teuthology-2020-05-04_05:15:02-ceph-ansible-octopus-distro-basic-smithi

5020900

FAIL

octopus

octopus

py2

smithi

centos 8.1

smithi058 smithi193 smithi201

ceph-ansible/smoke/basic/{0-clusters/3-node.yaml 1-distros/centos_latest.yaml 2-ceph/ceph_ansible.yaml 3-config/bluestore_with_dmcrypt.yaml 4-tasks/ceph-admin-commands.yaml}

SELinux denials found on ubuntu@smithi193.front.sepia.ceph.com: [u'type=AVC msg=audit(1588820095.310:6682): avc: denied { setrlimit } for pid=27809 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', u'type=AVC msg=audit(1588820095.303:6681): avc: denied { read open } for pid=27809 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588820095.348:6685): avc: denied { getattr } for pid=27812 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=3011 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588820095.346:6683): avc: denied { execute } for pid=27812 comm="sudo" name="unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=USER_AVC msg=audit(1588820095.350:6691): pid=2458 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.login1.Manager member=CreateSession dest=org.freedesktop.login1 spid=27809 tpid=2565 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:systemd_logind_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', u'type=AVC msg=audit(1588820095.346:6683): avc: denied { map } for pid=27812 comm="unix_chkpwd" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588820095.433:6702): avc: denied { audit_write } for pid=27809 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1588820095.348:6687): avc: denied { nlmsg_relay } for pid=27809 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1588820095.346:6683): avc: denied { read open } for pid=27812 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588820095.432:6699): avc: denied { read } for pid=27809 comm="sudo" name="utmp" dev="tmpfs" ino=14468 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588820095.348:6684): avc: denied { open } for pid=27812 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=3011 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588820095.346:6683): avc: denied { execute_no_trans } for pid=27812 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588820095.433:6704): avc: denied { sys_resource } for pid=27825 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1588820095.433:6702): avc: denied { nlmsg_relay } for pid=27809 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1588820095.432:6701): avc: denied { create } for pid=27809 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1588820095.348:6684): avc: denied { read } for pid=27812 comm="unix_chkpwd" name="shadow" dev="sda1" ino=3011 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588820095.433:6704): avc: denied { setrlimit } for pid=27825 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', u'type=AVC msg=audit(1588820095.432:6699): avc: denied { open } for pid=27809 comm="sudo" path="/run/utmp" dev="tmpfs" ino=14468 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588820095.348:6686): avc: denied { create } for pid=27809 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=USER_AVC msg=audit(1588820095.432:6698): pid=2458 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_return dest=:1.1372 spid=2565 tpid=27809 scontext=system_u:system_r:systemd_logind_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', u'type=AVC msg=audit(1588820095.432:6700): avc: denied { lock } for pid=27809 comm="sudo" path="/run/utmp" dev="tmpfs" ino=14468 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588820095.303:6681): avc: denied { execute } for pid=27809 comm="admin_socket" name="sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588820095.310:6682): avc: denied { sys_resource } for pid=27809 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1588820095.303:6681): avc: denied { execute_no_trans } for pid=27809 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588820095.303:6681): avc: denied { map } for pid=27809 comm="sudo" path="/usr/bin/sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588820095.348:6687): avc: denied { audit_write } for pid=27809 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1']

5020908

FAIL

octopus

octopus

py2

smithi

centos 8.1

smithi171 smithi173 smithi196

ceph-ansible/smoke/basic/{0-clusters/3-node.yaml 1-distros/centos_latest.yaml 2-ceph/ceph_ansible.yaml 3-config/dmcrypt_on.yaml 4-tasks/rest.yaml}

SELinux denials found on ubuntu@smithi196.front.sepia.ceph.com: [u'type=AVC msg=audit(1588821966.354:6616): avc: denied { create } for pid=27428 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1588821966.354:6615): avc: denied { lock } for pid=27428 comm="sudo" path="/run/utmp" dev="tmpfs" ino=13787 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588821966.266:6600): avc: denied { getattr } for pid=27431 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=3019 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588821966.265:6598): avc: denied { execute_no_trans } for pid=27431 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588821966.222:6596): avc: denied { execute } for pid=27428 comm="admin_socket" name="sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=USER_AVC msg=audit(1588821966.268:6606): pid=2419 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.login1.Manager member=CreateSession dest=org.freedesktop.login1 spid=27428 tpid=2531 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:systemd_logind_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', u'type=USER_AVC msg=audit(1588821966.353:6613): pid=2419 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_return dest=:1.1356 spid=2531 tpid=27428 scontext=system_u:system_r:systemd_logind_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', u'type=AVC msg=audit(1588821966.354:6617): avc: denied { nlmsg_relay } for pid=27428 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1588821966.267:6602): avc: denied { nlmsg_relay } for pid=27428 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1588821966.228:6597): avc: denied { sys_resource } for pid=27428 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1588821966.354:6617): avc: denied { audit_write } for pid=27428 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1588821966.222:6596): avc: denied { read open } for pid=27428 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588821966.267:6602): avc: denied { audit_write } for pid=27428 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1588821966.228:6597): avc: denied { setrlimit } for pid=27428 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', u'type=AVC msg=audit(1588821966.354:6619): avc: denied { sys_resource } for pid=27444 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1588821966.222:6596): avc: denied { execute_no_trans } for pid=27428 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588821966.265:6598): avc: denied { read open } for pid=27431 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588821966.354:6614): avc: denied { open } for pid=27428 comm="sudo" path="/run/utmp" dev="tmpfs" ino=13787 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588821966.267:6601): avc: denied { create } for pid=27428 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1588821966.266:6599): avc: denied { open } for pid=27431 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=3019 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588821966.266:6599): avc: denied { read } for pid=27431 comm="unix_chkpwd" name="shadow" dev="sda1" ino=3019 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588821966.265:6598): avc: denied { map } for pid=27431 comm="unix_chkpwd" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588821966.354:6619): avc: denied { setrlimit } for pid=27444 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', u'type=AVC msg=audit(1588821966.265:6598): avc: denied { execute } for pid=27431 comm="sudo" name="unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588821966.354:6614): avc: denied { read } for pid=27428 comm="sudo" name="utmp" dev="tmpfs" ino=13787 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588821966.222:6596): avc: denied { map } for pid=27428 comm="sudo" path="/usr/bin/sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1']

5020916

FAIL

octopus

octopus

py2

smithi

centos 8.1

smithi033 smithi047 smithi202

ceph-ansible/smoke/basic/{0-clusters/3-node.yaml 1-distros/centos_latest.yaml 2-ceph/ceph_ansible.yaml 3-config/bluestore_with_dmcrypt.yaml 4-tasks/rbd_import_export.yaml}

