teuthology-2020-05-29_05:15:02-ceph-ansible-octopus-distro-basic-smithi

5101805

FAIL

octopus

octopus

py2

smithi

centos 8.1

smithi031 smithi049 smithi193

ceph-ansible/smoke/basic/{0-clusters/3-node 1-distros/centos_latest 2-ceph/ceph_ansible 3-config/bluestore_with_dmcrypt 4-tasks/ceph-admin-commands}

SELinux denials found on ubuntu@smithi049.front.sepia.ceph.com: [u'type=AVC msg=audit(1590870450.121:6312): avc: denied { getattr } for pid=29659 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=1227 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590870450.221:6331): avc: denied { sys_resource } for pid=29672 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1590870450.065:6308): avc: denied { execute_no_trans } for pid=29656 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590870450.221:6331): avc: denied { setrlimit } for pid=29672 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', u'type=AVC msg=audit(1590870450.065:6308): avc: denied { map } for pid=29656 comm="sudo" path="/usr/bin/sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590870450.121:6311): avc: denied { read } for pid=29659 comm="unix_chkpwd" name="shadow" dev="sda1" ino=1227 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590870450.121:6314): avc: denied { nlmsg_relay } for pid=29656 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1590870450.121:6311): avc: denied { open } for pid=29659 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=1227 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590870450.221:6329): avc: denied { nlmsg_relay } for pid=29656 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1590870450.121:6314): avc: denied { audit_write } for pid=29656 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1590870450.072:6309): avc: denied { setrlimit } for pid=29656 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', u'type=AVC msg=audit(1590870450.120:6310): avc: denied { read open } for pid=29659 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590870450.220:6326): avc: denied { read } for pid=29656 comm="sudo" name="utmp" dev="tmpfs" ino=13769 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590870450.221:6329): avc: denied { audit_write } for pid=29656 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1590870450.065:6308): avc: denied { execute } for pid=29656 comm="admin_socket" name="sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590870450.072:6309): avc: denied { sys_resource } for pid=29656 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=USER_AVC msg=audit(1590870450.123:6318): pid=2411 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.login1.Manager member=CreateSession dest=org.freedesktop.login1 spid=29656 tpid=2548 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:systemd_logind_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', u'type=AVC msg=audit(1590870450.120:6310): avc: denied { execute_no_trans } for pid=29659 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590870450.121:6313): avc: denied { create } for pid=29656 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1590870450.220:6326): avc: denied { open } for pid=29656 comm="sudo" path="/run/utmp" dev="tmpfs" ino=13769 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590870450.065:6308): avc: denied { read open } for pid=29656 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=USER_AVC msg=audit(1590870450.220:6325): pid=2411 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_return dest=:1.1359 spid=2548 tpid=29656 scontext=system_u:system_r:systemd_logind_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', u'type=AVC msg=audit(1590870450.220:6327): avc: denied { lock } for pid=29656 comm="sudo" path="/run/utmp" dev="tmpfs" ino=13769 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590870450.120:6310): avc: denied { execute } for pid=29659 comm="sudo" name="unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590870450.120:6310): avc: denied { map } for pid=29659 comm="unix_chkpwd" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590870450.221:6328): avc: denied { create } for pid=29656 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1']

5101809

FAIL

octopus

octopus

py2

smithi

centos 8.1

smithi037 smithi038 smithi039

ceph-ansible/smoke/basic/{0-clusters/3-node 1-distros/centos_latest 2-ceph/ceph_ansible 3-config/dmcrypt_on 4-tasks/rest}

