="tmpfs" ino=16686 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075664.044:9335): avc: denied { search } for pid=26330 comm="conmon" name="systemd" dev="tmpfs" ino=16404 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075587.005:9004): avc: denied { search } for pid=26728 comm="mgr-fin" name="/" dev="overlay" ino=1442611 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075260.715:7269): avc: denied { open } for pid=88987 comm="pgrep" path="/proc/26353/status" dev="proc" ino=152649 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.739:7778): avc: denied { read } for pid=35348 comm="node_exporter" name="entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075644.010:9181): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075417.059:8097): avc: denied { write } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075428.742:8213): avc: denied { search } for pid=35348 comm="node_exporter" name="host" dev="sda1" ino=1968013 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075161.277:6775): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075488.738:8497): avc: denied { search } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=166036 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075563.036:8813): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075318.738:7505): avc: denied { read } for pid=35348 comm="node_exporter" name="mounts" dev="proc" ino=167607 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075668.277:9372): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075398.739:7925): avc: denied { read } for pid=35348 comm="node_exporter" name="ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075254.278:7189): avc: denied { read } for pid=42010 comm="grafana-server" name="rbd-details.json" dev="sda1" ino=1444782 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075341.041:7716): avc: denied { write } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075400.103:7961): avc: denied { search } for pid=26728 comm="safe_timer" name="/" dev="overlay" ino=1442611 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075268.737:7332): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075340.945:7715): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.741:7940): avc: denied { search } for pid=35348 comm="node_exporter" name="user" dev="tmpfs" ino=16726 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075428.739:8196): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/class/hwmon" dev="sysfs" ino=21483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075419.278:8125): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075485.278:8480): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075490.076:8506): avc: denied { write } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075649.454:9277): avc: denied { open } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.742:6759): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075172.905:6812): avc: denied { search } for pid=26728 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.737:6846): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="overlay" ino=1968004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075508.742:8650): avc: denied { search } for pid=35348 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616075643.430:9174): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.740:9405): avc: denied { search } for pid=35348 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616075402.115:8008): avc: denied { read } for pid=26728 comm="safe_timer" name="meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075561.554:8780): avc: denied { read } for pid=42602 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.049:9363): avc: denied { write } for pid=26330 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075262.644:7307): avc: denied { setopt } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.738:9388): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075585.815:8979): avc: denied { append } for pid=46227 comm="log" path="/var/log/ceph/ceph-osd.1.log" dev="sda1" ino=395892 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075179.277:6890): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075343.033:7751): avc: denied { search } for pid=42602 comm="safe_timer" name="/" dev="overlay" ino=1968187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c166,c597 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075162.644:6784): avc: denied { connect } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075421.838:8138): avc: denied { append } for pid=42602 comm="log" path="/var/log/ceph/ceph-osd.0.log" dev="sda1" ino=395891 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075241.234:7150): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075240.925:7129): avc: denied { search } for pid=26353 comm="safe_timer" name="var" dev="sda1" ino=1442603 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075587.277:9014): avc: denied { read open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075504.754:8608): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=394794 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075262.644:7311): avc: denied { read } for pid=44080 comm="prometheus" path="socket:[320090]" dev="sockfs" ino=320090 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.738:8343): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075664.044:9335): avc: denied { sendto } for pid=26330 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075242.997:7166): avc: denied { write } for pid=26330 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075348.738:7773): avc: denied { read } for pid=35348 comm="node_exporter" name="stat" dev="proc" ino=173156 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.738:9021): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.738:8344): avc: denied { search } for pid=35348 comm="node_exporter" name="7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075400.956:7995): avc: denied { write } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075322.747:7608): avc: denied { search } for pid=57451 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075241.246:7152): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075482.620:8435): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075508.742:8649): avc: denied { search } for pid=35348 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075562.031:8788): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075343.044:7755): avc: denied { search } for pid=26330 comm="conmon" name="journal" dev="tmpfs" ino=16682 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075406.151:8068): avc: denied { search } for pid=26728 comm="safe_timer" name="etc" dev="sda1" ino=1442620 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075648.017:9236): avc: denied { search } for pid=26330 comm="conmon" name="systemd" dev="tmpfs" ino=16404 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075685.416:9436): avc: denied { search } for pid=51959 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075404.401:8061): avc: denied { open } for pid=46227 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075562.004:8782): avc: denied { search } for pid=26728 comm="mgr-fin" name="/" dev="overlay" ino=1442611 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.738:7774): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.739:7097): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=167607 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075643.430:9174): avc: denied { getattr } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075674.793:9425): avc: denied { open } for pid=44080 comm="prometheus" path="/prometheus" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.761:6763): avc: denied { append } for pid=44080 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.277:7670): avc: denied { search } for pid=42010 comm="grafana-server" name="etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075241.233:7149): avc: denied { open } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075152.028:6661): avc: denied { open } for pid=46227 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075421.928:8143): avc: denied { search } for pid=57451 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1968244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075586.067:8991): avc: denied { use } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075644.278:9193): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075174.917:6830): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.712:9377): avc: denied { search } for pid=51959 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968225 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c631,c994 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.737:9381): avc: denied { read } for pid=35348 comm="node_exporter" name="fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075501.947:8557): avc: denied { open } for pid=42602 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075662.278:9308): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075268.738:7333): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/class/hwmon" dev="sysfs" ino=21483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075508.742:8651): avc: denied { search } for pid=35348 comm="node_exporter" name="host" dev="sda1" ino=1968013 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075255.929:7208): avc: denied { open } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075402.038:8006): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075238.738:7089): avc: denied { read } for pid=35348 comm="node_exporter" name="stat" dev="proc" ino=173156 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075440.963:8222): avc: denied { search } for pid=26353 comm="safe_timer" name="diff" dev="sda1" ino=1442592 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075158.739:6739): avc: denied { read } for pid=35348 comm="node_exporter" name="fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075317.991:7489): avc: denied { search } for pid=42602 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075404.277:8057): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075503.946:8591): avc: denied { search } for pid=42602 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c166,c597 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075261.344:7291): avc: denied { search } for pid=26728 comm="safe_timer" name="usr" dev="sda1" ino=786698 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075328.739:7639): avc: denied { search } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=166036 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075342.644:7741): avc: denied { search } for pid=44080 comm="prometheus" name="etc" dev="sda1" ino=1968146 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075588.739:9034): avc: denied { read } for pid=35348 comm="node_exporter" name="mounts" dev="proc" ino=167607 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075662.815:9325): avc: denied { write } for pid=26728 comm="msgr-worker-1" laddr=172.21.15.80 lport=38434 faddr=172.21.15.80 fport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.739:7782): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075257.278:7231): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.756:6874): avc: denied { write } for pid=44080 comm="prometheus" path="pipe:[193696]" dev="pipefs" ino=193696 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075504.019:8593): avc: denied { write } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075152.819:6681): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075179.277:6891): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/pool-overview.json" dev="overlay" ino=1444778 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075643.430:9174): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=394794 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075648.741:9271): avc: denied { search } for pid=35348 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075179.276:6885): avc: denied { search } for pid=42010 comm="grafana-server" name="/" dev="overlay" ino=1968169 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075248.738:7171): avc: denied { read } for pid=35348 comm="node_exporter" name="fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075257.278:7233): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-sync-overview.json" dev="overlay" ino=1444781 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075262.030:7299): avc: denied { open } for pid=26353 comm="rstore_compact" path="/sys/devices/virtual/block/dm-4/queue/logical_block_size" dev="sysfs" ino=45217 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075328.738:7636): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173156 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075562.031:8789): avc: denied { search } for pid=26330 comm="conmon" name="journal" dev="tmpfs" ino=16682 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075398.521:7904): avc: denied { read } for pid=51959 comm="msgr-worker-1" path="socket:[239995]" dev="sockfs" ino=239995 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075255.553:7204): avc: denied { search } for pid=51959 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968225 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c631,c994 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075423.457:8177): avc: denied { search } for pid=51959 comm="safe_timer" name="/" dev="overlay" ino=1968225 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c631,c994 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075328.739:7644): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/hwmon/hwmon0" dev="sysfs" ino=35064 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075320.941:7571): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075239.464:7128): avc: denied { read } for pid=51959 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075643.430:9174): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075152.028:6660): avc: denied { search } for pid=46227 comm="safe_timer" name="/" dev="overlay" ino=1968207 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c79,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.741:7701): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.737:9019): avc: denied { read } for pid=35348 comm="node_exporter" name="stat" dev="proc" ino=173156 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075151.976:6659): avc: denied { search } for pid=26728 comm="mgr-fin" name="etc" dev="sda1" ino=1442620 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075268.740:7352): avc: denied { search } for pid=35348 comm="node_exporter" name="host" dev="sda1" ino=1968013 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075182.643:6915): avc: denied { getattr } for pid=44080 comm="prometheus" laddr=172.21.15.80 lport=42739 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.739:7685): avc: denied { search } for pid=35348 comm="node_exporter" name="kernel" dev="proc" ino=167394 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075179.277:6890): avc: denied { read open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075421.995:8153): avc: denied { read } for pid=26728 comm="mgr-fin" name="localtime" dev="sda1" ino=394776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075248.740:7182): avc: denied { search } for pid=35348 comm="node_exporter" name="host" dev="sda1" ino=1968013 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075152.028:6660): avc: denied { read } for pid=46227 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.742:7792): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.738:7773): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173156 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.741:9270): avc: denied { search } for pid=35348 comm="node_exporter" name="user" dev="tmpfs" ino=16726 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075508.738:8628): avc: denied { read } for pid=35348 comm="node_exporter" name="fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.737:9378): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="overlay" ino=1968004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075582.643:8961): avc: denied { signal } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075269.276:7355): avc: denied { search } for pid=42010 comm="grafana-server" name="etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075484.114:8467): avc: denied { read } for pid=46227 comm="msgr-worker-1" path="socket:[242106]" dev="sockfs" ino=242106 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075562.031:8786): avc: denied { write } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075662.277:9304): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075508.742:8649): avc: denied { search } for pid=35348 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075318.738:7513): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075240.926:7130): avc: denied { read } for pid=26353 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075406.139:8067): avc: denied { search } for pid=26728 comm="safe_timer" name="/" dev="overlay" ino=1442611 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.741:7112): avc: denied { search } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=166036 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075401.277:7999): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075668.049:9362): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075498.737:8531): avc: denied { search } for pid=35348 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075155.903:6715): avc: denied { search } for pid=26353 comm="safe_timer" name="mon.smithi080" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075261.344:7292): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075500.973:8554): avc: denied { open } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075401.277:8001): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/pool-overview.json" dev="sda1" ino=1444778 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075260.473:7258): avc: denied { open } for pid=46227 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.738:7917): avc: denied { signal } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075586.067:8994): avc: denied { search } for pid=26330 comm="conmon" name="systemd" dev="tmpfs" ino=16404 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075643.418:9172): avc: denied { open } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075572.644:8927): avc: denied { read } for pid=44080 comm="prometheus" path="socket:[389505]" dev="sockfs" ino=389505 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075508.738:8627): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173156 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.738:6851): avc: denied { search } for pid=35348 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075662.278:9306): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075400.115:7983): avc: denied { search } for pid=26728 comm="safe_timer" name="etc" dev="sda1" ino=1442620 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075498.738:8534): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=167607 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075348.739:7781): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.738:7922): avc: denied { read } for pid=35348 comm="node_exporter" name="fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075586.067:8994): avc: denied { write } for pid=26330 comm="conmon" name="socket" dev="tmpfs" ino=16686 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075428.739:8202): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=30846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075562.004:8782): avc: denied { search } for pid=26728 comm="mgr-fin" name="etc" dev="sda1" ino=1442620 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075428.739:8190): avc: denied { read } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075488.740:8502): avc: denied { search } for pid=35348 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.741:6756): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=167607 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075178.940:6881): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.738:9026): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075662.278:9305): avc: denied { lock } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075480.596:8398): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.737:6847): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075504.021:8597): avc: denied { sendto } for pid=26330 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075161.918:6778): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075338.738:7683): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.739:8354): avc: denied { read } for pid=35348 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075236.278:7045): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075482.644:8443): avc: denied { write } for pid=44080 comm="prometheus" path="socket:[363381]" dev="sockfs" ino=363381 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075587.156:9007): avc: denied { search } for pid=42602 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c166,c597 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.738:9387): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=21498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075267.804:7326): avc: denied { search } for pid=57451 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.739:8884): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/class/net/eno1" dev="sysfs" ino=34869 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075562.004:8782): avc: denied { search } for pid=26728 comm="mgr-fin" name="usr" dev="sda1" ino=786698 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075248.740:7181): avc: denied { search } for pid=35348 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075328.740:7647): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075484.114:8466): avc: denied { read } for pid=46227 comm="msgr-worker-0" path="socket:[242103]" dev="sockfs" ino=242103 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075562.031:8789): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075480.060:8388): avc: denied { write } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075578.737:8936): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.049:9363): avc: denied { search } for pid=26330 comm="conmon" name="systemd" dev="tmpfs" ino=16404 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075348.738:7771): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075268.738:7333): avc: denied { read } for pid=35348 comm="node_exporter" name="hwmon" dev="sysfs" ino=21483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075154.955:6709): avc: denied { read } for pid=42602 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075572.644:8920): avc: denied { search } for pid=44080 comm="prometheus" name="etc" dev="sda1" ino=1968146 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075668.025:9358): avc: denied { search } for pid=46227 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968207 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c79,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075319.649:7547): avc: denied { search } for pid=26728 comm="safe_timer" name="/" dev="overlay" ino=1442611 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.739:7778): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.741:6869): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075422.277:8157): avc: denied { getattr } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075178.739:6860): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075260.495:7263): avc: denied { read } for pid=42602 comm="msgr-worker-0" path="pipe:[187564]" dev="pipefs" ino=187564 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075652.644:9291): avc: denied { create } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.740:9404): avc: denied { search } for pid=35348 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075236.204:7039): avc: denied { read } for pid=26728 comm="msgr-worker-0" path="socket:[278222]" dev="sockfs" ino=278222 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.740:8888): avc: denied { getattr } for pid=35348 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075261.023:7282): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075260.849:7273): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075237.481:7064): avc: denied { search } for pid=51959 comm="safe_timer" name="/" dev="overlay" ino=1968225 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c631,c994 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075504.021:8594): avc: denied { write } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075503.946:8591): avc: denied { open } for pid=42602 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075422.277:8158): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075343.772:7760): avc: denied { read } for pid=26728 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.341:7680): avc: denied { write } for pid=26353 comm="ms_dispatch" path="pipe:[126774]" dev="pipefs" ino=126774 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075421.963:8147): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075480.971:8420): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075320.276:7553): avc: denied { search } for pid=42010 comm="grafana-server" name="/" dev="overlay" ino=1968169 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075320.277:7555): avc: denied { lock } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075182.643:6914): avc: denied { connect } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075401.276:7996): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075236.278:7049): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/pool-detail.json" dev="overlay" ino=1444777 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075508.739:8640): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=30846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075672.643:9417): avc: denied { create } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075666.004:9340): avc: denied { open } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075488.738:8494): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/class/net/eno1" dev="sysfs" ino=34869 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075320.277:7557): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075418.741:8118): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075504.754:8608): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075236.204:7035): avc: denied { write } for pid=75978 comm="safe_timer" path="pipe:[273320]" dev="pipefs" ino=273320 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075585.815:8978): avc: denied { search } for pid=46227 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968207 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c79,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075663.528:9330): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075179.297:6892): avc: denied { search } for pid=57451 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c179,c314 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075343.772:7760): avc: denied { search } for pid=26728 comm="safe_timer" name="libpod-7157ed55dd2bb6f82af892cdc2cadcbaa2c5f5b0b22e740b7b8d1bea0b6c44b3.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075569.278:8912): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/osds-overview.json" dev="overlay" ino=1444776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075420.427:8128): avc: denied { search } for pid=51959 comm="safe_timer" name="/" dev="overlay" ino=1968225 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c631,c994 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.739:8877): avc: denied { read } for pid=35348 comm="node_exporter" name="file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075662.398:9311): avc: denied { write } for pid=26353 comm="msgr-worker-2" laddr=172.21.15.80 lport=3300 faddr=172.21.15.97 fport=47434 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075262.644:7310): avc: denied { write } for pid=44080 comm="prometheus" path="socket:[315300]" dev="sockfs" ino=315300 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075644.277:9188): avc: denied { getattr } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075255.943:7215): avc: denied { remove_name } for pid=26353 comm="rocksdb:high0" name="000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075262.030:7295): avc: denied { create } for pid=26353 comm="rstore_compact" name="000018.log" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075418.739:8112): avc: denied { search } for pid=35348 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075400.033:7956): avc: denied { write } for pid=26330 comm="conmon" name="socket" dev="tmpfs" ino=16686 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075504.021:8597): avc: denied { write } for pid=26330 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075422.248:8156): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075488.738:8492): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075504.754:8608): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075322.747:7607): avc: denied { search } for pid=57451 comm="safe_timer" name="/" dev="overlay" ino=1968244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c179,c314 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075485.278:8479): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075420.236:8127): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=394794 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075255.930:7210): avc: denied { write } for pid=26353 comm="rstore_compact" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.277:7670): avc: denied { getattr } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075338.310:7678): avc: denied { write } for pid=42602 comm="msgr-worker-0" laddr=172.21.15.80 lport=6808 faddr=172.21.15.97 fport=56436 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.739:7785): avc: denied { read } for pid=35348 comm="node_exporter" name="stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075488.740:8505): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075419.278:8125): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.737:6849): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/stat" dev="proc" ino=4026532033 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.738:9023): avc: denied { search } for pid=35348 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075152.963:6682): avc: denied { search } for pid=42602 comm="safe_timer" name="/" dev="overlay" ino=1968187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c166,c597 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075255.677:7205): avc: denied { search } for pid=51959 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075506.278:8622): avc: denied { read open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.759:7114): avc: denied { append } for pid=44080 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.738:8343): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075482.277:8429): avc: denied { search } for pid=42010 comm="grafana-server" name="/" dev="overlay" ino=1968169 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075592.644:9044): avc: denied { search } for pid=44080 comm="prometheus" name="etc" dev="sda1" ino=1968146 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075258.739:7246): avc: denied { read } for pid=35348 comm="node_exporter" name="entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075400.955:7992): avc: denied { open } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075428.739:8194): avc: denied { read } for pid=35348 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075643.430:9175): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075500.973:8553): avc: denied { dac_read_search } for pid=26353 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075178.737:6848): avc: denied { search } for pid=35348 comm="node_exporter" name="7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.739:8875): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/net/sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075418.738:8105): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="overlay" ino=1968004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075268.737:7331): avc: denied { read } for pid=35348 comm="node_exporter" name="stat" dev="proc" ino=173156 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.738:9028): avc: denied { read } for pid=35348 comm="node_exporter" name="entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.739:9263): avc: denied { search } for pid=35348 comm="node_exporter" name="kernel" dev="proc" ino=167394 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075422.248:8156): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075268.042:7327): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075662.278:9307): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075422.958:8175): avc: denied { open } for pid=57451 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075504.021:8596): avc: denied { open } for pid=26330 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075667.551:9354): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=394794 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075318.738:7512): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.738:9249): avc: denied { read } for pid=35348 comm="node_exporter" name="stat" dev="proc" ino=173156 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075645.710:9219): avc: denied { append } for pid=44080 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075485.278:8482): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/host-details.json" dev="overlay" ino=1444773 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075587.005:9004): avc: denied { getattr } for pid=26728 comm="mgr-fin" path="/usr/share/zoneinfo/UTC" dev="overlay" ino=1311473 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075480.060:8390): avc: denied { write } for pid=26330 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075644.278:9193): avc: denied { read open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075401.277:7999): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075479.278:8382): avc: denied { read open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075482.277:8430): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075318.737:7496): avc: denied { search } for pid=35348 comm="node_exporter" name="7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075425.961:8184): avc: denied { open } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075339.038:7706): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075662.456:9316): avc: denied { search } for pid=46227 comm="safe_timer" name="/" dev="overlay" ino=1968207 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c79,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075328.739:7642): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=43630 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075662.398:9313): avc: denied { read } for pid=26353 comm="msgr-worker-2" path="pipe:[126774]" dev="pipefs" ino=126774 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075151.587:6646): avc: denied { read } for pid=26353 comm="msgr-worker-2" path="socket:[173169]" dev="sockfs" ino=173169 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075480.060:8390): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075320.940:7568): avc: denied { search } for pid=26353 comm="safe_timer" name="var" dev="sda1" ino=1442603 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075338.278:7675): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075484.632:8473): avc: denied { search } for pid=26728 comm="safe_timer" name="usr" dev="sda1" ino=786698 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075572.645:8928): avc: denied { write } for pid=26353 comm="msgr-worker-2" laddr=172.21.15.80 lport=3300 faddr=172.21.15.97 fport=47434 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.740:8891): avc: denied { search } for pid=35348 comm="node_exporter" name="user" dev="tmpfs" ino=16726 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075644.010:9182): avc: denied { write } for pid=26330 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075318.738:7510): avc: denied { getattr } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16396 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075405.956:8063): avc: denied { search } for pid=26353 comm="safe_timer" name="var" dev="sda1" ino=1442603 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075482.277:8429): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.738:8349): avc: denied { search } for pid=35348 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075268.738:7336): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075572.644:8920): avc: denied { search } for pid=44080 comm="prometheus" name="/" dev="overlay" ino=1968129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075585.989:8984): avc: denied { getattr } for pid=26353 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075255.484:7194): avc: denied { read } for pid=42602 comm="msgr-worker-0" path="socket:[244287]" dev="sockfs" ino=244287 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.276:9369): avc: denied { getattr } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075484.114:8469): avc: denied { write } for pid=42602 comm="msgr-worker-2" laddr=172.21.15.80 lport=6808 faddr=172.21.15.97 fport=56514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075508.739:8637): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.738:9029): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/fs/xfs/stats/stats" dev="sysfs" ino=45563 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075661.516:9298): avc: denied { search } for pid=26728 comm="safe_timer" name="usr" dev="sda1" ino=786698 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075164.278:6790): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075503.278:8575): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075318.737:7493): avc: denied { signal } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075667.382:9345): avc: denied { append } for pid=46227 comm="log" path="/var/log/ceph/ceph-osd.1.log" dev="sda1" ino=395892 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075567.048:8864): avc: denied { read } for pid=26728 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075562.644:8805): avc: denied { connect } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075644.278:9192): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.738:6857): avc: denied { read } for pid=35348 comm="node_exporter" name="addr_assign_type" dev="sysfs" ino=34877 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.738:9383): avc: denied { read } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075581.121:8954): avc: denied { search } for pid=26728 comm="safe_timer" name="etc" dev="sda1" ino=1442620 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075482.066:8424): avc: denied { write } for pid=26330 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075562.004:8782): avc: denied { read } for pid=26728 comm="mgr-fin" name="localtime" dev="sda1" ino=394776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075485.972:8484): avc: denied { search } for pid=26353 comm="safe_timer" name="mon.smithi080" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075328.738:7637): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075561.554:8780): avc: denied { search } for pid=42602 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075408.739:8088): avc: denied { search } for pid=35348 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075643.418:9173): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075173.975:6821): avc: denied { search } for pid=42602 comm="safe_timer" name="diff" dev="sda1" ino=1968187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075400.103:7962): avc: denied { open } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075161.278:6777): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.742:8895): avc: denied { search } for pid=35348 comm="node_exporter" name="kernel" dev="proc" ino=167394 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075258.739:7250): avc: denied { search } for pid=35348 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.277:7670): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.741:9270): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.738:8349): avc: denied { read } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075408.738:8077): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075418.224:8104): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075440.754:8220): avc: denied { open } for pid=95869 comm="pgrep" path="/proc/26353/status" dev="proc" ino=152649 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075479.278:8382): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075506.277:8618): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075565.987:8842): avc: denied { search } for pid=26353 comm="safe_timer" name="mon.smithi080" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075485.972:8485): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.739:7931): avc: denied { search } for pid=35348 comm="node_exporter" name="1" dev="proc" ino=167025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075418.738:8106): avc: denied { read } for pid=35348 comm="node_exporter" name="stat" dev="proc" ino=173156 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.742:6762): avc: denied { search } for pid=35348 comm="node_exporter" name="host" dev="sda1" ino=1968013 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075400.848:7987): avc: denied { lock } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075180.982:6907): avc: denied { search } for pid=42602 comm="safe_timer" name="/" dev="overlay" ino=1968187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c166,c597 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.740:6755): avc: denied { search } for pid=35348 comm="node_exporter" name="fs" dev="proc" ino=171371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075164.278:6791): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075238.741:7113): avc: denied { read } for pid=35348 comm="node_exporter" name="file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.940:6881): avc: denied { getattr } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075668.277:9374): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.741:9268): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075404.127:8054): avc: denied { search } for pid=26728 comm="safe_timer" name="libpod-7157ed55dd2bb6f82af892cdc2cadcbaa2c5f5b0b22e740b7b8d1bea0b6c44b3.