SELinux denials found on ubuntu@smithi202.front.sepia.ceph.com: [u'type=AVC msg=audit(1588820215.658:6513): avc: denied { create } for pid=30365 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1588820215.568:6499): avc: denied { nlmsg_relay } for pid=30365 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1588820215.567:6496): avc: denied { open } for pid=30368 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=3012 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588820215.530:6494): avc: denied { setrlimit } for pid=30365 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', u'type=AVC msg=audit(1588820215.568:6498): avc: denied { create } for pid=30365 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=USER_AVC msg=audit(1588820215.569:6503): pid=2412 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.login1.Manager member=CreateSession dest=org.freedesktop.login1 spid=30365 tpid=2552 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:systemd_logind_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', u'type=AVC msg=audit(1588820215.567:6497): avc: denied { getattr } for pid=30368 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=3012 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588820215.567:6496): avc: denied { read } for pid=30368 comm="unix_chkpwd" name="shadow" dev="sda1" ino=3012 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588820215.523:6493): avc: denied { map } for pid=30365 comm="sudo" path="/usr/bin/sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588820215.566:6495): avc: denied { execute } for pid=30368 comm="sudo" name="unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588820215.659:6516): avc: denied { sys_resource } for pid=30384 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1588820215.659:6516): avc: denied { setrlimit } for pid=30384 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', u'type=AVC msg=audit(1588820215.523:6493): avc: denied { execute } for pid=30365 comm="admin_socket" name="sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588820215.658:6511): avc: denied { open } for pid=30365 comm="sudo" path="/run/utmp" dev="tmpfs" ino=15457 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588820215.566:6495): avc: denied { read open } for pid=30368 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588820215.566:6495): avc: denied { map } for pid=30368 comm="unix_chkpwd" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588820215.530:6494): avc: denied { sys_resource } for pid=30365 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1588820215.568:6499): avc: denied { audit_write } for pid=30365 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1588820215.523:6493): avc: denied { execute_no_trans } for pid=30365 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588820215.658:6514): avc: denied { nlmsg_relay } for pid=30365 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1588820215.658:6512): avc: denied { lock } for pid=30365 comm="sudo" path="/run/utmp" dev="tmpfs" ino=15457 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=USER_AVC msg=audit(1588820215.657:6510): pid=2412 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_return dest=:1.1336 spid=2552 tpid=30365 scontext=system_u:system_r:systemd_logind_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', u'type=AVC msg=audit(1588820215.566:6495): avc: denied { execute_no_trans } for pid=30368 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588820215.658:6514): avc: denied { audit_write } for pid=30365 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1588820215.658:6511): avc: denied { read } for pid=30365 comm="sudo" name="utmp" dev="tmpfs" ino=15457 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588820215.523:6493): avc: denied { read open } for pid=30365 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1']

5020924

FAIL

octopus

octopus

py2

smithi

centos 8.1

smithi018 smithi070 smithi149

ceph-ansible/smoke/basic/{0-clusters/3-node.yaml 1-distros/centos_latest.yaml 2-ceph/ceph_ansible.yaml 3-config/dmcrypt_off.yaml 4-tasks/ceph-admin-commands.yaml}

SELinux denials found on ubuntu@smithi070.front.sepia.ceph.com: [u'type=AVC msg=audit(1588820486.108:6498): avc: denied { read } for pid=30388 comm="unix_chkpwd" name="shadow" dev="sda1" ino=823 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588820486.198:6516): avc: denied { audit_write } for pid=30385 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1588820486.070:6496): avc: denied { sys_resource } for pid=30385 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1588820486.197:6513): avc: denied { open } for pid=30385 comm="sudo" path="/run/utmp" dev="tmpfs" ino=12460 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588820486.108:6501): avc: denied { nlmsg_relay } for pid=30385 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1588820486.197:6513): avc: denied { read } for pid=30385 comm="sudo" name="utmp" dev="tmpfs" ino=12460 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588820486.063:6495): avc: denied { execute } for pid=30385 comm="admin_socket" name="sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588820486.108:6501): avc: denied { audit_write } for pid=30385 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1588820486.108:6500): avc: denied { create } for pid=30385 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1588820486.107:6497): avc: denied { execute } for pid=30388 comm="sudo" name="unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588820486.070:6496): avc: denied { setrlimit } for pid=30385 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', u'type=AVC msg=audit(1588820486.198:6516): avc: denied { nlmsg_relay } for pid=30385 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1588820486.107:6497): avc: denied { read open } for pid=30388 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588820486.198:6515): avc: denied { create } for pid=30385 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1588820486.107:6497): avc: denied { execute_no_trans } for pid=30388 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588820486.107:6497): avc: denied { map } for pid=30388 comm="unix_chkpwd" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588820486.108:6498): avc: denied { open } for pid=30388 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=823 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=USER_AVC msg=audit(1588820486.197:6512): pid=2440 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_return dest=:1.1337 spid=2572 tpid=30385 scontext=system_u:system_r:systemd_logind_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', u'type=AVC msg=audit(1588820486.198:6518): avc: denied { setrlimit } for pid=30400 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', u'type=AVC msg=audit(1588820486.063:6495): avc: denied { execute_no_trans } for pid=30385 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588820486.063:6495): avc: denied { read open } for pid=30385 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588820486.108:6499): avc: denied { getattr } for pid=30388 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=823 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588820486.198:6518): avc: denied { sys_resource } for pid=30400 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=USER_AVC msg=audit(1588820486.110:6505): pid=2440 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.login1.Manager member=CreateSession dest=org.freedesktop.login1 spid=30385 tpid=2572 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:systemd_logind_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', u'type=AVC msg=audit(1588820486.063:6495): avc: denied { map } for pid=30385 comm="sudo" path="/usr/bin/sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588820486.197:6514): avc: denied { lock } for pid=30385 comm="sudo" path="/run/utmp" dev="tmpfs" ino=12460 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1']

5020932

FAIL

octopus

octopus

py2

smithi

centos 8.1

smithi036 smithi079 smithi204

ceph-ansible/smoke/basic/{0-clusters/3-node.yaml 1-distros/centos_latest.yaml 2-ceph/ceph_ansible.yaml 3-config/bluestore_with_dmcrypt.yaml 4-tasks/rest.yaml}