SELinux denials found on ubuntu@smithi037.front.sepia.ceph.com: [u'type=AVC msg=audit(1590870673.538:6416): avc: denied { read } for pid=30072 comm="unix_chkpwd" name="shadow" dev="sda1" ino=1227 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590870673.538:6416): avc: denied { open } for pid=30072 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=1227 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590870673.538:6417): avc: denied { getattr } for pid=30072 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=1227 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590870673.638:6432): avc: denied { lock } for pid=30069 comm="sudo" path="/run/utmp" dev="tmpfs" ino=15463 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590870673.639:6436): avc: denied { setrlimit } for pid=30085 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', u'type=AVC msg=audit(1590870673.538:6418): avc: denied { create } for pid=30069 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1590870673.482:6413): avc: denied { read open } for pid=30069 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590870673.638:6434): avc: denied { nlmsg_relay } for pid=30069 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1590870673.488:6414): avc: denied { sys_resource } for pid=30069 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1590870673.537:6415): avc: denied { read open } for pid=30072 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590870673.488:6414): avc: denied { setrlimit } for pid=30069 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', u'type=AVC msg=audit(1590870673.639:6436): avc: denied { sys_resource } for pid=30085 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1590870673.537:6415): avc: denied { map } for pid=30072 comm="unix_chkpwd" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590870673.538:6419): avc: denied { audit_write } for pid=30069 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1590870673.638:6431): avc: denied { read } for pid=30069 comm="sudo" name="utmp" dev="tmpfs" ino=15463 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590870673.482:6413): avc: denied { map } for pid=30069 comm="sudo" path="/usr/bin/sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590870673.482:6413): avc: denied { execute } for pid=30069 comm="admin_socket" name="sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590870673.537:6415): avc: denied { execute } for pid=30072 comm="sudo" name="unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=USER_AVC msg=audit(1590870673.638:6430): pid=2423 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_return dest=:1.1381 spid=2551 tpid=30069 scontext=system_u:system_r:systemd_logind_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', u'type=AVC msg=audit(1590870673.638:6433): avc: denied { create } for pid=30069 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1590870673.538:6419): avc: denied { nlmsg_relay } for pid=30069 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1590870673.638:6431): avc: denied { open } for pid=30069 comm="sudo" path="/run/utmp" dev="tmpfs" ino=15463 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=USER_AVC msg=audit(1590870673.540:6423): pid=2423 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.login1.Manager member=CreateSession dest=org.freedesktop.login1 spid=30069 tpid=2551 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:systemd_logind_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', u'type=AVC msg=audit(1590870673.537:6415): avc: denied { execute_no_trans } for pid=30072 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590870673.638:6434): avc: denied { audit_write } for pid=30069 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1590870673.482:6413): avc: denied { execute_no_trans } for pid=30069 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1']

5101813

FAIL

octopus

octopus

py2

smithi

centos 8.1

smithi114 smithi163 smithi203

ceph-ansible/smoke/basic/{0-clusters/3-node 1-distros/centos_latest 2-ceph/ceph_ansible 3-config/bluestore_with_dmcrypt 4-tasks/rbd_import_export}

SELinux denials found on ubuntu@smithi114.front.sepia.ceph.com: [u'type=AVC msg=audit(1590870784.146:6411): avc: denied { execute } for pid=30030 comm="sudo" name="unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590870784.147:6412): avc: denied { open } for pid=30030 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=1226 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590870784.234:6428): avc: denied { lock } for pid=30027 comm="sudo" path="/run/utmp" dev="tmpfs" ino=16440 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590870784.234:6430): avc: denied { audit_write } for pid=30027 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1590870784.147:6413): avc: denied { getattr } for pid=30030 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=1226 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590870784.235:6432): avc: denied { sys_resource } for pid=30042 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=USER_AVC msg=audit(1590870784.149:6419): pid=2438 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.login1.Manager member=CreateSession dest=org.freedesktop.login1 spid=30027 tpid=2572 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:systemd_logind_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', u'type=AVC msg=audit(1590870784.147:6414): avc: denied { create } for pid=30027 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1590870784.102:6409): avc: denied { read open } for pid=30027 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590870784.147:6415): avc: denied { audit_write } for pid=30027 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1590870784.147:6412): avc: denied { read } for pid=30030 comm="unix_chkpwd" name="shadow" dev="sda1" ino=1226 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590870784.146:6411): avc: denied { execute_no_trans } for pid=30030 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590870784.234:6430): avc: denied { nlmsg_relay } for pid=30027 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1590870784.146:6411): avc: denied { map } for pid=30030 comm="unix_chkpwd" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590870784.147:6415): avc: denied { nlmsg_relay } for pid=30027 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1590870784.102:6409): avc: denied { execute } for pid=30027 comm="admin_socket" name="sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590870784.235:6432): avc: denied { setrlimit } for pid=30042 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', u'type=USER_AVC msg=audit(1590870784.234:6426): pid=2438 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_return dest=:1.1381 spid=2572 tpid=30027 scontext=system_u:system_r:systemd_logind_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', u'type=AVC msg=audit(1590870784.108:6410): avc: denied { setrlimit } for pid=30027 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', u'type=AVC msg=audit(1590870784.102:6409): avc: denied { map } for pid=30027 comm="sudo" path="/usr/bin/sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590870784.234:6429): avc: denied { create } for pid=30027 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1590870784.146:6411): avc: denied { read open } for pid=30030 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590870784.234:6427): avc: denied { open } for pid=30027 comm="sudo" path="/run/utmp" dev="tmpfs" ino=16440 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590870784.102:6409): avc: denied { execute_no_trans } for pid=30027 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590870784.234:6427): avc: denied { read } for pid=30027 comm="sudo" name="utmp" dev="tmpfs" ino=16440 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590870784.108:6410): avc: denied { sys_resource } for pid=30027 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1']