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075680.806:9428): avc: denied { getattr } for pid=105979 comm="pgrep" path="/proc/26330" dev="proc" ino=132508 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075255.494:7202): avc: denied { read } for pid=57451 comm="msgr-worker-0" path="pipe:[227463]" dev="pipefs" ino=227463 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075341.991:7724): avc: denied { search } for pid=26728 comm="mgr-fin" name="/" dev="overlay" ino=1442611 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.742:6757): avc: denied { getattr } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16396 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075428.739:8191): avc: denied { search } for pid=35348 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075318.737:7497): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075400.956:7993): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.741:8372): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.739:6742): avc: denied { read } for pid=35348 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075151.905:6651): avc: denied { use } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075592.644:9044): avc: denied { search } for pid=44080 comm="prometheus" name="/" dev="overlay" ino=1968129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075479.635:8386): avc: denied { search } for pid=57451 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c179,c314 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075323.012:7611): avc: denied { write } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075328.742:7651): avc: denied { getattr } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16396 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075498.717:8524): avc: denied { search } for pid=26728 comm="safe_timer" name="etc" dev="sda1" ino=1442620 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075321.005:7574): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075180.906:6904): avc: denied { read } for pid=26353 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075272.643:7366): avc: denied { read } for pid=44080 comm="prometheus" path="socket:[327919]" dev="sockfs" ino=327919 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075328.742:7649): avc: denied { read } for pid=35348 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075322.644:7597): avc: denied { append } for pid=44080 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.738:9394): avc: denied { search } for pid=35348 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.739:8354): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075319.649:7548): avc: denied { open } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075263.278:7319): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-detail.json" dev="overlay" ino=1444779 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075342.429:7733): avc: denied { read } for pid=34534 comm="ceph-crash" name="crash" dev="dm-4" ino=8388736 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075569.278:8910): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075480.596:8397): avc: denied { search } for pid=26728 comm="safe_timer" name="libpod-7157ed55dd2bb6f82af892cdc2cadcbaa2c5f5b0b22e740b7b8d1bea0b6c44b3.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.741:7939): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075504.715:8604): avc: denied { search } for pid=51959 comm="safe_timer" name="/" dev="overlay" ino=1968225 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c631,c994 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075242.644:7157): avc: denied { search } for pid=44080 comm="prometheus" name="etc" dev="sda1" ino=1968146 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075238.739:7105): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=43630 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075261.344:7291): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=394794 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075404.276:8056): avc: denied { lock } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.739:9257): avc: denied { read } for pid=35348 comm="node_exporter" name="hwmon0" dev="sysfs" ino=35068 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.742:7793): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075404.277:8059): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/cephfs-overview.json" dev="overlay" ino=1444772 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075402.038:8007): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075318.738:7504): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/fs/xfs/dm-4/stats/stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.739:6748): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/devices/system/cpu/cpu0/topology/physical_package_id" dev="sysfs" ino=28908 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075258.738:7240): avc: denied { read } for pid=35348 comm="node_exporter" name="fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075420.960:8131): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075497.983:8518): avc: denied { search } for pid=26330 comm="conmon" name="journal" dev="tmpfs" ino=16682 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075644.278:9194): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/cephfs-overview.json" dev="overlay" ino=1444772 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075418.742:8120): avc: denied { search } for pid=35348 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616075341.041:7717): avc: denied { read } for pid=26330 comm="conmon" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075165.904:6794): avc: denied { getattr } for pid=26353 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.738:9383): avc: denied { read } for pid=35348 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075428.742:8207): avc: denied { read } for pid=35348 comm="node_exporter" name="mounts" dev="proc" ino=167607 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075151.976:6659): avc: denied { read } for pid=26728 comm="mgr-fin" name="localtime" dev="overlay" ino=394776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075318.738:7504): avc: denied { read } for pid=35348 comm="node_exporter" name="stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075408.738:8078): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075257.017:7224): avc: denied { sendto } for pid=26330 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075584.064:8972): avc: denied { write } for pid=26330 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075668.277:9374): avc: denied { read open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075403.352:8042): avc: denied { read } for pid=26353 comm="msgr-worker-2" path="pipe:[126774]" dev="pipefs" ino=126774 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.738:8345): avc: denied { read } for pid=35348 comm="node_exporter" name="stat" dev="proc" ino=4026532033 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075318.738:7510): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.738:9247): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.741:7790): avc: denied { search } for pid=35348 comm="node_exporter" name="fs" dev="proc" ino=171371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075242.277:7155): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075236.984:7051): avc: denied { search } for pid=26728 comm="mgr-fin" name="/" dev="overlay" ino=1442611 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.940:6881): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075236.984:7051): avc: denied { read } for pid=26728 comm="mgr-fin" name="localtime" dev="overlay" ino=394776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075480.060:8389): avc: denied { read } for pid=26330 comm="conmon" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075422.278:8159): avc: denied { lock } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075585.989:8986): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075488.737:8490): avc: denied { search } for pid=35348 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075318.738:7501): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075272.643:7361): avc: denied { setopt } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075341.991:7724): avc: denied { getattr } for pid=26728 comm="mgr-fin" name="UTC" dev="sda1" ino=1311473 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075237.481:7065): avc: denied { open } for pid=51959 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075180.906:6904): avc: denied { open } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075646.001:9221): avc: denied { search } for pid=26353 comm="safe_timer" name="mon.smithi080" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075422.278:8160): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075506.277:8617): avc: denied { search } for pid=42010 comm="grafana-server" name="etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075480.608:8399): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=394794 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075261.332:7289): avc: denied { search } for pid=26728 comm="safe_timer" name="libpod-7157ed55dd2bb6f82af892cdc2cadcbaa2c5f5b0b22e740b7b8d1bea0b6c44b3.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075408.738:8080): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075155.910:6719): avc: denied { write } for pid=26330 comm="conmon" name="socket" dev="tmpfs" ino=16686 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075400.848:7990): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075652.644:9294): avc: denied { getattr } for pid=44080 comm="prometheus" laddr=172.21.15.80 lport=44272 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075325.942:7631): avc: denied { dac_read_search } for pid=26353 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075400.115:7983): avc: denied { getattr } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075254.788:7190): avc: denied { open } for pid=44080 comm="prometheus" path="/prometheus" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.165:9368): avc: denied { search } for pid=42602 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c166,c597 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.738:6859): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/fs/xfs/stats/stats" dev="sysfs" ino=45563 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075488.737:8489): avc: denied { read } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075646.001:9221): avc: denied { open } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075404.041:8046): avc: denied { sendto } for pid=26330 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075668.049:9360): avc: denied { use } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075318.737:7497): avc: denied { read } for pid=35348 comm="node_exporter" name="fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075479.277:8377): avc: denied { search } for pid=42010 comm="grafana-server" name="dashboards" dev="sda1" ino=1444769 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075482.278:8431): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075563.024:8811): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.940:6881): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075440.754:8218): avc: denied { read } for pid=95869 comm="pgrep" name="status" dev="proc" ino=132512 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075584.276:8973): avc: denied { search } for pid=42010 comm="grafana-server" name="etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075563.278:8833): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.737:9016): avc: denied { signal } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075500.011:8541): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075268.738:7337): avc: denied { read } for pid=35348 comm="node_exporter" name="ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075508.739:8633): avc: denied { read } for pid=35348 comm="node_exporter" name="cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075580.626:8946): avc: denied { read } for pid=57451 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.277:7670): avc: denied { search } for pid=42010 comm="grafana-server" name="/" dev="overlay" ino=1968169 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075647.010:9227): avc: denied { getattr } for pid=26728 comm="mgr-fin" path="/usr/share/zoneinfo/UTC" dev="overlay" ino=1311473 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075261.023:7282): avc: denied { write } for pid=26330 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075242.644:7161): avc: denied { getattr } for pid=44080 comm="prometheus" laddr=172.21.15.80 lport=49418 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075161.277:6775): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075494.792:8511): avc: denied { getattr } for pid=44080 comm="prometheus" path="/prometheus/wal" dev="dm-4" ino=8388752 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075342.429:7733): avc: denied { dac_read_search } for pid=34534 comm="ceph-crash" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075317.914:7487): avc: denied { search } for pid=57451 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c179,c314 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075479.057:8374): avc: denied { write } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075262.030:7298): avc: denied { read } for pid=26353 comm="rstore_compact" name="253:4" dev="sysfs" ino=45180 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.739:7103): avc: denied { getattr } for pid=35348 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075562.031:8789): avc: denied { sendto } for pid=26330 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075484.620:8472): avc: denied { search } for pid=26728 comm="safe_timer" name="libpod-7157ed55dd2bb6f82af892cdc2cadcbaa2c5f5b0b22e740b7b8d1bea0b6c44b3.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075482.644:8440): avc: denied { setopt } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075662.278:9308): avc: denied { read open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075237.221:7061): avc: denied { read } for pid=26728 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075248.794:7185): avc: denied { append } for pid=57451 comm="log" path="/var/log/ceph/ceph-osd.3.log" dev="sda1" ino=395896 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075577.097:8934): avc: denied { search } for pid=26728 comm="safe_timer" name="libpod-7157ed55dd2bb6f82af892cdc2cadcbaa2c5f5b0b22e740b7b8d1bea0b6c44b3.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075488.740:8504): avc: denied { read } for pid=35348 comm="node_exporter" name="entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.739:7096): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.739:6747): avc: denied { read } for pid=35348 comm="node_exporter" name="cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.740:8889): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075328.740:7646): avc: denied { search } for pid=35348 comm="node_exporter" name="kernel" dev="proc" ino=167394 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075317.914:7487): avc: denied { search } for pid=57451 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075337.748:7668): avc: denied { getattr } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075668.739:9398): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.276:9370): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075488.739:8499): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.739:8874): avc: denied { read } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075260.931:7278): avc: denied { write } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/000015.log" dev="dm-4" ino=137 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075402.038:8007): avc: denied { write } for pid=26330 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075428.738:8188): avc: denied { read } for pid=35348 comm="node_exporter" name="stat" dev="proc" ino=173156 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075240.925:7129): avc: denied { search } for pid=26353 comm="safe_timer" name="/" dev="overlay" ino=1442592 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075480.060:8388): avc: denied { use } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075154.831:6707): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.737:9017): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="overlay" ino=1968004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075671.004:9411): avc: denied { open } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075269.277:7357): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075512.644:8655): avc: denied { setopt } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075237.233:7063): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.740:9037): avc: denied { search } for pid=35348 comm="node_exporter" name="user" dev="tmpfs" ino=16726 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075662.644:9318): avc: denied { search } for pid=44080 comm="prometheus" name="diff" dev="sda1" ino=1968129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075318.738:7502): avc: denied { read } for pid=35348 comm="node_exporter" name="arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075277.137:7367): avc: denied { append } for pid=42602 comm="log" path="/var/log/ceph/ceph-osd.0.log" dev="sda1" ino=395891 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075236.988:7056): avc: denied { sendto } for pid=26330 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075403.306:8040): avc: denied { write } for pid=42602 comm="msgr-worker-1" laddr=172.21.15.80 lport=6806 faddr=172.21.15.97 fport=45430 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075402.038:8006): avc: denied { write } for pid=26330 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075401.277:8001): avc: denied { read } for pid=42010 comm="grafana-server" name="pool-overview.json" dev="sda1" ino=1444778 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075562.004:8782): avc: denied { read } for pid=26728 comm="mgr-fin" name="localtime" dev="overlay" ino=394776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075680.806:9431): avc: denied { search } for pid=105979 comm="pgrep" name="26353" dev="proc" ino=152605 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075318.738:7498): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075400.848:7988): avc: denied { search } for pid=42010 comm="grafana-server" name="var" dev="sda1" ino=1968178 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075503.278:8574): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075503.278:8573): avc: denied { lock } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075337.460:7665): avc: denied { read } for pid=51959 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075586.067:8993): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075568.742:8895): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075262.030:7297): avc: denied { getattr } for pid=26353 comm="rstore_compact" path="/sys/dev/block/253:4" dev="sysfs" ino=45180 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.276:9369): avc: denied { search } for pid=42010 comm="grafana-server" name="/" dev="overlay" ino=1968169 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075504.742:8606): avc: denied { search } for pid=26728 comm="safe_timer" name="libpod-7157ed55dd2bb6f82af892cdc2cadcbaa2c5f5b0b22e740b7b8d1bea0b6c44b3.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.739:6860): avc: denied { read } for pid=35348 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075262.644:7305): avc: denied { create } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075174.929:6831): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.741:7699): avc: denied { getattr } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16396 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.738:9249): avc: denied { search } for pid=35348 comm="node_exporter" name="7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075503.278:8576): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075586.587:9003): avc: denied { search } for pid=57451 comm="safe_timer" name="/" dev="overlay" ino=1968244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c179,c314 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075268.739:7341): avc: denied { search } for pid=35348 comm="node_exporter" name="fs" dev="proc" ino=171371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075342.528:7736): avc: denied { open } for pid=51959 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.739:6741): avc: denied { search } for pid=35348 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075255.484:7196): avc: denied { write } for pid=42602 comm="msgr-worker-1" laddr=172.21.15.80 lport=6806 faddr=172.21.15.97 fport=45430 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075418.738:8107): avc: denied { read } for pid=35348 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075160.904:6773): avc: denied { search } for pid=26353 comm="safe_timer" name="mon.smithi080" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.738:6857): avc: denied { read } for pid=35348 comm="node_exporter" name="eno1" dev="sysfs" ino=34869 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075257.017:7224): avc: denied { search } for pid=26330 comm="conmon" name="journal" dev="tmpfs" ino=16682 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075318.737:7495): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.741:9271): avc: denied { search } for pid=35348 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075428.740:8203): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075337.284:7663): avc: denied { search } for pid=46227 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075562.004:8782): avc: denied { getattr } for pid=26728 comm="mgr-fin" name="UTC" dev="sda1" ino=1311473 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075418.739:8114): avc: denied { read } for pid=35348 comm="node_exporter" name="file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075152.807:6679): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075664.044:9333): avc: denied { read } for pid=26330 comm="conmon" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075344.278:7768): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075428.738:8186): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="overlay" ino=1968004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075168.739:6795): avc: denied { search } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=166036 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075255.484:7197): avc: denied { write } for pid=51959 comm="msgr-worker-1" laddr=172.21.15.80 lport=6824 faddr=172.21.15.97 fport=37552 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075508.740:8641): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.740:9267): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=167607 