SELinux denials found on ubuntu@smithi036.front.sepia.ceph.com: [u'type=AVC msg=audit(1588823102.059:6865): avc: denied { lock } for pid=28326 comm="sudo" path="/run/utmp" dev="tmpfs" ino=13096 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588823101.958:6848): avc: denied { map } for pid=28329 comm="unix_chkpwd" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588823101.960:6852): avc: denied { audit_write } for pid=28326 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1588823101.960:6852): avc: denied { nlmsg_relay } for pid=28326 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=USER_AVC msg=audit(1588823101.962:6856): pid=2441 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.login1.Manager member=CreateSession dest=org.freedesktop.login1 spid=28326 tpid=2557 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:systemd_logind_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', u'type=AVC msg=audit(1588823101.958:6848): avc: denied { read open } for pid=28329 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588823101.904:6846): avc: denied { execute_no_trans } for pid=28326 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588823101.960:6849): avc: denied { read } for pid=28329 comm="unix_chkpwd" name="shadow" dev="sda1" ino=3012 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588823101.958:6848): avc: denied { execute } for pid=28329 comm="sudo" name="unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588823101.904:6846): avc: denied { map } for pid=28326 comm="sudo" path="/usr/bin/sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588823101.904:6846): avc: denied { read open } for pid=28326 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588823102.060:6869): avc: denied { sys_resource } for pid=28341 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1588823102.059:6864): avc: denied { open } for pid=28326 comm="sudo" path="/run/utmp" dev="tmpfs" ino=13096 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588823102.060:6866): avc: denied { create } for pid=28326 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1588823101.904:6846): avc: denied { execute } for pid=28326 comm="admin_socket" name="sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588823101.958:6848): avc: denied { execute_no_trans } for pid=28329 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588823102.060:6869): avc: denied { setrlimit } for pid=28341 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', u'type=AVC msg=audit(1588823101.960:6850): avc: denied { getattr } for pid=28329 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=3012 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588823102.060:6867): avc: denied { audit_write } for pid=28326 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1588823102.059:6864): avc: denied { read } for pid=28326 comm="sudo" name="utmp" dev="tmpfs" ino=13096 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588823101.910:6847): avc: denied { sys_resource } for pid=28326 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1588823101.960:6851): avc: denied { create } for pid=28326 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1588823101.910:6847): avc: denied { setrlimit } for pid=28326 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', u'type=AVC msg=audit(1588823101.960:6849): avc: denied { open } for pid=28329 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=3012 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588823102.060:6867): avc: denied { nlmsg_relay } for pid=28326 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=USER_AVC msg=audit(1588823102.059:6863): pid=2441 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_return dest=:1.1406 spid=2557 tpid=28326 scontext=system_u:system_r:systemd_logind_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"']

5020940

FAIL

octopus

octopus

py2

smithi

centos 8.1

smithi072 smithi165 smithi172

ceph-ansible/smoke/basic/{0-clusters/3-node.yaml 1-distros/centos_latest.yaml 2-ceph/ceph_ansible.yaml 3-config/dmcrypt_off.yaml 4-tasks/rbd_import_export.yaml}

SELinux denials found on ubuntu@smithi172.front.sepia.ceph.com: [u'type=AVC msg=audit(1588823604.054:6497): avc: denied { setrlimit } for pid=30354 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', u'type=AVC msg=audit(1588823604.048:6496): avc: denied { execute } for pid=30354 comm="admin_socket" name="sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588823604.048:6496): avc: denied { map } for pid=30354 comm="sudo" path="/usr/bin/sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588823604.092:6498): avc: denied { map } for pid=30357 comm="unix_chkpwd" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588823604.093:6502): avc: denied { nlmsg_relay } for pid=30354 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=USER_AVC msg=audit(1588823604.095:6506): pid=2405 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.login1.Manager member=CreateSession dest=org.freedesktop.login1 spid=30354 tpid=2561 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:systemd_logind_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', u'type=AVC msg=audit(1588823604.183:6515): avc: denied { lock } for pid=30354 comm="sudo" path="/run/utmp" dev="tmpfs" ino=16465 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588823604.054:6497): avc: denied { sys_resource } for pid=30354 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1588823604.093:6501): avc: denied { create } for pid=30354 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1588823604.092:6498): avc: denied { execute } for pid=30357 comm="sudo" name="unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=USER_AVC msg=audit(1588823604.183:6513): pid=2405 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_return dest=:1.1336 spid=2561 tpid=30354 scontext=system_u:system_r:systemd_logind_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', u'type=AVC msg=audit(1588823604.048:6496): avc: denied { execute_no_trans } for pid=30354 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588823604.184:6519): avc: denied { setrlimit } for pid=30370 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', u'type=AVC msg=audit(1588823604.093:6500): avc: denied { getattr } for pid=30357 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=3012 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588823604.184:6517): avc: denied { nlmsg_relay } for pid=30354 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1588823604.048:6496): avc: denied { read open } for pid=30354 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588823604.092:6498): avc: denied { execute_no_trans } for pid=30357 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588823604.184:6519): avc: denied { sys_resource } for pid=30370 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1588823604.183:6514): avc: denied { open } for pid=30354 comm="sudo" path="/run/utmp" dev="tmpfs" ino=16465 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588823604.093:6499): avc: denied { read } for pid=30357 comm="unix_chkpwd" name="shadow" dev="sda1" ino=3012 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588823604.093:6499): avc: denied { open } for pid=30357 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=3012 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588823604.093:6502): avc: denied { audit_write } for pid=30354 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1588823604.184:6517): avc: denied { audit_write } for pid=30354 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1588823604.184:6516): avc: denied { create } for pid=30354 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1588823604.183:6514): avc: denied { read } for pid=30354 comm="sudo" name="utmp" dev="tmpfs" ino=16465 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588823604.092:6498): avc: denied { read open } for pid=30357 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1']

5020948

FAIL

octopus

octopus

py2

smithi

centos 8.1

smithi022 smithi041 smithi161

ceph-ansible/smoke/basic/{0-clusters/3-node.yaml 1-distros/centos_latest.yaml 2-ceph/ceph_ansible.yaml 3-config/dmcrypt_on.yaml 4-tasks/ceph-admin-commands.yaml}

SELinux denials found on ubuntu@smithi161.front.sepia.ceph.com: [u'type=AVC msg=audit(1588822961.755:6597): avc: denied { read open } for pid=27519 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588822961.885:6618): avc: denied { audit_write } for pid=27519 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1588822961.762:6598): avc: denied { setrlimit } for pid=27519 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', u'type=AVC msg=audit(1588822961.755:6597): avc: denied { execute_no_trans } for pid=27519 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588822961.755:6597): avc: denied { map } for pid=27519 comm="sudo" path="/usr/bin/sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588822961.885:6615): avc: denied { open } for pid=27519 comm="sudo" path="/run/utmp" dev="tmpfs" ino=4295 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588822961.755:6597): avc: denied { execute } for pid=27519 comm="admin_socket" name="sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588822961.885:6620): avc: denied { setrlimit } for pid=27533 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', u'type=AVC msg=audit(1588822961.798:6599): avc: denied { execute } for pid=27522 comm="sudo" name="unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=USER_AVC msg=audit(1588822961.801:6607): pid=2400 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.login1.Manager member=CreateSession dest=org.freedesktop.login1 spid=27519 tpid=2551 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:systemd_logind_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', u'type=AVC msg=audit(1588822961.762:6598): avc: denied { sys_resource } for pid=27519 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1588822961.799:6600): avc: denied { read } for pid=27522 comm="unix_chkpwd" name="shadow" dev="sda1" ino=3011 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588822961.885:6620): avc: denied { sys_resource } for pid=27533 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1588822961.885:6616): avc: denied { lock } for pid=27519 comm="sudo" path="/run/utmp" dev="tmpfs" ino=4295 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588822961.799:6601): avc: denied { getattr } for pid=27522 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=3011 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588822961.798:6599): avc: denied { read open } for pid=27522 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588822961.885:6617): avc: denied { create } for pid=27519 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1588822961.799:6600): avc: denied { open } for pid=27522 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=3011 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588822961.800:6603): avc: denied { audit_write } for pid=27519 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1588822961.798:6599): avc: denied { map } for pid=27522 comm="unix_chkpwd" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=USER_AVC msg=audit(1588822961.884:6614): pid=2400 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_return dest=:1.1356 spid=2551 tpid=27519 scontext=system_u:system_r:systemd_logind_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', u'type=AVC msg=audit(1588822961.885:6618): avc: denied { nlmsg_relay } for pid=27519 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1588822961.800:6603): avc: denied { nlmsg_relay } for pid=27519 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1588822961.885:6615): avc: denied { read } for pid=27519 comm="sudo" name="utmp" dev="tmpfs" ino=4295 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588822961.799:6602): avc: denied { create } for pid=27519 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1588822961.798:6599): avc: denied { execute_no_trans } for pid=27522 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1']