5101817

FAIL

octopus

octopus

py2

smithi

centos 8.1

smithi033 smithi063 smithi086

ceph-ansible/smoke/basic/{0-clusters/3-node 1-distros/centos_latest 2-ceph/ceph_ansible 3-config/dmcrypt_off 4-tasks/ceph-admin-commands}

SELinux denials found on ubuntu@smithi086.front.sepia.ceph.com: [u'type=AVC msg=audit(1590870511.732:6517): avc: denied { execute_no_trans } for pid=27179 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590870511.820:6533): avc: denied { open } for pid=27176 comm="sudo" path="/run/utmp" dev="tmpfs" ino=14494 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590870511.734:6521): avc: denied { nlmsg_relay } for pid=27176 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1590870511.732:6517): avc: denied { execute } for pid=27179 comm="sudo" name="unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590870511.821:6538): avc: denied { sys_resource } for pid=27191 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1590870511.695:6516): avc: denied { sys_resource } for pid=27176 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1590870511.734:6521): avc: denied { audit_write } for pid=27176 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1590870511.732:6517): avc: denied { map } for pid=27179 comm="unix_chkpwd" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590870511.820:6536): avc: denied { nlmsg_relay } for pid=27176 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=USER_AVC msg=audit(1590870511.736:6525): pid=2424 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.login1.Manager member=CreateSession dest=org.freedesktop.login1 spid=27176 tpid=2554 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:systemd_logind_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', u'type=AVC msg=audit(1590870511.733:6518): avc: denied { read } for pid=27179 comm="unix_chkpwd" name="shadow" dev="sda1" ino=1225 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590870511.732:6517): avc: denied { read open } for pid=27179 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590870511.689:6515): avc: denied { read open } for pid=27176 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590870511.689:6515): avc: denied { map } for pid=27176 comm="sudo" path="/usr/bin/sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590870511.733:6518): avc: denied { open } for pid=27179 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=1225 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590870511.820:6536): avc: denied { audit_write } for pid=27176 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1590870511.820:6535): avc: denied { create } for pid=27176 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1590870511.733:6520): avc: denied { create } for pid=27176 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1590870511.820:6534): avc: denied { lock } for pid=27176 comm="sudo" path="/run/utmp" dev="tmpfs" ino=14494 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590870511.820:6533): avc: denied { read } for pid=27176 comm="sudo" name="utmp" dev="tmpfs" ino=14494 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590870511.733:6519): avc: denied { getattr } for pid=27179 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=1225 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590870511.821:6538): avc: denied { setrlimit } for pid=27191 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', u'type=AVC msg=audit(1590870511.695:6516): avc: denied { setrlimit } for pid=27176 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', u'type=USER_AVC msg=audit(1590870511.819:6532): pid=2424 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_return dest=:1.1395 spid=2554 tpid=27176 scontext=system_u:system_r:systemd_logind_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', u'type=AVC msg=audit(1590870511.689:6515): avc: denied { execute_no_trans } for pid=27176 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590870511.689:6515): avc: denied { execute } for pid=27176 comm="admin_socket" name="sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1']

5101820

FAIL

octopus

octopus

py2

smithi

centos 8.1

smithi131 smithi158 smithi189

ceph-ansible/smoke/basic/{0-clusters/3-node 1-distros/centos_latest 2-ceph/ceph_ansible 3-config/bluestore_with_dmcrypt 4-tasks/rest}