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075320.941:7572): avc: denied { write } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075666.004:9340): avc: denied { search } for pid=26353 comm="safe_timer" name="mon.smithi080" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075425.961:8183): avc: denied { search } for pid=26353 comm="safe_timer" name="/" dev="overlay" ino=1442592 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.740:7935): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075320.276:7553): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075508.739:8632): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075565.986:8841): avc: denied { dac_read_search } for pid=26353 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075158.738:6738): avc: denied { search } for pid=35348 comm="node_exporter" name="7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.740:8889): avc: denied { getattr } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16396 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075425.961:8183): avc: denied { dac_read_search } for pid=26353 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075503.278:8576): avc: denied { read open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075161.278:6777): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075268.737:7332): avc: denied { read } for pid=35348 comm="node_exporter" name="fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075512.644:8657): avc: denied { connect } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075401.276:7996): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075161.277:6776): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075668.737:9380): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173156 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075561.428:8773): avc: denied { append } for pid=46227 comm="log" path="/var/log/ceph/ceph-osd.1.log" dev="sda1" ino=395892 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075480.060:8391): avc: denied { search } for pid=26330 comm="conmon" name="journal" dev="tmpfs" ino=16682 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075568.773:8901): avc: denied { search } for pid=26728 comm="mgr-fin" name="usr" dev="sda1" ino=786698 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075648.740:9267): avc: denied { read } for pid=35348 comm="node_exporter" name="mounts" dev="proc" ino=167607 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075401.276:7998): avc: denied { search } for pid=42010 comm="grafana-server" name="dashboards" dev="sda1" ino=1444769 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075236.204:7041): avc: denied { append } for pid=26728 comm="log" path="/var/log/ceph/ceph-mgr.smithi080.njtcci.log" dev="sda1" ino=395865 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075262.030:7295): avc: denied { add_name } for pid=26353 comm="rstore_compact" name="000018.log" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075667.551:9354): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075236.988:7056): avc: denied { write } for pid=26330 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075323.277:7617): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075562.031:8788): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075587.157:9008): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075258.607:7237): avc: denied { search } for pid=42602 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c166,c597 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075506.278:8622): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075498.738:8534): avc: denied { search } for pid=35348 comm="node_exporter" name="1" dev="proc" ino=167025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075338.278:7673): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075422.278:8161): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075646.001:9220): avc: denied { search } for pid=26353 comm="safe_timer" name="var" dev="sda1" ino=1442603 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075668.738:9385): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/net/sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.738:7920): avc: denied { search } for pid=35348 comm="node_exporter" name="7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075263.278:7318): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075504.021:8595): avc: denied { read } for pid=26330 comm="conmon" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075418.740:8116): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=167607 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075408.737:8074): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.278:7675): avc: denied { read open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075562.004:8782): avc: denied { getattr } for pid=26728 comm="mgr-fin" path="/usr/share/zoneinfo/UTC" dev="overlay" ino=1311473 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075503.636:8587): avc: denied { read } for pid=26353 comm="msgr-worker-2" path="socket:[173169]" dev="sockfs" ino=173169 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075650.277:9282): avc: denied { search } for pid=42010 comm="grafana-server" name="etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075319.003:7524): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075644.010:9182): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075508.742:8646): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075502.017:8559): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075402.475:8010): avc: denied { search } for pid=51959 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968225 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c631,c994 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075319.003:7525): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075506.278:8621): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075585.815:8978): avc: denied { open } for pid=46227 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.738:7684): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075152.644:6675): avc: denied { write } for pid=44080 comm="prometheus" path="socket:[287651]" dev="sockfs" ino=287651 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.733:9246): avc: denied { search } for pid=57451 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075317.754:7479): avc: denied { append } for pid=57451 comm="log" path="/var/log/ceph/ceph-osd.3.log" dev="sda1" ino=395896 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075420.960:8129): avc: denied { getattr } for pid=26353 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075321.005:7573): avc: denied { write } for pid=26330 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075568.739:8878): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075498.705:8523): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075562.143:8794): avc: denied { search } for pid=51959 comm="safe_timer" name="/" dev="overlay" ino=1968225 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c631,c994 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.741:9269): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075236.988:7055): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075242.997:7165): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075572.644:8926): avc: denied { write } for pid=44080 comm="prometheus" path="socket:[377698]" dev="sockfs" ino=377698 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075428.742:8210): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075325.687:7626): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075248.739:7178): avc: denied { read } for pid=35348 comm="node_exporter" name="mounts" dev="proc" ino=167607 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075179.144:6883): avc: denied { search } for pid=51959 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968225 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c631,c994 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075422.644:8167): avc: denied { create } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075328.739:7640): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075152.644:6669): avc: denied { search } for pid=44080 comm="prometheus" name="/" dev="overlay" ino=1968129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075255.553:7204): avc: denied { open } for pid=51959 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075317.914:7487): avc: denied { open } for pid=57451 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075587.145:9006): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.738:7776): avc: denied { read } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075260.930:7275): avc: denied { search } for pid=26353 comm="safe_timer" name="mon.smithi080" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075421.889:8142): avc: denied { write } for pid=75978 comm="msgr-worker-1" laddr=172.21.15.80 lport=60882 faddr=172.21.15.80 fport=6802 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075402.643:8015): avc: denied { connect } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075165.144:6793): avc: denied { search } for pid=51959 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968225 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c631,c994 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075236.988:7053): avc: denied { write } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075643.148:9166): avc: denied { read } for pid=57451 comm="msgr-worker-1" path="pipe:[227464]" dev="pipefs" ino=227464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075662.278:9309): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/cephfs-overview.json" dev="overlay" ino=1444772 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075485.278:8478): avc: denied { lock } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.739:6748): avc: denied { read } for pid=35348 comm="node_exporter" name="physical_package_id" dev="sysfs" ino=28908 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075236.204:7037): avc: denied { write } for pid=75528 comm="msgr-worker-0" laddr=172.21.15.80 lport=37588 faddr=172.21.15.80 fport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075320.940:7568): avc: denied { dac_read_search } for pid=26353 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075568.741:8893): avc: denied { read } for pid=35348 comm="node_exporter" name="diskstats" dev="proc" ino=4026532083 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075404.139:8055): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=394794 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075159.916:6768): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075408.739:8087): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.739:7778): avc: denied { search } for pid=35348 comm="node_exporter" name="kernel" dev="proc" ino=167394 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075242.644:7156): avc: denied { signal } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075418.212:8102): avc: denied { read } for pid=26728 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.843:6764): avc: denied { open } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.740:7937): avc: denied { getattr } for pid=35348 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.739:8356): avc: denied { read } for pid=35348 comm="node_exporter" name="cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075569.278:8910): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.738:7918): avc: denied { search } for pid=35348 comm="node_exporter" name="diff" dev="sda1" ino=1968004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075588.738:9028): avc: denied { search } for pid=35348 comm="node_exporter" name="kernel" dev="proc" ino=167394 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.738:9390): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=43630 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.743:8898): avc: denied { search } for pid=35348 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616075318.738:7506): avc: denied { search } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=166036 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075422.278:8163): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/pool-overview.json" dev="overlay" ino=1444778 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075644.008:9178): avc: denied { write } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075504.021:8597): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075236.277:7042): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075323.277:7616): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.737:6848): avc: denied { read } for pid=35348 comm="node_exporter" name="stat" dev="proc" ino=173156 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075322.643:7595): avc: denied { write } for pid=44080 comm="prometheus" path="socket:[330707]" dev="sockfs" ino=330707 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075317.838:7486): avc: denied { read } for pid=26728 comm="msgr-worker-0" path="socket:[150183]" dev="sockfs" ino=150183 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075160.849:6771): avc: denied { search } for pid=42010 comm="grafana-server" name="var" dev="sda1" ino=1968178 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075328.739:7638): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/class/hwmon" dev="sysfs" ino=21483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.738:8342): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075320.727:7562): avc: denied { open } for pid=92179 comm="pgrep" path="/proc/26330/status" dev="proc" ino=132512 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075408.740:8091): avc: denied { search } for pid=35348 comm="node_exporter" name="host" dev="sda1" ino=1968013 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075588.741:9042): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075182.643:6911): avc: denied { search } for pid=44080 comm="prometheus" name="etc" dev="sda1" ino=1968146 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075178.940:6878): avc: denied { search } for pid=26728 comm="safe_timer" name="/" dev="overlay" ino=1442611 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075402.038:8006): avc: denied { open } for pid=26330 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075428.740:8206): avc: denied { search } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=166036 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075502.644:8564): avc: denied { setopt } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075585.815:8983): avc: denied { read } for pid=42602 comm="msgr-worker-0" path="socket:[202851]" dev="sockfs" ino=202851 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075428.739:8192): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075408.739:8085): avc: denied { getattr } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16396 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075563.278:8832): avc: denied { lock } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.739:8357): avc: denied { read } for pid=35348 comm="node_exporter" name="mounts" dev="proc" ino=167607 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075582.061:8958): avc: denied { search } for pid=26330 comm="conmon" name="systemd" dev="tmpfs" ino=16404 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075158.742:6759): avc: denied { search } for pid=35348 comm="node_exporter" name="user" dev="tmpfs" ino=16726 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075344.278:7765): avc: denied { lock } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075152.277:6662): avc: denied { getattr } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075152.644:6669): avc: denied { getattr } for pid=44080 comm="prometheus" path="/etc/hosts" dev="tmpfs" ino=190812 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075342.644:7745): avc: denied { connect } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.739:9033): avc: denied { read } for pid=35348 comm="node_exporter" name="hwmon0" dev="sysfs" ino=35068 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075404.401:8061): avc: denied { read } for pid=46227 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075261.344:7291): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075154.955:6709): avc: denied { open } for pid=42602 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075268.738:7334): avc: denied { read } for pid=35348 comm="node_exporter" name="arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.738:6853): avc: denied { search } for pid=35348 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075660.006:9297): avc: denied { write } for pid=42602 comm="bstore_kv_sync" path="/dev/dm-3" dev="devtmpfs" ino=107951 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075317.838:7484): avc: denied { read } for pid=26728 comm="msgr-worker-1" path="pipe:[151559]" dev="pipefs" ino=151559 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075328.742:7656): avc: denied { search } for pid=35348 comm="node_exporter" name="host" dev="sda1" ino=1968013 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075257.331:7236): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.741:6867): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075241.673:7153): avc: denied { search } for pid=46227 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075425.961:8183): avc: denied { search } for pid=26353 comm="safe_timer" name="var" dev="sda1" ino=1442603 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075505.975:8612): avc: denied { search } for pid=26353 comm="safe_timer" name="var" dev="sda1" ino=1442603 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075578.738:8938): avc: denied { search } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=166036 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075502.644:8568): avc: denied { getattr } for pid=44080 comm="prometheus" laddr=172.21.15.80 lport=48926 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075480.060:8391): avc: denied { write } for pid=26330 comm="conmon" name="socket" dev="tmpfs" ino=16686 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075152.278:6667): avc: denied { read open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.738:7775): avc: denied { read } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075400.955:7992): avc: denied { read } for pid=26353 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075418.738:8106): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173156 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.741:7941): avc: denied { search } for pid=35348 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075317.999:7490): avc: denied { write } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.742:7797): avc: denied { search } for pid=35348 comm="node_exporter" name="host" dev="sda1" ino=1968013 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075178.940:6880): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075667.539:9353): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075154.353:6702): avc: denied { read } for pid=26728 comm="msgr-worker-1" path="pipe:[151559]" dev="pipefs" ino=151559 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075236.988:7055): avc: denied { write } for pid=26330 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075588.738:9023): avc: denied { search } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=166036 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075342.429:7735): avc: denied { search } for pid=34534 comm="ceph-crash" name="crash" dev="dm-4" ino=8388736 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075504.742:8607): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.738:8344): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173156 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.738:7771): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="overlay" ino=1968004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075328.742:7655): avc: denied { search } for pid=35348 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616075179.941:6897): avc: denied { write } for pid=26330 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075156.512:6720): avc: denied { search } for pid=57451 comm="safe_timer" name="/" dev="overlay" ino=1968244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c179,c314 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075168.739:6801): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075400.115:7983): avc: denied { search } for pid=26728 comm="safe_timer" name="usr" dev="sda1" ino=786698 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075321.662:7577): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=394794 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075172.917:6813): avc: denied { write } for pid=26728 comm="safe_timer" path="pipe:[151559]" dev="pipefs" ino=151559 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.739:9261): avc: denied { read } for pid=35348 comm="node_exporter" name="stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075644.010:9182): avc: denied { search } for pid=26330 comm="conmon" name="systemd" dev="tmpfs" ino=16404 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075648.739:9254): avc: denied { read } for pid=35348 comm="node_exporter" name="arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075151.905:6653): avc: denied { open } for pid=26330 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075649.454:9278): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.738:7774): avc: denied { read } for pid=35348 comm="node_exporter" name="fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075508.517:8624): avc: denied { getattr } for pid=26728 comm="mgr-fin" path="/usr/lib64/python3.6" dev="overlay" ino=922750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075236.278:7047): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075582.643:8965): avc: denied { getattr } for pid=44080 comm="prometheus" laddr=172.21.15.80 lport=53576 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075248.741:7183): avc: denied { search } for pid=35348 comm="node_exporter" name="kernel" dev="proc" ino=167394 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075417.014:8095): avc: denied { search } for pid=57451 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075261.344:7291): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075578.738:8940): avc: denied { search } for pid=35348 comm="node_exporter" name="fs" dev="proc" ino=171371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075506.278:8619): avc: denied { lock } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075508.742:8648): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075428.742:8207): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=167607 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075506.278:8622): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075258.738:7242): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/class/net" dev="sysfs" ino=21519 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075644.010:9179): avc: denied { write } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075236.277:7042): avc: denied { search } for pid=42010 comm="grafana-server" name="/" dev="overlay" ino=1968169 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.738:6851): avc: denied { search } for pid=35348 comm="node_exporter" name="fs" dev="proc" ino=171371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075263.278:7318): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075479.157:8376): avc: denied { open } for pid=42602 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075504.040:8602): avc: denied { search } for pid=57451 comm="safe_timer" name="/" dev="overlay" ino=1968244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c179,c314 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075260.473:7259): avc: denied { read } for pid=46227 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.738:9393): avc: denied { search } for pid=35348 comm="node_exporter" name="1" dev="proc" ino=167025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075421.399:8133): avc: denied { read } for pid=46227 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075587.005:9004): avc: denied { read } for pid=26728 comm="mgr-fin" name="localtime" dev="overlay" ino=394776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.741:6869): avc: denied { search } for pid=35348 comm="node_exporter" name="user" dev="tmpfs" ino=16726 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075325.942:7631): avc: denied { search } for pid=26353 comm="safe_timer" name="var" dev="sda1" ino=1442603 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075158.742:6758): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.739:6739): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075504.021:8596): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075664.044:9334): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075650.278:9285): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="sda1" ino=1444771 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075159.916:6768): avc: denied { open } for pid=26330 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075588.739:9035): avc: denied { getattr } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16396 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075236.278:7049): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/pool-detail.json" dev="sda1" ino=1444777 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075498.739:8535): avc: denied { search } for pid=35348 comm="node_exporter" name="user" dev="tmpfs" ino=16726 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075400.848:7989): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075504.021:8596): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075428.742:8211): avc: denied { search } for pid=35348 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.739:9252): avc: denied { read } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075512.644:8656): avc: denied { setopt } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075508.739:8631): avc: denied { search } for pid=35348 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075319.649:7549): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075587.277:9013): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075320.277:7558): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075508.739:8639): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075419.277:8123): avc: denied { search } for pid=42010 comm="grafana-server" name="etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075178.738:6855): avc: denied { read } for pid=35348 comm="node_exporter" name="arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075500.276:8544): avc: denied { search } for pid=42010 comm="grafana-server" name="etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075508.739:8638): avc: denied { read } for pid=35348 comm="node_exporter" name="cpuinfo_max_freq" dev="sysfs" ino=30846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075644.763:9212): avc: denied { search } for pid=42602 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c166,c597 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075337.748:7668): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075158.740:6754): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/class/net/eno1" dev="sysfs" ino=34869 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075152.644:6673): avc: denied { connect } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.739:7687): avc: denied { read } for pid=35348 comm="node_exporter" name="stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075400.033:7956): avc: denied { write } for pid=26330 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075158.738:6736): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="overlay" ino=1968004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075401.277:8000): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="sda1" ino=1444771 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075506.277:8617): avc: denied { search } for pid=42010 comm="grafana-server" name="/" dev="overlay" ino=1968169 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075562.644:8799): avc: denied { getattr } for pid=44080 comm="prometheus" path="/etc/hosts" dev="tmpfs" ino=190812 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075258.741:7254): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075342.644:7746): avc: denied { getattr } for pid=44080 comm="prometheus" laddr=172.21.15.80 lport=35247 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075644.277:9188): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075152.807:6678): avc: denied { search } for pid=26728 comm="safe_timer" name="libpod-7157ed55dd2bb6f82af892cdc2cadcbaa2c5f5b0b22e740b7b8d1bea0b6c44b3.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075263.277:7316): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075561.554:8780): avc: denied { search } for pid=42602 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c166,c597 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075267.367:7324): avc: denied { open } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.894:7948): avc: denied { search } for pid=57451 comm="safe_timer" name="/" dev="overlay" ino=1968244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c179,c314 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075260.495:7264): avc: denied { write } for pid=42602 comm="msgr-worker-0" laddr=172.21.15.80 lport=6802 faddr=172.21.15.97 fport=58264 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.940:6879): avc: denied { open } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075262.644:7306): avc: denied { create } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075164.278:6790): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075580.988:8952): avc: denied { search } for pid=26353 comm="safe_timer" name="var" dev="sda1" ino=1442603 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075406.151:8068): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075666.004:9339): avc: denied { search } for pid=26353 comm="safe_timer" name="/" dev="overlay" ino=1442592 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075248.739:7176): avc: denied { read } for pid=35348 comm="node_exporter" name="stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075643.418:9171): avc: denied { read } for pid=26728 comm="safe_timer" name="meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075503.946:8591): avc: denied { search } for pid=42602 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1968187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075578.737:8936): avc: denied { read } for pid=35348 comm="node_exporter" name="cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.739:9034): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=167607 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075178.940:6881): avc: denied { search } for pid=26728 comm="safe_timer" name="etc" dev="sda1" ino=1442620 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075178.739:6862): avc: denied { search } for pid=35348 comm="node_exporter" name="kernel" dev="proc" ino=167394 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075160.904:6774): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075318.739:7515): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.738:9384): avc: denied { read } for pid=35348 comm="node_exporter" name="dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075572.915:8930): avc: denied { search } for pid=46227 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968207 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c79,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.738:8347): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.742:8895): avc: denied { read } for pid=35348 comm="node_exporter" name="entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.940:6882): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.738:7919): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075240.926:7132): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075561.447:8777): avc: denied { write } for pid=42602 comm="msgr-worker-0" laddr=172.21.15.80 lport=6808 faddr=172.21.15.97 fport=56436 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075586.067:8991): avc: denied { write } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075408.738:8081): avc: denied { read } for pid=35348 comm="node_exporter" name="eno1" dev="sysfs" ino=34869 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.739:8353): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075508.739:8632): avc: denied { search } for pid=35348 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075428.740:8205): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075337.035:7659): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075178.757:6875): avc: denied { read } for pid=44080 comm="prometheus" path="pipe:[193696]" dev="pipefs" ino=193696 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075643.720:9176): avc: denied { search } for pid=57451 comm="safe_timer" name="/" dev="overlay" ino=1968244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c179,c314 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075410.049:8092): avc: denied { search } for pid=26330 comm="conmon" name="systemd" dev="tmpfs" ino=16404 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075317.838:7483): avc: denied { write } for pid=26728 comm="safe_timer" path="pipe:[151559]" dev="pipefs" ino=151559 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075562.644:8808): avc: denied { read } for pid=44080 comm="prometheus" path="socket:[385260]" dev="sockfs" ino=385260 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075671.004:9411): avc: denied { search } for pid=26353 comm="safe_timer" name="mon.smithi080" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.277:9373): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075236.278:7045): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075512.644:8661): avc: denied { read } for pid=44080 comm="prometheus" path="socket:[379167]" dev="sockfs" ino=379167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075512.644:8653): avc: denied { create } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075268.758:7353): avc: denied { append } for pid=44080 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.741:7791): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=167607 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075179.277:6889): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075421.963:8148): avc: denied { sendto } for pid=26330 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075572.644:8924): avc: denied { connect } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075480.060:8390): avc: denied { open } for pid=26330 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075500.766:8550): avc: denied { search } for pid=99158 comm="pgrep" name="26330" dev="proc" ino=132508 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075420.960:8130): avc: denied { read } for pid=26353 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075152.645:6677): avc: denied { append } for pid=44080 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075248.740:7179): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075662.011:9299): avc: denied { read } for pid=26728 comm="mgr-fin" name="localtime" dev="sda1" ino=394776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075344.277:7763): avc: denied { search } for pid=42010 comm="grafana-server" name="/" dev="overlay" ino=1968169 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075404.041:8045): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075328.742:7654): avc: denied { search } for pid=35348 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075647.815:9229): avc: denied { write } for pid=26728 comm="msgr-worker-1" laddr=172.21.15.80 lport=38434 faddr=172.21.15.80 fport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075400.321:7986): avc: denied { search } for pid=46227 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.739:8875): avc: denied { read } for pid=35348 comm="node_exporter" name="sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075320.940:7568): avc: denied { getattr } for pid=26353 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.738:7918): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075498.738:8532): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=30846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075662.278:9307): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075421.963:8148): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075261.344:7291): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.737:6847): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075268.739:7346): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="overlay" ino=1968004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075320.727:7564): avc: denied { read } for pid=92179 comm="pgrep" name="status" dev="proc" ino=152649 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.621:7915): avc: denied { write } for pid=26353 comm="safe_timer" path="pipe:[126774]" dev="pipefs" ino=126774 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075152.028:6661): avc: denied { search } for pid=46227 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075419.277:8123): avc: denied { search } for pid=42010 comm="grafana-server" name="/" dev="overlay" ino=1968169 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075337.035:7660): avc: denied { write } for pid=26330 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075582.644:8968): avc: denied { append } for pid=44080 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075586.013:8990): avc: denied { read } for pid=51959 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.739:7692): avc: denied { read } for pid=35348 comm="node_exporter" name="hwmon0" dev="sysfs" ino=35068 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075257.017:7221): avc: denied { write } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075398.521:7908): avc: denied { write } for pid=57451 comm="msgr-worker-2" laddr=172.21.15.80 lport=6830 faddr=172.21.15.97 fport=56944 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075152.278:6668): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-sync-overview.json" dev="sda1" ino=1444781 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075400.956:7994): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075502.644:8561): avc: denied { search } for pid=44080 comm="prometheus" name="/" dev="overlay" ino=1968129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.738:9382): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075268.740:7351): avc: denied { search } for pid=35348 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616075320.941:7569): avc: denied { search } for pid=26353 comm="safe_timer" name="mon.smithi080" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075479.277:8377): avc: denied { search } for pid=42010 comm="grafana-server" name="etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075565.987:8842): avc: denied { read } for pid=26353 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075504.754:8608): avc: denied { search } for pid=26728 comm="safe_timer" name="etc" dev="sda1" ino=1442620 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075262.030:7295): avc: denied { write } for pid=26353 comm="rstore_compact" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075342.041:7729): avc: denied { write } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075258.738:7239): avc: denied { search } for pid=35348 comm="node_exporter" name="7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075268.737:7328): avc: denied { signal } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075261.023:7283): avc: denied { write } for pid=26330 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075194.787:6919): avc: denied { getattr } for pid=44080 comm="prometheus" path="/prometheus/queries.active" dev="dm-4" ino=158 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075318.737:7496): avc: denied { read } for pid=35348 comm="node_exporter" name="stat" dev="proc" ino=173156 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.739:6742): avc: denied { read } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075182.643:6916): avc: denied { write } for pid=44080 comm="prometheus" path="socket:[296926]" dev="sockfs" ino=296926 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.739:8361): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/class/net/eno1" dev="sysfs" ino=34869 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075260.930:7274): avc: denied { search } for pid=26353 comm="safe_timer" name="/" dev="overlay" ino=1442592 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075479.278:8382): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075562.644:8799): avc: denied { search } for pid=44080 comm="prometheus" name="etc" dev="sda1" ino=1968146 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075576.495:8933): avc: denied { read } for pid=57451 comm="msgr-worker-1" path="pipe:[227464]" dev="pipefs" ino=227464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075643.720:9177): avc: denied { open } for pid=57451 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.740:9402): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075422.644:8168): avc: denied { setopt } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075582.643:8963): avc: denied { setopt } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075237.221:7061): avc: denied { open } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075498.705:8522): avc: denied { open } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075582.643:8967): avc: denied { read } for pid=44080 comm="prometheus" path="socket:[394433]" dev="sockfs" ino=394433 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075565.987:8843): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075236.278:7047): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.865:8903): avc: denied { search } for pid=42602 comm="safe_timer" name="/" dev="overlay" ino=1968187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c166,c597 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075258.740:7253): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075322.643:7596): avc: denied { read } for pid=44080 comm="prometheus" path="socket:[333815]" dev="sockfs" ino=333815 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075428.739:8192): avc: denied { read } for pid=35348 comm="node_exporter" name="file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.739:7095): avc: denied { read } for pid=35348 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075152.277:6662): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075400.103:7962): avc: denied { read } for pid=26728 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.049:9362): avc: denied { write } for pid=26330 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075586.067:8994): avc: denied { sendto } for pid=26330 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075663.528:9330): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075174.917:6828): avc: denied { search } for pid=26728 comm="safe_timer" name="/" dev="overlay" ino=1442611 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075422.278:8162): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075406.151:8069): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075236.278:7047): avc: denied { read open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075650.020:9279): avc: denied { write } for pid=26330 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075503.636:8586): avc: denied { write } for pid=26353 