5020956

FAIL

octopus

octopus

py2

smithi

centos 8.1

smithi042 smithi064 smithi192

ceph-ansible/smoke/basic/{0-clusters/3-node.yaml 1-distros/centos_latest.yaml 2-ceph/ceph_ansible.yaml 3-config/dmcrypt_off.yaml 4-tasks/rest.yaml}

SELinux denials found on ubuntu@smithi192.front.sepia.ceph.com: [u'type=AVC msg=audit(1588824998.645:6692): avc: denied { read } for pid=27784 comm="sudo" name="utmp" dev="tmpfs" ino=15458 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588824998.561:6677): avc: denied { read } for pid=27787 comm="unix_chkpwd" name="shadow" dev="sda1" ino=3011 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588824998.560:6676): avc: denied { execute_no_trans } for pid=27787 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588824998.560:6676): avc: denied { read open } for pid=27787 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588824998.562:6680): avc: denied { nlmsg_relay } for pid=27784 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1588824998.524:6675): avc: denied { sys_resource } for pid=27784 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1588824998.646:6694): avc: denied { create } for pid=27784 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1588824998.561:6677): avc: denied { open } for pid=27787 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=3011 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588824998.560:6676): avc: denied { map } for pid=27787 comm="unix_chkpwd" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588824998.518:6674): avc: denied { execute } for pid=27784 comm="admin_socket" name="sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588824998.646:6697): avc: denied { setrlimit } for pid=27798 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', u'type=AVC msg=audit(1588824998.562:6679): avc: denied { create } for pid=27784 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1588824998.561:6678): avc: denied { getattr } for pid=27787 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=3011 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588824998.524:6675): avc: denied { setrlimit } for pid=27784 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', u'type=USER_AVC msg=audit(1588824998.645:6691): pid=2425 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_return dest=:1.1373 spid=2564 tpid=27784 scontext=system_u:system_r:systemd_logind_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', u'type=AVC msg=audit(1588824998.560:6676): avc: denied { execute } for pid=27787 comm="sudo" name="unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588824998.646:6695): avc: denied { audit_write } for pid=27784 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1588824998.645:6692): avc: denied { open } for pid=27784 comm="sudo" path="/run/utmp" dev="tmpfs" ino=15458 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588824998.518:6674): avc: denied { read open } for pid=27784 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588824998.646:6695): avc: denied { nlmsg_relay } for pid=27784 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1588824998.518:6674): avc: denied { execute_no_trans } for pid=27784 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=USER_AVC msg=audit(1588824998.563:6684): pid=2425 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.login1.Manager member=CreateSession dest=org.freedesktop.login1 spid=27784 tpid=2564 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:systemd_logind_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', u'type=AVC msg=audit(1588824998.518:6674): avc: denied { map } for pid=27784 comm="sudo" path="/usr/bin/sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588824998.562:6680): avc: denied { audit_write } for pid=27784 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1588824998.646:6697): avc: denied { sys_resource } for pid=27798 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1588824998.645:6693): avc: denied { lock } for pid=27784 comm="sudo" path="/run/utmp" dev="tmpfs" ino=15458 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1']

5020964

FAIL

octopus

octopus

py2

smithi

centos 8.1

smithi118 smithi119 smithi136

ceph-ansible/smoke/basic/{0-clusters/3-node.yaml 1-distros/centos_latest.yaml 2-ceph/ceph_ansible.yaml 3-config/dmcrypt_on.yaml 4-tasks/rbd_import_export.yaml}

SELinux denials found on ubuntu@smithi119.front.sepia.ceph.com: [u'type=AVC msg=audit(1588824693.464:6699): avc: denied { create } for pid=27764 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=USER_AVC msg=audit(1588824693.376:6689): pid=2429 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.login1.Manager member=CreateSession dest=org.freedesktop.login1 spid=27764 tpid=2551 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:systemd_logind_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', u'type=AVC msg=audit(1588824693.375:6683): avc: denied { getattr } for pid=27767 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=3020 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588824693.331:6679): avc: denied { execute } for pid=27764 comm="admin_socket" name="sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588824693.374:6681): avc: denied { execute } for pid=27767 comm="sudo" name="unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588824693.464:6702): avc: denied { sys_resource } for pid=27778 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1588824693.464:6697): avc: denied { read } for pid=27764 comm="sudo" name="utmp" dev="tmpfs" ino=14426 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588824693.464:6700): avc: denied { audit_write } for pid=27764 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1588824693.375:6685): avc: denied { nlmsg_relay } for pid=27764 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1588824693.464:6700): avc: denied { nlmsg_relay } for pid=27764 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1588824693.375:6685): avc: denied { audit_write } for pid=27764 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1588824693.337:6680): avc: denied { setrlimit } for pid=27764 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', u'type=AVC msg=audit(1588824693.374:6681): avc: denied { execute_no_trans } for pid=27767 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588824693.374:6681): avc: denied { map } for pid=27767 comm="unix_chkpwd" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588824693.464:6702): avc: denied { setrlimit } for pid=27778 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', u'type=AVC msg=audit(1588824693.464:6697): avc: denied { open } for pid=27764 comm="sudo" path="/run/utmp" dev="tmpfs" ino=14426 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588824693.375:6684): avc: denied { create } for pid=27764 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1588824693.331:6679): avc: denied { execute_no_trans } for pid=27764 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=USER_AVC msg=audit(1588824693.463:6696): pid=2429 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_return dest=:1.1372 spid=2551 tpid=27764 scontext=system_u:system_r:systemd_logind_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', u'type=AVC msg=audit(1588824693.331:6679): avc: denied { map } for pid=27764 comm="sudo" path="/usr/bin/sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588824693.375:6682): avc: denied { open } for pid=27767 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=3020 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588824693.331:6679): avc: denied { read open } for pid=27764 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588824693.375:6682): avc: denied { read } for pid=27767 comm="unix_chkpwd" name="shadow" dev="sda1" ino=3020 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588824693.374:6681): avc: denied { read open } for pid=27767 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588824693.337:6680): avc: denied { sys_resource } for pid=27764 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1588824693.464:6698): avc: denied { lock } for pid=27764 comm="sudo" path="/run/utmp" dev="tmpfs" ino=14426 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1']