SELinux denials found on ubuntu@smithi189.front.sepia.ceph.com: [u'type=AVC msg=audit(1590871316.039:6521): avc: denied { read open } for pid=27104 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=USER_AVC msg=audit(1590871316.042:6529): pid=2415 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.login1.Manager member=CreateSession dest=org.freedesktop.login1 spid=27101 tpid=2554 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:systemd_logind_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', u'type=USER_AVC msg=audit(1590871316.130:6536): pid=2415 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_return dest=:1.1395 spid=2554 tpid=27101 scontext=system_u:system_r:systemd_logind_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', u'type=AVC msg=audit(1590871316.131:6542): avc: denied { setrlimit } for pid=27118 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', u'type=AVC msg=audit(1590871316.131:6537): avc: denied { open } for pid=27101 comm="sudo" path="/run/utmp" dev="tmpfs" ino=15425 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590871315.996:6519): avc: denied { execute_no_trans } for pid=27101 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590871316.040:6525): avc: denied { audit_write } for pid=27101 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1590871316.003:6520): avc: denied { sys_resource } for pid=27101 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1590871315.996:6519): avc: denied { execute } for pid=27101 comm="admin_socket" name="sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590871315.996:6519): avc: denied { read open } for pid=27101 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590871316.131:6538): avc: denied { lock } for pid=27101 comm="sudo" path="/run/utmp" dev="tmpfs" ino=15425 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590871316.131:6542): avc: denied { sys_resource } for pid=27118 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1590871316.040:6525): avc: denied { nlmsg_relay } for pid=27101 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1590871316.039:6521): avc: denied { execute_no_trans } for pid=27104 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590871316.131:6539): avc: denied { create } for pid=27101 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1590871316.040:6522): avc: denied { open } for pid=27104 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=1224 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590871316.131:6540): avc: denied { audit_write } for pid=27101 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1590871316.039:6521): avc: denied { execute } for pid=27104 comm="sudo" name="unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590871316.131:6540): avc: denied { nlmsg_relay } for pid=27101 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1590871316.040:6524): avc: denied { create } for pid=27101 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1590871316.040:6523): avc: denied { getattr } for pid=27104 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=1224 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590871316.131:6537): avc: denied { read } for pid=27101 comm="sudo" name="utmp" dev="tmpfs" ino=15425 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590871316.040:6522): avc: denied { read } for pid=27104 comm="unix_chkpwd" name="shadow" dev="sda1" ino=1224 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590871316.003:6520): avc: denied { setrlimit } for pid=27101 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', u'type=AVC msg=audit(1590871316.039:6521): avc: denied { map } for pid=27104 comm="unix_chkpwd" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590871315.996:6519): avc: denied { map } for pid=27101 comm="sudo" path="/usr/bin/sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1']

5101824

FAIL

octopus

octopus

py2

smithi

centos 8.1

smithi110 smithi148 smithi199

ceph-ansible/smoke/basic/{0-clusters/3-node 1-distros/centos_latest 2-ceph/ceph_ansible 3-config/dmcrypt_off 4-tasks/rbd_import_export}

SELinux denials found on ubuntu@smithi148.front.sepia.ceph.com: [u'type=USER_AVC msg=audit(1590870964.182:6590): pid=2435 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_return dest=:1.1407 spid=2582 tpid=27384 scontext=system_u:system_r:systemd_logind_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', u'type=AVC msg=audit(1590870964.052:6573): avc: denied { map } for pid=27384 comm="sudo" path="/usr/bin/sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590870964.096:6579): avc: denied { nlmsg_relay } for pid=27384 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1590870964.059:6574): avc: denied { sys_resource } for pid=27384 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1590870964.059:6574): avc: denied { setrlimit } for pid=27384 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', u'type=AVC msg=audit(1590870964.096:6579): avc: denied { audit_write } for pid=27384 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1590870964.183:6593): avc: denied { create } for pid=27384 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1590870964.094:6575): avc: denied { map } for pid=27387 comm="unix_chkpwd" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590870964.096:6578): avc: denied { create } for pid=27384 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1590870964.094:6575): avc: denied { read open } for pid=27387 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590870964.183:6596): avc: denied { sys_resource } for pid=27400 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=USER_AVC msg=audit(1590870964.097:6583): pid=2435 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.login1.Manager member=CreateSession dest=org.freedesktop.login1 spid=27384 tpid=2582 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:systemd_logind_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', u'type=AVC msg=audit(1590870964.095:6577): avc: denied { getattr } for pid=27387 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=1227 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590870964.094:6575): avc: denied { execute_no_trans } for pid=27387 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590870964.052:6573): avc: denied { execute_no_trans } for pid=27384 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590870964.183:6594): avc: denied { audit_write } for pid=27384 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1590870964.182:6592): avc: denied { lock } for pid=27384 comm="sudo" path="/run/utmp" dev="tmpfs" ino=16146 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590870964.182:6591): avc: denied { read } for pid=27384 comm="sudo" name="utmp" dev="tmpfs" ino=16146 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590870964.052:6573): avc: denied { execute } for pid=27384 comm="admin_socket" name="sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590870964.052:6573): avc: denied { read open } for pid=27384 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590870964.183:6596): avc: denied { setrlimit } for pid=27400 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', u'type=AVC msg=audit(1590870964.095:6576): avc: denied { open } for pid=27387 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=1227 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590870964.094:6575): avc: denied { execute } for pid=27387 comm="sudo" name="unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590870964.095:6576): avc: denied { read } for pid=27387 comm="unix_chkpwd" name="shadow" dev="sda1" ino=1227 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590870964.183:6594): avc: denied { nlmsg_relay } for pid=27384 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1590870964.182:6591): avc: denied { open } for pid=27384 comm="sudo" path="/run/utmp" dev="tmpfs" ino=16146 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1']