comm="msgr-worker-2" laddr=172.21.15.80 lport=3300 faddr=172.21.15.97 fport=47434 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075404.127:8053): avc: denied { search } for pid=26728 comm="safe_timer" name="diff" dev="sda1" ino=1442611 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075328.738:7636): avc: denied { search } for pid=35348 comm="node_exporter" name="7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.739:7688): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.740:8371): avc: denied { read } for pid=35348 comm="node_exporter" name="entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075401.277:7999): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075319.003:7524): avc: denied { write } for pid=26330 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075268.739:7342): avc: denied { search } for pid=35348 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075488.738:8493): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075484.114:8471): avc: denied { write } for pid=51959 comm="msgr-worker-2" laddr=172.21.15.80 lport=6822 faddr=172.21.15.97 fport=35966 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.991:7118): avc: denied { sendto } for pid=26330 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075508.739:8637): avc: denied { read } for pid=35348 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075586.067:8993): avc: denied { write } for pid=26330 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075647.454:9228): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075321.871:7579): avc: denied { write } for pid=75978 comm="msgr-worker-1" laddr=172.21.15.80 lport=60882 faddr=172.21.15.80 fport=6802 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075182.643:6913): avc: denied { setopt } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075236.278:7048): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="sda1" ino=1444771 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075502.644:8569): avc: denied { write } for pid=44080 comm="prometheus" path="socket:[369499]" dev="sockfs" ino=369499 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075505.975:8614): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075569.278:8909): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075428.739:8200): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/hwmon/hwmon0/uevent" dev="sysfs" ino=35065 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075570.987:8917): avc: denied { open } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.738:9027): avc: denied { search } for pid=35348 comm="node_exporter" name="fs" dev="proc" ino=171371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075482.066:8423): avc: denied { write } for pid=26330 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075562.031:8789): avc: denied { write } for pid=26330 comm="conmon" name="socket" dev="tmpfs" ino=16686 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075178.737:6849): avc: denied { read } for pid=35348 comm="node_exporter" name="stat" dev="proc" ino=4026532033 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.738:6857): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/net/eno1/addr_assign_type" dev="sysfs" ino=34877 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.739:9250): avc: denied { read } for pid=35348 comm="node_exporter" name="fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075241.246:7151): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075255.929:7208): avc: denied { read } for pid=26353 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075421.928:8143): avc: denied { search } for pid=57451 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c179,c314 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075408.738:8079): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/class/net/eno1" dev="sysfs" ino=34869 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075584.064:8971): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075583.121:8969): avc: denied { open } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075236.988:7056): avc: denied { write } for pid=26330 comm="conmon" name="socket" dev="tmpfs" ino=16686 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075260.715:7266): avc: denied { getattr } for pid=88987 comm="pgrep" path="/proc/26330" dev="proc" ino=132508 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075668.738:9388): avc: denied { read } for pid=35348 comm="node_exporter" name="ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075255.930:7213): avc: denied { read } for pid=26353 comm="rstore_compact" name="253:4" dev="sysfs" ino=45180 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075400.200:7985): avc: denied { append } for pid=42602 comm="log" path="/var/log/ceph/ceph-osd.0.log" dev="sda1" ino=395891 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075422.644:8165): avc: denied { search } for pid=44080 comm="prometheus" name="etc" dev="sda1" ino=1968146 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075257.017:7223): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075327.371:7633): avc: denied { getattr } for pid=26728 comm="mgr-fin" path="/usr/lib64/python3.6" dev="overlay" ino=922750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075319.649:7548): avc: denied { read } for pid=26728 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075179.941:6898): avc: denied { search } for pid=26330 comm="conmon" name="journal" dev="tmpfs" ino=16682 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075171.932:6806): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075500.766:8550): avc: denied { open } for pid=99158 comm="pgrep" path="/proc/26330/status" dev="proc" ino=132512 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075257.277:7228): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075238.739:7098): avc: denied { read } for pid=35348 comm="node_exporter" name="cpufreq" dev="sysfs" ino=30758 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075343.044:7752): avc: denied { write } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075179.941:6897): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075500.973:8554): avc: denied { read } for pid=26353 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075318.739:7517): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075153.596:6683): avc: denied { search } for pid=57451 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c179,c314 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.738:7920): avc: denied { read } for pid=35348 comm="node_exporter" name="stat" dev="proc" ino=173156 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075404.277:8058): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075320.727:7562): avc: denied { search } for pid=92179 comm="pgrep" name="26330" dev="proc" ino=132508 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075269.044:7354): avc: denied { write } for pid=26330 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075319.649:7550): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=394794 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075428.742:8210): avc: denied { search } for pid=35348 comm="node_exporter" name="user" dev="tmpfs" ino=16726 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.738:7088): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075506.278:8622): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075508.742:8647): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075262.032:7301): avc: denied { read } for pid=26353 comm="rocksdb:high0" name="000019.sst" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075508.739:8634): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075667.551:9354): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075592.644:9050): avc: denied { write } for pid=44080 comm="prometheus" path="socket:[392700]" dev="sockfs" ino=392700 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075505.722:8611): avc: denied { append } for pid=44080 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075440.925:8221): avc: denied { search } for pid=42602 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075155.910:6717): avc: denied { write } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075566.036:8844): avc: denied { write } for pid=26330 comm="conmon" name="socket" dev="tmpfs" ino=16686 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075585.815:8978): avc: denied { search } for pid=46227 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075319.003:7524): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075478.696:8334): avc: denied { read } for pid=42602 comm="msgr-worker-2" path="socket:[283732]" dev="sockfs" ino=283732 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075583.121:8970): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075643.430:9174): avc: denied { search } for pid=26728 comm="safe_timer" name="etc" dev="sda1" ino=1442620 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075422.278:8161): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075421.466:8136): avc: denied { write } for pid=57451 comm="msgr-worker-1" laddr=172.21.15.80 lport=6826 faddr=172.21.15.97 fport=43848 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075400.955:7991): avc: denied { search } for pid=26353 comm="safe_timer" name="var" dev="sda1" ino=1442603 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075421.928:8143): avc: denied { search } for pid=57451 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075645.422:9213): avc: denied { search } for pid=46227 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968207 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c79,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075151.905:6654): avc: denied { search } for pid=26330 comm="conmon" name="journal" dev="tmpfs" ino=16682 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075179.941:6896): avc: denied { read } for pid=26330 comm="conmon" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075162.644:6782): avc: denied { create } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.740:7787): avc: denied { read } for pid=35348 comm="node_exporter" name="hwmon0" dev="sysfs" ino=35068 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075236.405:7050): avc: denied { search } for pid=57451 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c179,c314 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075348.739:7782): avc: denied { read } for pid=35348 comm="node_exporter" name="xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075498.737:8528): avc: denied { read } for pid=35348 comm="node_exporter" name="fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.738:6737): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075496.692:8512): avc: denied { search } for pid=26728 comm="safe_timer" name="diff" dev="sda1" ino=1442611 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075671.004:9411): avc: denied { read } for pid=26353 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.739:9258): avc: denied { read } for pid=35348 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075581.121:8954): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075328.739:7640): avc: denied { read } for pid=35348 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075479.659:8387): avc: denied { search } for pid=51959 comm="safe_timer" name="/" dev="overlay" ino=1968225 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c631,c994 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075503.946:8591): avc: denied { search } for pid=42602 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075257.278:7229): avc: denied { lock } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075686.277:9440): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075508.740:8642): avc: denied { search } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=166036 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.738:9384): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/net/dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075151.976:6659): avc: denied { search } for pid=26728 comm="mgr-fin" name="diff" dev="sda1" ino=1442611 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075421.928:8143): avc: denied { open } for pid=57451 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075651.002:9287): avc: denied { dac_read_search } for pid=26353 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075348.741:7791): avc: denied { read } for pid=35348 comm="node_exporter" name="mounts" dev="proc" ino=167607 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075500.277:8546): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075322.747:7607): avc: denied { search } for pid=57451 comm="safe_timer" name="diff" dev="sda1" ino=1968244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075662.265:9303): avc: denied { search } for pid=42602 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c166,c597 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075686.277:9439): avc: denied { search } for pid=42010 comm="grafana-server" name="etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075179.941:6898): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075570.987:8919): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075421.963:8146): avc: denied { read } for pid=26330 comm="conmon" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075565.987:8842): avc: denied { open } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075402.115:8008): avc: denied { open } for pid=26728 comm="safe_timer" path="/proc/meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075581.121:8955): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075268.739:7344): avc: denied { search } for pid=35348 comm="node_exporter" name="kernel" dev="proc" ino=167394 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075262.644:7303): avc: denied { signal } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075318.739:7519): avc: denied { search } for pid=35348 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616075260.495:7260): avc: denied { read } for pid=42602 comm="msgr-worker-0" path="socket:[281718]" dev="sockfs" ino=281718 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075585.815:8982): avc: denied { write } for pid=46227 comm="msgr-worker-2" laddr=172.21.15.80 lport=47502 faddr=172.21.15.80 fport=6808 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075667.551:9355): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075400.033:7956): avc: denied { search } for pid=26330 comm="conmon" name="journal" dev="tmpfs" ino=16682 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075255.484:7198): avc: denied { write } for pid=46227 comm="msgr-worker-0" laddr=172.21.15.80 lport=6814 faddr=172.21.15.97 fport=43290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.760:9043): avc: denied { append } for pid=44080 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075256.986:7220): avc: denied { read } for pid=26728 comm="mgr-fin" name="localtime" dev="overlay" ino=394776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075422.644:8172): avc: denied { write } for pid=44080 comm="prometheus" path="socket:[361711]" dev="sockfs" ino=361711 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075561.447:8776): avc: denied { read } for pid=42602 comm="msgr-worker-0" path="socket:[242790]" dev="sockfs" ino=242790 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075261.344:7291): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075168.739:6796): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075248.739:7173): avc: denied { read } for pid=35348 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.739:9253): avc: denied { read } for pid=35348 comm="node_exporter" name="hwmon" dev="sysfs" ino=21483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075508.742:8645): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=167607 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075338.755:7704): avc: denied { append } for pid=44080 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075342.644:7742): avc: denied { create } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075408.737:8071): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.738:9024): avc: denied { read } for pid=35348 comm="node_exporter" name="arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075421.995:8153): avc: denied { getattr } for pid=26728 comm="mgr-fin" name="UTC" dev="sda1" ino=1311473 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075176.277:6840): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.278:7674): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075418.739:8110): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/fs/xfs/stats/stats" dev="sysfs" ino=45563 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.738:9386): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=21498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075320.727:7561): avc: denied { getattr } for pid=92179 comm="pgrep" path="/proc/26330" dev="proc" ino=132508 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075342.014:7725): avc: denied { write } for pid=78525 comm="safe_timer" path="pipe:[283727]" dev="pipefs" ino=283727 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075644.278:9193): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075503.636:8583): avc: denied { append } for pid=26353 comm="log" path="/var/log/ceph/ceph-mon.smithi080.log" dev="sda1" ino=395863 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075337.736:7666): avc: denied { open } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075341.824:7720): avc: denied { search } for pid=57451 comm="safe_timer" name="/" dev="overlay" ino=1968244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c179,c314 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075342.429:7734): avc: denied { getattr } for pid=34534 comm="ceph-crash" path="/var/lib/ceph/crash" dev="dm-4" ino=8388736 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075254.788:7191): avc: denied { getattr } for pid=44080 comm="prometheus" path="/prometheus/queries.active" dev="dm-4" ino=158 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075240.925:7129): avc: denied { dac_read_search } for pid=26353 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075318.738:7507): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=43630 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075343.784:7762): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075320.940:7568): avc: denied { search } for pid=26353 comm="safe_timer" name="/" dev="overlay" ino=1442592 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075152.278:6665): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075319.649:7548): avc: denied { search } for pid=26728 comm="safe_timer" name="libpod-7157ed55dd2bb6f82af892cdc2cadcbaa2c5f5b0b22e740b7b8d1bea0b6c44b3.