5020972

FAIL

octopus

octopus

py2

smithi

centos 8.1

smithi005 smithi042 smithi137 smithi204

ceph-ansible/smoke/basic/{0-clusters/4-node.yaml 1-distros/centos_latest.yaml 2-ceph/ceph_ansible.yaml 3-config/bluestore_with_dmcrypt.yaml 4-tasks/ceph-admin-commands.yaml}

SELinux denials found on ubuntu@smithi042.front.sepia.ceph.com: [u'type=AVC msg=audit(1588974769.864:6791): avc: denied { execute } for pid=27229 comm="admin_socket" name="sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588974769.920:6793): avc: denied { map } for pid=27232 comm="unix_chkpwd" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588974769.921:6794): avc: denied { read } for pid=27232 comm="unix_chkpwd" name="shadow" dev="sda1" ino=3019 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588974769.920:6793): avc: denied { execute } for pid=27232 comm="sudo" name="unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588974770.022:6809): avc: denied { open } for pid=27229 comm="sudo" path="/run/utmp" dev="tmpfs" ino=14381 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588974769.864:6791): avc: denied { map } for pid=27229 comm="sudo" path="/usr/bin/sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588974769.921:6797): avc: denied { nlmsg_relay } for pid=27229 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1588974769.921:6797): avc: denied { audit_write } for pid=27229 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=USER_AVC msg=audit(1588974769.923:6801): pid=2397 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.login1.Manager member=CreateSession dest=org.freedesktop.login1 spid=27229 tpid=2546 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:systemd_logind_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', u'type=AVC msg=audit(1588974770.022:6810): avc: denied { lock } for pid=27229 comm="sudo" path="/run/utmp" dev="tmpfs" ino=14381 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588974769.920:6793): avc: denied { execute_no_trans } for pid=27232 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588974769.871:6792): avc: denied { setrlimit } for pid=27229 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', u'type=AVC msg=audit(1588974769.864:6791): avc: denied { execute_no_trans } for pid=27229 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588974770.022:6812): avc: denied { audit_write } for pid=27229 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1588974769.921:6796): avc: denied { create } for pid=27229 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1588974769.871:6792): avc: denied { sys_resource } for pid=27229 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1588974769.864:6791): avc: denied { read open } for pid=27229 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588974770.022:6814): avc: denied { sys_resource } for pid=27245 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1588974769.920:6793): avc: denied { read open } for pid=27232 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=USER_AVC msg=audit(1588974770.021:6808): pid=2397 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_return dest=:1.1397 spid=2546 tpid=27229 scontext=system_u:system_r:systemd_logind_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', u'type=AVC msg=audit(1588974769.921:6795): avc: denied { getattr } for pid=27232 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=3019 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588974770.022:6812): avc: denied { nlmsg_relay } for pid=27229 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1588974770.022:6814): avc: denied { setrlimit } for pid=27245 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', u'type=AVC msg=audit(1588974769.921:6794): avc: denied { open } for pid=27232 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=3019 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588974770.022:6811): avc: denied { create } for pid=27229 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1588974770.022:6809): avc: denied { read } for pid=27229 comm="sudo" name="utmp" dev="tmpfs" ino=14381 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1']

5020981

FAIL

octopus

octopus

py2

smithi

centos 8.1

smithi078 smithi081 smithi152 smithi161

ceph-ansible/smoke/basic/{0-clusters/4-node.yaml 1-distros/centos_latest.yaml 2-ceph/ceph_ansible.yaml 3-config/dmcrypt_on.yaml 4-tasks/rest.yaml}

SELinux denials found on ubuntu@smithi081.front.sepia.ceph.com: [u'type=AVC msg=audit(1588976002.434:6806): avc: denied { read } for pid=27201 comm="sudo" name="utmp" dev="tmpfs" ino=15146 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588976002.347:6790): avc: denied { read open } for pid=27204 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588976002.348:6794): avc: denied { audit_write } for pid=27201 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1588976002.304:6788): avc: denied { execute_no_trans } for pid=27201 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588976002.348:6791): avc: denied { open } for pid=27204 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=3010 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588976002.435:6809): avc: denied { nlmsg_relay } for pid=27201 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1588976002.348:6792): avc: denied { getattr } for pid=27204 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=3010 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588976002.348:6791): avc: denied { read } for pid=27204 comm="unix_chkpwd" name="shadow" dev="sda1" ino=3010 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588976002.304:6788): avc: denied { read open } for pid=27201 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588976002.304:6788): avc: denied { execute } for pid=27201 comm="admin_socket" name="sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588976002.434:6808): avc: denied { create } for pid=27201 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1588976002.304:6788): avc: denied { map } for pid=27201 comm="sudo" path="/usr/bin/sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=USER_AVC msg=audit(1588976002.434:6805): pid=2431 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_return dest=:1.1398 spid=2560 tpid=27201 scontext=system_u:system_r:systemd_logind_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', u'type=AVC msg=audit(1588976002.347:6790): avc: denied { execute_no_trans } for pid=27204 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588976002.435:6811): avc: denied { setrlimit } for pid=27217 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', u'type=AVC msg=audit(1588976002.435:6811): avc: denied { sys_resource } for pid=27217 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1588976002.348:6794): avc: denied { nlmsg_relay } for pid=27201 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1588976002.310:6789): avc: denied { sys_resource } for pid=27201 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1588976002.348:6793): avc: denied { create } for pid=27201 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=USER_AVC msg=audit(1588976002.350:6798): pid=2431 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.login1.Manager member=CreateSession dest=org.freedesktop.login1 spid=27201 tpid=2560 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:systemd_logind_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', u'type=AVC msg=audit(1588976002.434:6806): avc: denied { open } for pid=27201 comm="sudo" path="/run/utmp" dev="tmpfs" ino=15146 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588976002.347:6790): avc: denied { execute } for pid=27204 comm="sudo" name="unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588976002.310:6789): avc: denied { setrlimit } for pid=27201 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', u'type=AVC msg=audit(1588976002.347:6790): avc: denied { map } for pid=27204 comm="unix_chkpwd" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588976002.434:6807): avc: denied { lock } for pid=27201 comm="sudo" path="/run/utmp" dev="tmpfs" ino=15146 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588976002.435:6809): avc: denied { audit_write } for pid=27201 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1']

5020989

FAIL

octopus

octopus

py2

smithi

centos 8.1

smithi003 smithi148 smithi176 smithi191

ceph-ansible/smoke/basic/{0-clusters/4-node.yaml 1-distros/centos_latest.yaml 2-ceph/ceph_ansible.yaml 3-config/bluestore_with_dmcrypt.yaml 4-tasks/rbd_import_export.yaml}