5101828

FAIL

octopus

octopus

py2

smithi

centos 8.1

smithi066 smithi137 smithi185

ceph-ansible/smoke/basic/{0-clusters/3-node 1-distros/centos_latest 2-ceph/ceph_ansible 3-config/dmcrypt_on 4-tasks/ceph-admin-commands}

SELinux denials found on ubuntu@smithi185.front.sepia.ceph.com: [u'type=AVC msg=audit(1590871129.926:6517): avc: denied { read } for pid=27176 comm="unix_chkpwd" name="shadow" dev="sda1" ino=1225 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590871129.925:6516): avc: denied { map } for pid=27176 comm="unix_chkpwd" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590871129.926:6517): avc: denied { open } for pid=27176 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=1225 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590871130.011:6532): avc: denied { read } for pid=27173 comm="sudo" name="utmp" dev="tmpfs" ino=12477 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590871129.882:6514): avc: denied { execute_no_trans } for pid=27173 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590871129.926:6519): avc: denied { create } for pid=27173 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1590871130.012:6537): avc: denied { setrlimit } for pid=27190 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', u'type=AVC msg=audit(1590871129.888:6515): avc: denied { setrlimit } for pid=27173 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', u'type=USER_AVC msg=audit(1590871130.011:6531): pid=2413 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_return dest=:1.1396 spid=2560 tpid=27173 scontext=system_u:system_r:systemd_logind_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', u'type=AVC msg=audit(1590871129.882:6514): avc: denied { read open } for pid=27173 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590871129.926:6518): avc: denied { getattr } for pid=27176 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=1225 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590871130.011:6534): avc: denied { create } for pid=27173 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1590871129.926:6520): avc: denied { audit_write } for pid=27173 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1590871129.888:6515): avc: denied { sys_resource } for pid=27173 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1590871130.011:6532): avc: denied { open } for pid=27173 comm="sudo" path="/run/utmp" dev="tmpfs" ino=12477 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590871129.882:6514): avc: denied { map } for pid=27173 comm="sudo" path="/usr/bin/sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=USER_AVC msg=audit(1590871129.928:6524): pid=2413 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.login1.Manager member=CreateSession dest=org.freedesktop.login1 spid=27173 tpid=2560 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:systemd_logind_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', u'type=AVC msg=audit(1590871129.882:6514): avc: denied { execute } for pid=27173 comm="admin_socket" name="sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590871130.012:6535): avc: denied { nlmsg_relay } for pid=27173 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1590871130.012:6537): avc: denied { sys_resource } for pid=27190 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1590871130.012:6535): avc: denied { audit_write } for pid=27173 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1590871129.926:6520): avc: denied { nlmsg_relay } for pid=27173 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1590871129.925:6516): avc: denied { read open } for pid=27176 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590871129.925:6516): avc: denied { execute_no_trans } for pid=27176 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590871129.925:6516): avc: denied { execute } for pid=27176 comm="sudo" name="unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590871130.011:6533): avc: denied { lock } for pid=27173 comm="sudo" path="/run/utmp" dev="tmpfs" ino=12477 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1']