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.049:9363): avc: denied { search } for pid=26330 comm="conmon" name="journal" dev="tmpfs" ino=16682 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075178.738:6858): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075151.587:6647): avc: denied { write } for pid=26353 comm="ms_dispatch" path="/var/lib/ceph/mon/ceph-smithi080/store.db/000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075479.278:8384): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/pool-overview.json" dev="sda1" ino=1444778 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075320.727:7562): avc: denied { read } for pid=92179 comm="pgrep" name="status" dev="proc" ino=132512 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075268.738:7337): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075321.421:7575): avc: denied { read } for pid=42602 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.739:7924): avc: denied { read } for pid=35348 comm="node_exporter" name="mc" dev="sysfs" ino=21498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075421.963:8148): avc: denied { search } for pid=26330 comm="conmon" name="systemd" dev="tmpfs" ino=16404 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075479.157:8375): avc: denied { search } for pid=42602 comm="safe_timer" name="/" dev="overlay" ino=1968187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c166,c597 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075261.023:7282): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075588.737:9019): avc: denied { search } for pid=35348 comm="node_exporter" name="7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075422.644:8173): avc: denied { read } for pid=44080 comm="prometheus" path="socket:[359594]" dev="sockfs" ino=359594 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075164.278:6792): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/hosts-overview.json" dev="overlay" ino=1444774 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075421.963:8145): avc: denied { use } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075260.473:7258): avc: denied { search } for pid=46227 comm="safe_timer" name="/" dev="overlay" ino=1968207 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c79,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075319.649:7550): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075500.276:8545): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075418.062:8099): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075584.276:8974): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075488.740:8500): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075162.297:6780): avc: denied { read } for pid=42602 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075179.276:6886): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075248.740:7180): avc: denied { search } for pid=35348 comm="node_exporter" name="user" dev="tmpfs" ino=16726 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075260.849:7271): avc: denied { search } for pid=42010 comm="grafana-server" name="var" dev="sda1" ino=1968178 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075238.740:7108): avc: denied { search } for pid=35348 comm="node_exporter" name="user" dev="tmpfs" ino=16726 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075585.989:8987): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075174.929:6831): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.843:6765): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075512.644:8652): avc: denied { search } for pid=44080 comm="prometheus" name="/" dev="overlay" ino=1968129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075563.277:8831): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075265.034:7320): avc: denied { write } for pid=26330 comm="conmon" name="socket" dev="tmpfs" ino=16686 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075320.276:7553): avc: denied { search } for pid=42010 comm="grafana-server" name="etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075504.021:8597): avc: denied { write } for pid=26330 comm="conmon" name="socket" dev="tmpfs" ino=16686 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075568.739:8879): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075341.760:7718): avc: denied { search } for pid=26728 comm="safe_timer" name="diff" dev="sda1" ino=1442611 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075398.739:7932): avc: denied { search } for pid=35348 comm="node_exporter" name="fs" dev="proc" ino=171371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075508.742:8646): avc: denied { getattr } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16396 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.039:8867): avc: denied { open } for pid=26330 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075668.277:9375): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-detail.json" dev="overlay" ino=1444779 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075425.961:8183): avc: denied { getattr } for pid=26353 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075236.988:7054): avc: denied { read } for pid=26330 comm="conmon" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075342.584:7738): avc: denied { search } for pid=46227 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968207 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c79,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075504.021:8597): avc: denied { search } for pid=26330 comm="conmon" name="journal" dev="tmpfs" ino=16682 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075260.849:7271): avc: denied { search } for pid=42010 comm="grafana-server" name="/" dev="overlay" ino=1968169 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075151.905:6654): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075158.739:6746): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075236.204:7038): avc: denied { write } for pid=75978 comm="msgr-worker-0" laddr=172.21.15.80 lport=37586 faddr=172.21.15.80 fport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075236.988:7055): avc: denied { open } for pid=26330 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075269.277:7357): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075504.754:8608): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=394794 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075644.010:9179): avc: denied { use } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075194.787:6918): avc: denied { read } for pid=44080 comm="prometheus" name="data" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075503.288:8581): avc: denied { write } for pid=51959 comm="msgr-worker-0" laddr=172.21.15.80 lport=49306 faddr=172.21.15.80 fport=6806 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.739:9262): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.739:7100): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/fs/xfs/dm-4/stats/stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.738:6852): avc: denied { search } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=166036 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075267.107:7321): avc: denied { getattr } for pid=26728 comm="mgr-fin" path="/usr/lib64/python3.6" dev="overlay" ino=922750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075400.115:7983): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=394794 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075236.278:7044): avc: denied { lock } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075403.306:8038): avc: denied { write } for pid=46227 comm="msgr-worker-2" laddr=172.21.15.80 lport=6816 faddr=172.21.15.97 fport=57848 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075400.033:7953): avc: denied { use } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075685.711:9437): avc: denied { append } for pid=44080 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.738:6735): avc: denied { signal } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075440.754:8220): avc: denied { read } for pid=95869 comm="pgrep" name="status" dev="proc" ino=152649 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075422.236:8155): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075421.889:8140): avc: denied { write } for pid=75978 comm="ceph_timer" path="pipe:[273321]" dev="pipefs" ino=273321 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075644.010:9182): avc: denied { search } for pid=26330 comm="conmon" name="journal" dev="tmpfs" ino=16682 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075508.739:8636): avc: denied { read } for pid=35348 comm="node_exporter" name="dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.740:7107): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075500.766:8551): avc: denied { getattr } for pid=99158 comm="pgrep" path="/proc/26353" dev="proc" ino=152605 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075175.936:6836): avc: denied { open } for pid=26330 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075648.740:9265): avc: denied { search } for pid=35348 comm="node_exporter" name="fs" dev="proc" ino=171371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075179.464:6894): avc: denied { search } for pid=46227 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968207 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c79,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075480.596:8397): avc: denied { open } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075494.792:8510): avc: denied { getattr } for pid=44080 comm="prometheus" path="/prometheus/queries.active" dev="dm-4" ino=158 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075663.528:9330): avc: denied { search } for pid=26728 comm="safe_timer" name="etc" dev="sda1" ino=1442620 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075482.644:8442): avc: denied { getattr } for pid=44080 comm="prometheus" laddr=172.21.15.80 lport=40751 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075479.277:8378): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075405.957:8065): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075408.737:8073): avc: denied { read } for pid=35348 comm="node_exporter" name="fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075569.277:8906): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075508.739:8630): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075328.740:7646): avc: denied { read } for pid=35348 comm="node_exporter" name="entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.760:9274): avc: denied { append } for pid=44080 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075479.278:8379): avc: denied { lock } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.740:6750): avc: denied { read } for pid=35348 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075152.277:6662): avc: denied { search } for pid=42010 comm="grafana-server" name="etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075672.643:9421): avc: denied { connect } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075319.649:7550): avc: denied { search } for pid=26728 comm="safe_timer" name="usr" dev="sda1" ino=786698 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075348.738:7777): avc: denied { read } for pid=35348 comm="node_exporter" name="arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075257.331:7235): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075418.738:8109): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/net/arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075504.021:8596): avc: denied { write } for pid=26330 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075257.278:7230): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075502.644:8563): avc: denied { create } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.739:6861): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075152.278:6667): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075268.740:7350): avc: denied { search } for pid=35348 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.739:9255): avc: denied { search } for pid=35348 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075518.740:8662): avc: denied { fork } for pid=35348 comm="node_exporter" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075508.739:8633): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075318.738:7502): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/net/arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075323.674:7622): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=394794 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075255.930:7212): avc: denied { getattr } for pid=26353 comm="rstore_compact" path="/sys/dev/block/253:4" dev="sysfs" ino=45180 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.738:8345): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/stat" dev="proc" ino=4026532033 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075667.551:9354): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.049:9360): avc: denied { write } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075563.278:8835): avc: denied { read open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.738:7090): avc: denied { read } for pid=35348 comm="node_exporter" name="fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.739:7928): avc: denied { read } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075257.278:7232): avc: denied { read open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075255.929:7208): avc: denied { search } for pid=26353 comm="safe_timer" name="mon.smithi080" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075643.148:9163): avc: denied { append } for pid=57451 comm="log" path="/var/log/ceph/ceph-osd.3.log" dev="sda1" ino=395896 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075175.905:6835): avc: denied { dac_read_search } for pid=26353 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075322.643:7591): avc: denied { create } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075500.766:8552): avc: denied { read } for pid=99158 comm="pgrep" name="status" dev="proc" ino=152649 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.739:7095): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075174.917:6829): avc: denied { read } for pid=26728 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075248.741:7184): avc: denied { read } for pid=35348 comm="node_exporter" name="file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075667.539:9351): avc: denied { search } for pid=26728 comm="safe_timer" name="diff" dev="sda1" ino=1442611 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075320.549:7560): avc: denied { append } for pid=51959 comm="log" path="/var/log/ceph/ceph-osd.2.log" dev="sda1" ino=395894 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075258.738:7243): avc: denied { read } for pid=35348 comm="node_exporter" name="hwmon" dev="sysfs" ino=21483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075328.739:7641): avc: denied { read } for pid=35348 comm="node_exporter" name="arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075418.739:8111): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/fs/xfs/dm-4/stats/stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075168.740:6802): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075400.955:7991): avc: denied { dac_read_search } for pid=26353 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075152.816:6680): avc: denied { signal } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075581.121:8954): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=394794 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075248.740:7179): avc: denied { getattr } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16396 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075479.278:8380): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075320.276:7553): avc: denied { getattr } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075502.644:8562): avc: denied { create } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075408.738:8080): avc: denied { read } for pid=35348 comm="node_exporter" name="entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075405.956:8063): avc: denied { dac_read_search } for pid=26353 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075664.044:9332): avc: denied { write } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075168.739:6800): avc: denied { search } for pid=35348 comm="node_exporter" name="fs" dev="proc" ino=171371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075586.067:8992): avc: denied { read } for pid=26330 comm="conmon" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075236.988:7056): avc: denied { search } for pid=26330 comm="conmon" name="journal" dev="tmpfs" ino=16682 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075502.644:8570): avc: denied { read } for pid=44080 comm="prometheus" path="socket:[375995]" dev="sockfs" ino=375995 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075479.278:8381): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075408.738:8076): avc: denied { read } for pid=35348 comm="node_exporter" name="xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075480.060:8391): avc: denied { sendto } for pid=26330 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075592.644:9045): avc: denied { create } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075176.277:6840): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075151.521:6641): avc: denied { append } for pid=51959 comm="log" path="/var/log/ceph/ceph-osd.2.log" dev="sda1" ino=395894 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075488.737:8490): avc: denied { read } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075488.738:8493): avc: denied { read } for pid=35348 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075319.003:7525): avc: denied { write } for pid=26330 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075422.644:8171): avc: denied { getattr } for pid=44080 comm="prometheus" laddr=172.21.15.80 lport=44866 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075179.276:6885): avc: denied { search } for pid=42010 comm="grafana-server" name="etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075428.739:8198): avc: denied { read } for pid=35348 comm="node_exporter" name="hwmon0" dev="sysfs" ino=35068 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075482.644:8437): avc: denied { search } for pid=44080 comm="prometheus" name="etc" dev="sda1" ino=1968146 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075478.738:8347): avc: denied { read } for pid=35348 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075566.464:8860): avc: denied { append } for pid=51959 comm="log" path="/var/log/ceph/ceph-osd.2.log" dev="sda1" ino=395894 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075342.429:7733): avc: denied { open } for pid=34534 comm="ceph-crash" path="/var/lib/ceph/crash" dev="dm-4" ino=8388736 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.739:7934): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075420.065:8126): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075480.971:8418): avc: denied { search } for pid=26353 comm="safe_timer" name="var" dev="sda1" ino=1442603 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075322.643:7593): avc: denied { connect } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.742:6760): avc: denied { search } for pid=35348 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075421.995:8153): avc: denied { getattr } for pid=26728 comm="mgr-fin" path="/usr/share/zoneinfo/UTC" dev="overlay" ino=1311473 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075161.976:6779): avc: denied { read } for pid=26728 comm="mgr-fin" name="localtime" dev="sda1" ino=394776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075158.741:6756): avc: denied { read } for pid=35348 comm="node_exporter" name="mounts" dev="proc" ino=167607 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075494.792:8509): avc: denied { open } for pid=44080 comm="prometheus" path="/prometheus" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075180.906:6903): avc: denied { search } for pid=26353 comm="safe_timer" name="var" dev="sda1" ino=1442603 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075666.004:9339): avc: denied { search } for pid=26353 comm="safe_timer" name="var" dev="sda1" ino=1442603 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075680.806:9431): avc: denied { read } for pid=105979 comm="pgrep" name="status" dev="proc" ino=152649 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075440.964:8224): avc: denied { read } for pid=26353 comm="msgr-worker-2" path="pipe:[126774]" dev="pipefs" ino=126774 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.049:9362): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075175.700:6833): avc: denied { signal } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075260.715:7267): avc: denied { search } for pid=88987 comm="pgrep" name="26330" dev="proc" ino=132508 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075341.824:7721): avc: denied { open } for pid=57451 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075345.946:7770): avc: denied { search } for pid=26353 comm="safe_timer" name="/" dev="overlay" ino=1442592 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075405.957:8064): avc: denied { search } for pid=26353 comm="safe_timer" name="mon.smithi080" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.373:9376): avc: denied { read } for pid=46227 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075158.843:6767): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075338.741:7698): avc: denied { getattr } for pid=35348 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075319.003:7525): avc: denied { write } for pid=26330 comm="conmon" name="socket" dev="tmpfs" ino=16686 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075421.846:8139): avc: denied { read } for pid=26728 comm="msgr-worker-0" path="socket:[281905]" dev="sockfs" ino=281905 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075482.277:8429): avc: denied { search } for pid=42010 comm="grafana-server" name="etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075238.739:7099): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/fs/xfs/stats/stats" dev="sysfs" ino=45563 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075508.739:8629): avc: denied { read } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075584.276:8973): avc: denied { search } for pid=42010 comm="grafana-server" name="/" dev="overlay" ino=1968169 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075236.277:7042): avc: denied { search } for pid=42010 comm="grafana-server" name="dashboards" dev="sda1" ino=1444769 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075398.741:7942): avc: denied { search } for pid=35348 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616075568.739:8883): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/fs/xfs/stats/stats" dev="sysfs" ino=45563 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.738:8870): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075278.739:7370): avc: denied { fork } for pid=35348 comm="node_exporter" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075662.644:9318): avc: denied { search } for pid=44080 comm="prometheus" name="etc" dev="sda1" ino=1968146 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075686.277:9439): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075341.991:7723): avc: denied { append } for pid=26728 comm="log" path="/var/log/ceph/ceph-mgr.smithi080.njtcci.log" dev="sda1" ino=395865 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075643.148:9168): avc: denied { write } for pid=42602 comm="msgr-worker-0" laddr=172.21.15.80 lport=49784 faddr=172.21.15.80 fport=6820 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075261.408:7293): avc: denied { search } for pid=57451 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c179,c314 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075174.098:6823): avc: denied { search } for pid=57451 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c179,c314 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075343.772:7760): avc: denied { open } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075400.033:7956): avc: denied { search } for pid=26330 comm="conmon" name="systemd" dev="tmpfs" ino=16404 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075567.060:8866): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075650.277:9283): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075563.278:8835): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075502.644:8565): avc: denied { setopt } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075249.003:7186): avc: denied { write } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.739:7101): avc: denied { search } for pid=35348 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075428.738:8186): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075484.069:8461): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075508.738:8628): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075318.738:7506): avc: denied { search } for pid=35348 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075321.005:7573): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075238.739:7097): avc: denied { read } for pid=35348 comm="node_exporter" name="mounts" dev="proc" ino=167607 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075248.739:7176): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/fs/xfs/dm-4/stats/stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075342.528:7736): avc: denied { search } for pid=51959 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075261.332:7290): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075667.551:9354): avc: denied { getattr } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075402.643:8018): avc: denied { read } for pid=44080 comm="prometheus" path="socket:[350990]" dev="sockfs" ino=350990 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075502.644:8566): avc: denied { connect } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075343.044:7754): avc: denied { write } for pid=26330 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075671.004:9410): avc: denied { search } for pid=26353 comm="safe_timer" name="var" dev="sda1" ino=1442603 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075152.278:6668): avc: denied { read } for pid=42010 comm="grafana-server" name="radosgw-sync-overview.json" dev="sda1" ino=1444781 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075238.991:7117): avc: denied { read } for pid=26330 comm="conmon" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075480.608:8399): avc: denied { search } for pid=26728 comm="safe_timer" name="etc" dev="sda1" ino=1442620 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075154.831:6708): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075179.941:6897): avc: denied { open } for pid=26330 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075480.596:8397): avc: denied { read } for pid=26728 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075646.001:9220): avc: denied { getattr } for pid=26353 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075151.905:6651): avc: denied { write } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075648.741:9273): avc: denied { search } for pid=35348 comm="node_exporter" name="host" dev="sda1" ino=1968013 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075328.741:7648): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.740:7106): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.738:7920): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173156 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.738:9032): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=43630 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075572.644:8922): avc: denied { create } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075400.103:7963): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075324.021:7624): avc: denied { open } for pid=42602 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075667.815:9356): avc: denied { write } for pid=26728 comm="msgr-worker-1" laddr=172.21.15.80 lport=38434 faddr=172.21.15.80 fport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075403.275:8031): avc: denied { read } for pid=26728 comm="msgr-worker-0" path="socket:[246868]" dev="sockfs" ino=246868 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075643.720:9177): avc: denied { read } for pid=57451 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.738:6851): avc: denied { read } for pid=35348 comm="node_exporter" name="file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075482.278:8431): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075337.033:7657): avc: denied { append } for pid=26353 comm="log" path="/var/log/ceph/ceph-mon.smithi080.log" dev="sda1" ino=395863 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075268.738:7335): avc: denied { read } for pid=35348 comm="node_exporter" name="mounts" dev="proc" ino=167607 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075680.806:9429): avc: denied { read } for pid=105979 comm="pgrep" name="status" dev="proc" ino=132512 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075158.741:6756): avc: denied { search } for pid=35348 comm="node_exporter" name="1" dev="proc" ino=167025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075422.236:8154): avc: denied { open } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075422.644:8169): avc: denied { connect } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.277:9373): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075563.278:8836): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-detail.json" dev="overlay" ino=1444779 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075152.644:6672): avc: denied { setopt } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075418.741:8118): avc: denied { getattr } for pid=35348 comm="node_exporter" name="/" dev="tmpfs" ino=16396 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075643.430:9174): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075152.278:6667): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075400.033:7955): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075428.742:8211): avc: denied { search } for pid=35348 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075318.738:7511): avc: denied { read } for pid=35348 comm="node_exporter" name="file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075162.644:6781): avc: denied { create } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.739:7685): avc: denied { search } for pid=35348 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075240.994:7144): avc: denied { write } for pid=26330 comm="conmon" name="socket" dev="tmpfs" ino=16686 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075488.740:8504): avc: denied { search } for pid=35348 comm="node_exporter" name="kernel" dev="proc" ino=167394 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075418.739:8111): avc: denied { read } for pid=35348 comm="node_exporter" name="stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075328.739:7645): avc: denied { search } for pid=35348 comm="node_exporter" name="1" dev="proc" ino=167025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075398.738:7918): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="overlay" ino=1968004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075587.276:9009): avc: denied { search } for pid=42010 comm="grafana-server" name="/" dev="overlay" ino=1968169 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075268.739:7344): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075168.739:6798): avc: denied { read } for pid=35348 comm="node_exporter" name="entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075500.766:8549): avc: denied { getattr } for pid=99158 comm="pgrep" path="/proc/26330" dev="proc" ino=132508 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075592.644:9047): avc: denied { setopt } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.741:7943): avc: denied { search } for pid=35348 comm="node_exporter" name="host" dev="sda1" ino=1968013 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075485.972:8483): avc: denied { getattr } for pid=26353 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075152.278:6668): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-sync-overview.json" dev="overlay" ino=1444781 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075257.331:7235): avc: denied { search } for pid=26728 comm="safe_timer" name="etc" dev="sda1" ino=1442620 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075408.739:8088): avc: denied { search } for pid=35348 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075268.737:7331): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173156 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.739:7101): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075328.739:7643): avc: denied { read } for pid=35348 comm="node_exporter" name="file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075570.987:8917): avc: denied { read } for pid=26353 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.278:7673): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.761:8900): avc: denied { append } for pid=44080 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075587.277:9014): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075400.033:7953): avc: denied { write } for pid=26353 comm="fn_monstore" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075501.999:8558): avc: denied { search } for pid=26728 comm="mgr-fin" name="usr" dev="sda1" ino=786698 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075398.739:7927): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075662.398:9310): avc: denied { read } for pid=26353 comm="msgr-worker-2" path="socket:[173169]" dev="sockfs" ino=173169 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075652.644:9296): avc: denied { read } for pid=44080 comm="prometheus" path="socket:[406616]" dev="sockfs" ino=406616 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075258.739:7251): avc: denied { search } for pid=35348 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616075498.745:8536): avc: denied { append } for pid=44080 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c111,c679 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075342.528:7737): avc: denied { read } for pid=51959 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075567.048:8865): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.739:8882): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075262.030:7296): avc: denied { getattr } for pid=26353 comm="rstore_compact" path="/sys" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.740:9038): avc: denied { search } for pid=35348 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075260.495:7262): avc: denied { write } for pid=57451 comm="tp_osd_tp" path="pipe:[227463]" dev="pipefs" ino=227463 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075565.986:8841): avc: denied { getattr } for pid=26353 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.739:8367): avc: denied { search } for pid=35348 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075341.991:7724): avc: denied { getattr } for pid=26728 comm="mgr-fin" path="/usr/share/zoneinfo/UTC" dev="overlay" ino=1311473 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075680.806:9429): avc: denied { search } for pid=105979 comm="pgrep" name="26330" dev="proc" ino=132508 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075158.742:6760): avc: denied { search } for pid=35348 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075320.277:7558): avc: denied { read open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.049:9363): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075158.740:6755): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075317.991:7489): avc: denied { open } for pid=42602 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.738:7922): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075258.738:7241): avc: denied { search } for pid=35348 comm="node_exporter" name="1" dev="proc" ino=167025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075344.277:7764): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075343.044:7755): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="tmpfs" ino=16395 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075338.278:7676): avc: denied { open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/osds-overview.json" dev="overlay" ino=1444776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075344.277:7763): avc: denied { getattr } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075428.738:8187): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075151.905:6654): avc: denied { write } for pid=26330 comm="conmon" name="socket" dev="tmpfs" ino=16686 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075178.940:6881): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=394794 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075562.031:8788): avc: denied { open } for pid=26330 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075585.989:8985): avc: denied { search } for pid=26353 comm="safe_timer" name="mon.smithi080" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075398.738:7919): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075505.975:8615): avc: denied { getattr } for pid=26353 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi080/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075174.917:6829): avc: denied { open } for pid=26728 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075580.626:8945): avc: denied { search } for pid=57451 comm="safe_timer" name="/" dev="overlay" ino=1968244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c179,c314 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075238.599:7084): avc: denied { write } for pid=26353 comm="safe_timer" path="pipe:[126774]" dev="pipefs" ino=126774 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075260.930:7274): avc: denied { search } for pid=26353 comm="safe_timer" name="var" dev="sda1" ino=1442603 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c871,c1023 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075325.016:7625): avc: denied { search } for pid=26330 comm="conmon" name="journal" dev="tmpfs" ino=16682 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075422.278:8162): avc: denied { read } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075643.418:9171): avc: denied { search } for pid=26728 comm="safe_timer" name="/" dev="overlay" ino=1442611 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.277:9371): avc: denied { lock } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075668.737:9379): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.739:9256): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=43630 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075568.738:8870): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="overlay" ino=1968004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075400.033:7956): avc: denied { sendto } for pid=26330 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075478.738:8346): avc: denied { read } for pid=35348 comm="node_exporter" name="fd" dev="proc" ino=173157 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075562.246:8796): avc: denied { search } for pid=57451 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c179,c314 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075563.024:8810): avc: denied { search } for pid=26728 comm="safe_timer" name="libpod-7157ed55dd2bb6f82af892cdc2cadcbaa2c5f5b0b22e740b7b8d1bea0b6c44b3.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075340.945:7713): avc: denied { read } for pid=26353 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075418.739:8114): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075479.278:8384): avc: denied { read } for pid=42010 comm="grafana-server" name="pool-overview.json" dev="sda1" ino=1444778 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075173.934:6819): avc: denied { sendto } for pid=26330 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075503.971:8592): avc: denied { search } for pid=42602 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075268.740:7349): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075317.914:7487): avc: denied { search } for pid=57451 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1968244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075237.233:7063): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075482.066:8423): avc: denied { search } for pid=26330 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075323.783:7623): avc: denied { search } for pid=46227 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968207 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c79,c455 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075268.739:7339): avc: denied { search } for pid=35348 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075488.740:8503): avc: denied { search } for pid=35348 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616075162.644:6787): avc: denied { read } for pid=44080 comm="prometheus" path="socket:[293756]" dev="sockfs" ino=293756 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075588.741:9041): avc: denied { read } for pid=35348 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075644.277:9189): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075343.784:7762): avc: denied { read } for pid=26728 comm="safe_timer" name="os-release" dev="sda1" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075478.739:8363): avc: denied { getattr } for pid=35348 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075174.929:6832): avc: denied { getattr } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075323.277:7615): avc: denied { lock } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075562.644:8802): avc: denied { setopt } for pid=44080 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.738:6852): avc: denied { search } for pid=35348 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075323.012:7612): avc: denied { read } for pid=26330 comm="conmon" path="pipe:[127850]" dev="pipefs" ino=127850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075668.373:9376): avc: denied { open } for pid=46227 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075162.915:6788): avc: denied { search } for pid=42602 comm="safe_timer" name="/" dev="overlay" ino=1968187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c166,c597 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075319.003:7525): avc: denied { search } for pid=26330 comm="conmon" name="systemd" dev="tmpfs" ino=16404 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075428.739:8201): avc: denied { open } for pid=35348 comm="node_exporter" path="/sys/fs/xfs/dm-4/stats/stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075328.739:7643): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075400.115:7983): avc: denied { open } for pid=26728 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075428.739:8196): avc: denied { read } for pid=35348 comm="node_exporter" name="hwmon" dev="sysfs" ino=21483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075422.278:8162): avc: denied { read open } for pid=42010 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075478.739:8365): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075236.277:7042): avc: denied { getattr } for pid=42010 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075666.004:9339): avc: denied { dac_read_search } for pid=26353 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075179.277:6888): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075248.738:7168): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="overlay" ino=1968004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075662.665:9323): avc: denied { read } for pid=57451 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075344.278:7766): avc: denied { read } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075318.739:7518): avc: denied { search } for pid=35348 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.740:9266): avc: denied { search } for pid=35348 comm="node_exporter" name="net" dev="proc" ino=166036 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075155.910:6719): avc: denied { sendto } for pid=26330 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075563.278:8834): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968184 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075248.741:7184): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075585.815:8978): avc: denied { search } for pid=46227 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1968207 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075348.738:7772): avc: denied { getattr } for pid=35348 comm="node_exporter" path="/proc/7" dev="proc" ino=166030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.738:7682): avc: denied { search } for pid=35348 comm="node_exporter" name="/" dev="overlay" ino=1968004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c236,c374 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075338.739:7696): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=171372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075178.738:6855): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/7/net/arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075662.398:9312): avc: denied { write } for pid=26353 comm="ms_dispatch" path="pipe:[126774]" dev="pipefs" ino=126774 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075263.277:7317): avc: denied { getattr } for pid=42010 comm="grafana-server" path="/etc" dev="sda1" ino=1968175 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c780,c781 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075568.039:8868): avc: denied { write } for pid=26330 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616075178.739:6862): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075645.655:9217): avc: denied { search } for pid=57451 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1968244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c179,c314 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075581.108:8953): avc: denied { search } for pid=26728 comm="safe_timer" name="/" dev="overlay" ino=1442611 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075648.739:9263): avc: denied { open } for pid=35348 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075662.665:9322): avc: denied { search } for pid=57451 comm="safe_timer" name="/" dev="overlay" ino=1968244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c179,c314 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616075663.516:9328): avc: denied { search } for pid=26728 comm="safe_timer" name="/" dev="overlay" ino=1442611 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c84,c521 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"']