SELinux denials found on ubuntu@smithi176.front.sepia.ceph.com: [u'type=AVC msg=audit(1588976762.977:6683): avc: denied { sys_resource } for pid=26865 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1588976763.014:6684): avc: denied { execute } for pid=26868 comm="sudo" name="unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=USER_AVC msg=audit(1588976763.017:6692): pid=2420 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.login1.Manager member=CreateSession dest=org.freedesktop.login1 spid=26865 tpid=2556 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:systemd_logind_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', u'type=AVC msg=audit(1588976762.977:6683): avc: denied { setrlimit } for pid=26865 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', u'type=AVC msg=audit(1588976763.014:6684): avc: denied { read open } for pid=26868 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588976763.015:6685): avc: denied { open } for pid=26868 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=3019 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588976762.971:6682): avc: denied { execute_no_trans } for pid=26865 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=USER_AVC msg=audit(1588976763.098:6699): pid=2420 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_return dest=:1.1375 spid=2556 tpid=26865 scontext=system_u:system_r:systemd_logind_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', u'type=AVC msg=audit(1588976763.015:6687): avc: denied { create } for pid=26865 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1588976763.099:6705): avc: denied { setrlimit } for pid=26881 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', u'type=AVC msg=audit(1588976763.014:6684): avc: denied { execute_no_trans } for pid=26868 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588976763.015:6688): avc: denied { audit_write } for pid=26865 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1588976763.099:6701): avc: denied { lock } for pid=26865 comm="sudo" path="/run/utmp" dev="tmpfs" ino=4159 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588976763.099:6700): avc: denied { read } for pid=26865 comm="sudo" name="utmp" dev="tmpfs" ino=4159 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588976763.099:6705): avc: denied { sys_resource } for pid=26881 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1588976762.971:6682): avc: denied { execute } for pid=26865 comm="admin_socket" name="sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588976762.971:6682): avc: denied { read open } for pid=26865 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588976763.099:6703): avc: denied { audit_write } for pid=26865 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1588976763.099:6702): avc: denied { create } for pid=26865 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1588976763.015:6688): avc: denied { nlmsg_relay } for pid=26865 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1588976763.015:6686): avc: denied { getattr } for pid=26868 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=3019 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588976763.099:6700): avc: denied { open } for pid=26865 comm="sudo" path="/run/utmp" dev="tmpfs" ino=4159 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588976763.014:6684): avc: denied { map } for pid=26868 comm="unix_chkpwd" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588976762.971:6682): avc: denied { map } for pid=26865 comm="sudo" path="/usr/bin/sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588976763.099:6703): avc: denied { nlmsg_relay } for pid=26865 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1588976763.015:6685): avc: denied { read } for pid=26868 comm="unix_chkpwd" name="shadow" dev="sda1" ino=3019 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1']

5020996

FAIL

octopus

octopus

py2

smithi

centos 8.1

smithi105 smithi156 smithi168 smithi188

ceph-ansible/smoke/basic/{0-clusters/4-node.yaml 1-distros/centos_latest.yaml 2-ceph/ceph_ansible.yaml 3-config/dmcrypt_off.yaml 4-tasks/ceph-admin-commands.yaml}

SELinux denials found on ubuntu@smithi156.front.sepia.ceph.com: [u'type=AVC msg=audit(1588975843.875:6407): avc: denied { create } for pid=26000 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1588975843.790:6391): avc: denied { getattr } for pid=26003 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=3009 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588975843.790:6390): avc: denied { read } for pid=26003 comm="unix_chkpwd" name="shadow" dev="sda1" ino=3009 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588975843.875:6405): avc: denied { read } for pid=26000 comm="sudo" name="utmp" dev="tmpfs" ino=15382 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588975843.753:6388): avc: denied { sys_resource } for pid=26000 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1588975843.791:6393): avc: denied { nlmsg_relay } for pid=26000 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1588975843.753:6388): avc: denied { setrlimit } for pid=26000 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', u'type=AVC msg=audit(1588975843.747:6387): avc: denied { map } for pid=26000 comm="sudo" path="/usr/bin/sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588975843.747:6387): avc: denied { execute } for pid=26000 comm="admin_socket" name="sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=USER_AVC msg=audit(1588975843.792:6397): pid=2423 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.login1.Manager member=CreateSession dest=org.freedesktop.login1 spid=26000 tpid=2563 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:systemd_logind_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', u'type=AVC msg=audit(1588975843.791:6393): avc: denied { audit_write } for pid=26000 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1588975843.876:6410): avc: denied { sys_resource } for pid=26015 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1588975843.747:6387): avc: denied { read open } for pid=26000 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588975843.876:6410): avc: denied { setrlimit } for pid=26015 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', u'type=AVC msg=audit(1588975843.747:6387): avc: denied { execute_no_trans } for pid=26000 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588975843.789:6389): avc: denied { read open } for pid=26003 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588975843.875:6406): avc: denied { lock } for pid=26000 comm="sudo" path="/run/utmp" dev="tmpfs" ino=15382 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588975843.875:6408): avc: denied { audit_write } for pid=26000 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=USER_AVC msg=audit(1588975843.874:6404): pid=2423 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_return dest=:1.1331 spid=2563 tpid=26000 scontext=system_u:system_r:systemd_logind_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', u'type=AVC msg=audit(1588975843.790:6390): avc: denied { open } for pid=26003 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=3009 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588975843.789:6389): avc: denied { map } for pid=26003 comm="unix_chkpwd" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588975843.790:6392): avc: denied { create } for pid=26000 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1588975843.875:6408): avc: denied { nlmsg_relay } for pid=26000 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1588975843.789:6389): avc: denied { execute } for pid=26003 comm="sudo" name="unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588975843.875:6405): avc: denied { open } for pid=26000 comm="sudo" path="/run/utmp" dev="tmpfs" ino=15382 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588975843.789:6389): avc: denied { execute_no_trans } for pid=26003 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1']

5021004

FAIL

octopus

octopus

py2

smithi

centos 8.1

smithi044 smithi153 smithi156 smithi168

ceph-ansible/smoke/basic/{0-clusters/4-node.yaml 1-distros/centos_latest.yaml 2-ceph/ceph_ansible.yaml 3-config/bluestore_with_dmcrypt.yaml 4-tasks/rest.yaml}