5101832

FAIL

octopus

octopus

py2

smithi

centos 8.1

smithi103 smithi132 smithi149

ceph-ansible/smoke/basic/{0-clusters/3-node 1-distros/centos_latest 2-ceph/ceph_ansible 3-config/dmcrypt_off 4-tasks/rest}

SELinux denials found on ubuntu@smithi103.front.sepia.ceph.com: [u'type=AVC msg=audit(1590872623.648:6338): avc: denied { read open } for pid=29732 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590872623.692:6340): avc: denied { read open } for pid=29735 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590872623.692:6340): avc: denied { map } for pid=29735 comm="unix_chkpwd" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590872623.648:6338): avc: denied { execute_no_trans } for pid=29732 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590872623.779:6361): avc: denied { sys_resource } for pid=29748 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1590872623.779:6361): avc: denied { setrlimit } for pid=29748 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', u'type=AVC msg=audit(1590872623.655:6339): avc: denied { setrlimit } for pid=29732 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', u'type=AVC msg=audit(1590872623.648:6338): avc: denied { map } for pid=29732 comm="sudo" path="/usr/bin/sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590872623.693:6344): avc: denied { audit_write } for pid=29732 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1590872623.778:6356): avc: denied { open } for pid=29732 comm="sudo" path="/run/utmp" dev="tmpfs" ino=12347 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590872623.692:6340): avc: denied { execute } for pid=29735 comm="sudo" name="unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590872623.693:6344): avc: denied { nlmsg_relay } for pid=29732 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1590872623.693:6341): avc: denied { open } for pid=29735 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=1226 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590872623.692:6340): avc: denied { execute_no_trans } for pid=29735 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590872623.648:6338): avc: denied { execute } for pid=29732 comm="admin_socket" name="sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590872623.693:6341): avc: denied { read } for pid=29735 comm="unix_chkpwd" name="shadow" dev="sda1" ino=1226 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=USER_AVC msg=audit(1590872623.778:6355): pid=2414 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_return dest=:1.1366 spid=2550 tpid=29732 scontext=system_u:system_r:systemd_logind_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', u'type=AVC msg=audit(1590872623.778:6358): avc: denied { create } for pid=29732 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1590872623.693:6343): avc: denied { create } for pid=29732 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=USER_AVC msg=audit(1590872623.695:6348): pid=2414 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.login1.Manager member=CreateSession dest=org.freedesktop.login1 spid=29732 tpid=2550 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:systemd_logind_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', u'type=AVC msg=audit(1590872623.778:6359): avc: denied { nlmsg_relay } for pid=29732 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1590872623.655:6339): avc: denied { sys_resource } for pid=29732 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1590872623.778:6357): avc: denied { lock } for pid=29732 comm="sudo" path="/run/utmp" dev="tmpfs" ino=12347 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590872623.778:6359): avc: denied { audit_write } for pid=29732 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1590872623.693:6342): avc: denied { getattr } for pid=29735 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=1226 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590872623.778:6356): avc: denied { read } for pid=29732 comm="sudo" name="utmp" dev="tmpfs" ino=12347 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1']

5101836

FAIL

octopus

octopus

py2

smithi

centos 8.1

smithi043 smithi057 smithi145

ceph-ansible/smoke/basic/{0-clusters/3-node 1-distros/centos_latest 2-ceph/ceph_ansible 3-config/dmcrypt_on 4-tasks/rbd_import_export}