SELinux denials found on ubuntu@smithi153.front.sepia.ceph.com: [u'type=AVC msg=audit(1588977122.650:6411): avc: denied { setrlimit } for pid=26006 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', u'type=AVC msg=audit(1588977122.527:6389): avc: denied { setrlimit } for pid=25991 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', u'type=AVC msg=audit(1588977122.649:6407): avc: denied { lock } for pid=25991 comm="sudo" path="/run/utmp" dev="tmpfs" ino=12346 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588977122.565:6393): avc: denied { create } for pid=25991 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1588977122.650:6409): avc: denied { audit_write } for pid=25991 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1588977122.564:6390): avc: denied { read open } for pid=25994 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588977122.521:6388): avc: denied { read open } for pid=25991 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588977122.564:6390): avc: denied { map } for pid=25994 comm="unix_chkpwd" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=USER_AVC msg=audit(1588977122.649:6405): pid=2411 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_return dest=:1.1329 spid=2558 tpid=25991 scontext=system_u:system_r:systemd_logind_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', u'type=AVC msg=audit(1588977122.650:6409): avc: denied { nlmsg_relay } for pid=25991 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=USER_AVC msg=audit(1588977122.566:6398): pid=2411 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.login1.Manager member=CreateSession dest=org.freedesktop.login1 spid=25991 tpid=2558 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:systemd_logind_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', u'type=AVC msg=audit(1588977122.564:6390): avc: denied { execute } for pid=25994 comm="sudo" name="unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588977122.564:6390): avc: denied { execute_no_trans } for pid=25994 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588977122.649:6406): avc: denied { open } for pid=25991 comm="sudo" path="/run/utmp" dev="tmpfs" ino=12346 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588977122.565:6394): avc: denied { audit_write } for pid=25991 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1588977122.650:6408): avc: denied { create } for pid=25991 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1588977122.565:6391): avc: denied { read } for pid=25994 comm="unix_chkpwd" name="shadow" dev="sda1" ino=3008 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588977122.565:6391): avc: denied { open } for pid=25994 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=3008 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588977122.521:6388): avc: denied { execute } for pid=25991 comm="admin_socket" name="sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588977122.650:6411): avc: denied { sys_resource } for pid=26006 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1588977122.527:6389): avc: denied { sys_resource } for pid=25991 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1588977122.521:6388): avc: denied { execute_no_trans } for pid=25991 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588977122.565:6392): avc: denied { getattr } for pid=25994 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=3008 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588977122.649:6406): avc: denied { read } for pid=25991 comm="sudo" name="utmp" dev="tmpfs" ino=12346 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588977122.521:6388): avc: denied { map } for pid=25991 comm="sudo" path="/usr/bin/sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588977122.565:6394): avc: denied { nlmsg_relay } for pid=25991 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1']

5021012

FAIL

octopus

octopus

py2

smithi

centos 8.1

smithi042 smithi051 smithi137 smithi184

ceph-ansible/smoke/basic/{0-clusters/4-node.yaml 1-distros/centos_latest.yaml 2-ceph/ceph_ansible.yaml 3-config/dmcrypt_off.yaml 4-tasks/rbd_import_export.yaml}

SELinux denials found on ubuntu@smithi051.front.sepia.ceph.com: [u'type=AVC msg=audit(1588984502.283:6501): avc: denied { open } for pid=26417 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=3010 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=USER_AVC msg=audit(1588984502.380:6515): pid=2400 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_return dest=:1.1352 spid=2546 tpid=26414 scontext=system_u:system_r:systemd_logind_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', u'type=AVC msg=audit(1588984502.227:6498): avc: denied { execute_no_trans } for pid=26414 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588984502.380:6516): avc: denied { read } for pid=26414 comm="sudo" name="utmp" dev="tmpfs" ino=16437 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588984502.234:6499): avc: denied { setrlimit } for pid=26414 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', u'type=AVC msg=audit(1588984502.234:6499): avc: denied { sys_resource } for pid=26414 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1588984502.381:6519): avc: denied { nlmsg_relay } for pid=26414 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1588984502.283:6504): avc: denied { audit_write } for pid=26414 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1588984502.380:6517): avc: denied { lock } for pid=26414 comm="sudo" path="/run/utmp" dev="tmpfs" ino=16437 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588984502.381:6519): avc: denied { audit_write } for pid=26414 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1588984502.227:6498): avc: denied { execute } for pid=26414 comm="admin_socket" name="sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588984502.282:6500): avc: denied { execute_no_trans } for pid=26417 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588984502.381:6521): avc: denied { sys_resource } for pid=26432 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1588984502.381:6521): avc: denied { setrlimit } for pid=26432 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', u'type=AVC msg=audit(1588984502.283:6504): avc: denied { nlmsg_relay } for pid=26414 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1588984502.380:6516): avc: denied { open } for pid=26414 comm="sudo" path="/run/utmp" dev="tmpfs" ino=16437 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=USER_AVC msg=audit(1588984502.285:6508): pid=2400 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.login1.Manager member=CreateSession dest=org.freedesktop.login1 spid=26414 tpid=2546 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:systemd_logind_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', u'type=AVC msg=audit(1588984502.282:6500): avc: denied { map } for pid=26417 comm="unix_chkpwd" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588984502.381:6518): avc: denied { create } for pid=26414 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1588984502.282:6500): avc: denied { execute } for pid=26417 comm="sudo" name="unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588984502.282:6500): avc: denied { read open } for pid=26417 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588984502.283:6502): avc: denied { getattr } for pid=26417 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=3010 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588984502.227:6498): avc: denied { read open } for pid=26414 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588984502.283:6503): avc: denied { create } for pid=26414 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1588984502.283:6501): avc: denied { read } for pid=26417 comm="unix_chkpwd" name="shadow" dev="sda1" ino=3010 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588984502.227:6498): avc: denied { map } for pid=26414 comm="sudo" path="/usr/bin/sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1']

5021020

FAIL

octopus

octopus

py2

smithi

centos 8.1

smithi058 smithi103 smithi104 smithi169

ceph-ansible/smoke/basic/{0-clusters/4-node.yaml 1-distros/centos_latest.yaml 2-ceph/ceph_ansible.yaml 3-config/dmcrypt_on.yaml 4-tasks/ceph-admin-commands.yaml}

SELinux denials found on ubuntu@smithi103.front.sepia.ceph.com: [u'type=AVC msg=audit(1588978806.549:6313): avc: denied { execute } for pid=25727 comm="sudo" name="unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588978806.549:6313): avc: denied { map } for pid=25727 comm="unix_chkpwd" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=USER_AVC msg=audit(1588978806.553:6321): pid=2404 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.login1.Manager member=CreateSession dest=org.freedesktop.login1 spid=25721 tpid=2534 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:systemd_logind_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', u'type=AVC msg=audit(1588978806.641:6334): avc: denied { sys_resource } for pid=25739 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1588978806.640:6329): avc: denied { read } for pid=25721 comm="sudo" name="utmp" dev="tmpfs" ino=11982 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588978806.551:6314): avc: denied { read } for pid=25727 comm="unix_chkpwd" name="shadow" dev="sda1" ino=3010 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588978806.640:6329): avc: denied { open } for pid=25721 comm="sudo" path="/run/utmp" dev="tmpfs" ino=11982 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588978806.549:6313): avc: denied { read open } for pid=25727 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588978806.551:6316): avc: denied { create } for pid=25721 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1588978806.641:6331): avc: denied { create } for pid=25721 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1588978806.641:6332): avc: denied { audit_write } for pid=25721 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1588978806.549:6313): avc: denied { execute_no_trans } for pid=25727 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588978806.512:6310): avc: denied { setrlimit } for pid=25721 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', u'type=AVC msg=audit(1588978806.551:6317): avc: denied { nlmsg_relay } for pid=25721 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1588978806.505:6309): avc: denied { execute_no_trans } for pid=25721 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588978806.551:6314): avc: denied { open } for pid=25727 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=3010 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588978806.505:6309): avc: denied { map } for pid=25721 comm="sudo" path="/usr/bin/sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=USER_AVC msg=audit(1588978806.640:6328): pid=2404 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_return dest=:1.1317 spid=2534 tpid=25721 scontext=system_u:system_r:systemd_logind_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', u'type=AVC msg=audit(1588978806.641:6332): avc: denied { nlmsg_relay } for pid=25721 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1588978806.505:6309): avc: denied { read open } for pid=25721 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588978806.641:6334): avc: denied { setrlimit } for pid=25739 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', u'type=AVC msg=audit(1588978806.551:6315): avc: denied { getattr } for pid=25727 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=3010 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588978806.505:6309): avc: denied { execute } for pid=25721 comm="admin_socket" name="sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588978806.551:6317): avc: denied { audit_write } for pid=25721 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1588978806.512:6310): avc: denied { sys_resource } for pid=25721 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1588978806.640:6330): avc: denied { lock } for pid=25721 comm="sudo" path="/run/utmp" dev="tmpfs" ino=11982 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1']

5021028

FAIL

octopus

octopus

py2

smithi

centos 8.1

smithi042 smithi047 smithi129 smithi137

ceph-ansible/smoke/basic/{0-clusters/4-node.yaml 1-distros/centos_latest.yaml 2-ceph/ceph_ansible.yaml 3-config/dmcrypt_off.yaml 4-tasks/rest.yaml}

SELinux denials found on ubuntu@smithi137.front.sepia.ceph.com: [u'type=AVC msg=audit(1588987557.511:6624): avc: denied { execute } for pid=26691 comm="sudo" name="unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588987557.474:6623): avc: denied { sys_resource } for pid=26688 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1588987557.512:6625): avc: denied { read } for pid=26691 comm="unix_chkpwd" name="shadow" dev="sda1" ino=3008 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588987557.511:6624): avc: denied { map } for pid=26691 comm="unix_chkpwd" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588987557.467:6622): avc: denied { read open } for pid=26688 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=USER_AVC msg=audit(1588987557.514:6632): pid=2419 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.login1.Manager member=CreateSession dest=org.freedesktop.login1 spid=26688 tpid=2542 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:systemd_logind_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', u'type=AVC msg=audit(1588987557.597:6640): avc: denied { read } for pid=26688 comm="sudo" name="utmp" dev="tmpfs" ino=4886 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588987557.467:6622): avc: denied { execute_no_trans } for pid=26688 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588987557.597:6643): avc: denied { audit_write } for pid=26688 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1588987557.512:6626): avc: denied { getattr } for pid=26691 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=3008 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588987557.474:6623): avc: denied { setrlimit } for pid=26688 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', u'type=AVC msg=audit(1588987557.511:6624): avc: denied { execute_no_trans } for pid=26691 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588987557.597:6643): avc: denied { nlmsg_relay } for pid=26688 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1588987557.467:6622): avc: denied { map } for pid=26688 comm="sudo" path="/usr/bin/sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588987557.513:6628): avc: denied { audit_write } for pid=26688 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1588987557.598:6645): avc: denied { setrlimit } for pid=26705 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', u'type=AVC msg=audit(1588987557.513:6628): avc: denied { nlmsg_relay } for pid=26688 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1588987557.467:6622): avc: denied { execute } for pid=26688 comm="admin_socket" name="sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588987557.597:6641): avc: denied { lock } for pid=26688 comm="sudo" path="/run/utmp" dev="tmpfs" ino=4886 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588987557.512:6625): avc: denied { open } for pid=26691 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=3008 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588987557.598:6645): avc: denied { sys_resource } for pid=26705 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1588987557.597:6640): avc: denied { open } for pid=26688 comm="sudo" path="/run/utmp" dev="tmpfs" ino=4886 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588987557.512:6627): avc: denied { create } for pid=26688 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=USER_AVC msg=audit(1588987557.596:6639): pid=2419 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_return dest=:1.1363 spid=2542 tpid=26688 scontext=system_u:system_r:systemd_logind_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', u'type=AVC msg=audit(1588987557.597:6642): avc: denied { create } for pid=26688 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1588987557.511:6624): avc: denied { read open } for pid=26691 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1']

5021036

FAIL

octopus

octopus

py2

smithi

centos 8.1

smithi019 smithi080 smithi138 smithi153

ceph-ansible/smoke/basic/{0-clusters/4-node.yaml 1-distros/centos_latest.yaml 2-ceph/ceph_ansible.yaml 3-config/dmcrypt_on.yaml 4-tasks/rbd_import_export.yaml}

SELinux denials found on ubuntu@smithi019.front.sepia.ceph.com: [u'type=AVC msg=audit(1588978257.157:6808): avc: denied { read } for pid=27211 comm="sudo" name="utmp" dev="tmpfs" ino=15722 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588978257.056:6792): avc: denied { open } for pid=27214 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=3018 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588978257.157:6811): avc: denied { nlmsg_relay } for pid=27211 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1588978257.158:6813): avc: denied { sys_resource } for pid=27226 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1588978257.056:6792): avc: denied { read } for pid=27214 comm="unix_chkpwd" name="shadow" dev="sda1" ino=3018 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588978257.056:6795): avc: denied { audit_write } for pid=27211 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=USER_AVC msg=audit(1588978257.157:6807): pid=2417 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_return dest=:1.1397 spid=2549 tpid=27211 scontext=system_u:system_r:systemd_logind_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', u'type=AVC msg=audit(1588978257.157:6809): avc: denied { lock } for pid=27211 comm="sudo" path="/run/utmp" dev="tmpfs" ino=15722 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588978257.000:6789): avc: denied { read open } for pid=27211 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588978257.056:6798): avc: denied { setrlimit } for pid=27211 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', u'type=AVC msg=audit(1588978257.000:6789): avc: denied { execute } for pid=27211 comm="admin_socket" name="sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588978257.056:6793): avc: denied { getattr } for pid=27214 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=3018 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588978257.056:6794): avc: denied { create } for pid=27211 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1588978257.006:6790): avc: denied { setrlimit } for pid=27211 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', u'type=AVC msg=audit(1588978257.157:6811): avc: denied { audit_write } for pid=27211 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1588978257.055:6791): avc: denied { read open } for pid=27214 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588978257.158:6813): avc: denied { setrlimit } for pid=27226 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', u'type=AVC msg=audit(1588978257.000:6789): avc: denied { execute_no_trans } for pid=27211 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588978257.157:6808): avc: denied { open } for pid=27211 comm="sudo" path="/run/utmp" dev="tmpfs" ino=15722 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=USER_AVC msg=audit(1588978257.058:6800): pid=2417 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.login1.Manager member=CreateSession dest=org.freedesktop.login1 spid=27211 tpid=2549 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:systemd_logind_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', u'type=AVC msg=audit(1588978257.055:6791): avc: denied { execute } for pid=27214 comm="sudo" name="unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588978257.055:6791): avc: denied { map } for pid=27214 comm="unix_chkpwd" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588978257.055:6791): avc: denied { execute_no_trans } for pid=27214 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=7376 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588978257.157:6810): avc: denied { create } for pid=27211 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1588978257.000:6789): avc: denied { map } for pid=27211 comm="sudo" path="/usr/bin/sudo" dev="sda1" ino=9140 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1588978257.056:6795): avc: denied { nlmsg_relay } for pid=27211 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1588978257.006:6790): avc: denied { sys_resource } for pid=27211 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1']