SELinux denials found on ubuntu@smithi043.front.sepia.ceph.com: [u'type=AVC msg=audit(1590871253.388:6683): avc: denied { open } for pid=27752 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=1235 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590871253.389:6686): avc: denied { audit_write } for pid=27749 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1590871253.487:6699): avc: denied { lock } for pid=27749 comm="sudo" path="/run/utmp" dev="tmpfs" ino=15436 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590871253.487:6701): avc: denied { audit_write } for pid=27749 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1590871253.488:6703): avc: denied { sys_resource } for pid=27763 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1590871253.487:6698): avc: denied { open } for pid=27749 comm="sudo" path="/run/utmp" dev="tmpfs" ino=15436 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=USER_AVC msg=audit(1590871253.391:6690): pid=2415 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.login1.Manager member=CreateSession dest=org.freedesktop.login1 spid=27749 tpid=2548 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:systemd_logind_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', u'type=AVC msg=audit(1590871253.388:6683): avc: denied { read } for pid=27752 comm="unix_chkpwd" name="shadow" dev="sda1" ino=1235 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590871253.389:6684): avc: denied { getattr } for pid=27752 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=1235 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590871253.333:6680): avc: denied { execute } for pid=27749 comm="admin_socket" name="sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590871253.333:6680): avc: denied { map } for pid=27749 comm="sudo" path="/usr/bin/sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590871253.487:6698): avc: denied { read } for pid=27749 comm="sudo" name="utmp" dev="tmpfs" ino=15436 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590871253.387:6682): avc: denied { map } for pid=27752 comm="unix_chkpwd" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590871253.487:6700): avc: denied { create } for pid=27749 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1590871253.387:6682): avc: denied { read open } for pid=27752 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=USER_AVC msg=audit(1590871253.487:6697): pid=2415 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_return dest=:1.1429 spid=2548 tpid=27749 scontext=system_u:system_r:systemd_logind_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', u'type=AVC msg=audit(1590871253.333:6680): avc: denied { read open } for pid=27749 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590871253.340:6681): avc: denied { setrlimit } for pid=27749 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', u'type=AVC msg=audit(1590871253.387:6682): avc: denied { execute_no_trans } for pid=27752 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590871253.387:6682): avc: denied { execute } for pid=27752 comm="sudo" name="unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590871253.389:6685): avc: denied { create } for pid=27749 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1590871253.487:6701): avc: denied { nlmsg_relay } for pid=27749 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1590871253.389:6686): avc: denied { nlmsg_relay } for pid=27749 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1590871253.340:6681): avc: denied { sys_resource } for pid=27749 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1590871253.333:6680): avc: denied { execute_no_trans } for pid=27749 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590871253.488:6703): avc: denied { setrlimit } for pid=27763 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1']

5101840

FAIL

octopus

octopus

py2

smithi

centos 8.1

smithi026 smithi060 smithi084 smithi118

ceph-ansible/smoke/basic/{0-clusters/4-node 1-distros/centos_latest 2-ceph/ceph_ansible 3-config/bluestore_with_dmcrypt 4-tasks/ceph-admin-commands}

SELinux denials found on ubuntu@smithi118.front.sepia.ceph.com: [u'type=AVC msg=audit(1590864522.685:6238): avc: denied { lock } for pid=25353 comm="sudo" path="/run/utmp" dev="tmpfs" ino=3146 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590864522.686:6242): avc: denied { sys_resource } for pid=25367 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1590864522.600:6221): avc: denied { execute } for pid=25356 comm="sudo" name="unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590864522.600:6221): avc: denied { read open } for pid=25356 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590864522.601:6224): avc: denied { create } for pid=25353 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=USER_AVC msg=audit(1590864522.603:6229): pid=2424 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.login1.Manager member=CreateSession dest=org.freedesktop.login1 spid=25353 tpid=2567 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:systemd_logind_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', u'type=AVC msg=audit(1590864522.556:6219): avc: denied { map } for pid=25353 comm="sudo" path="/usr/bin/sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590864522.685:6239): avc: denied { create } for pid=25353 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=USER_AVC msg=audit(1590864522.685:6236): pid=2424 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_return dest=:1.1349 spid=2567 tpid=25353 scontext=system_u:system_r:systemd_logind_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', u'type=AVC msg=audit(1590864522.601:6223): avc: denied { getattr } for pid=25356 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=1216 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590864522.562:6220): avc: denied { sys_resource } for pid=25353 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1590864522.686:6240): avc: denied { audit_write } for pid=25353 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1590864522.601:6225): avc: denied { audit_write } for pid=25353 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1590864522.556:6219): avc: denied { execute } for pid=25353 comm="admin_socket" name="sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590864522.601:6222): avc: denied { read } for pid=25356 comm="unix_chkpwd" name="shadow" dev="sda1" ino=1216 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590864522.556:6219): avc: denied { read open } for pid=25353 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590864522.600:6221): avc: denied { execute_no_trans } for pid=25356 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590864522.685:6237): avc: denied { open } for pid=25353 comm="sudo" path="/run/utmp" dev="tmpfs" ino=3146 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590864522.601:6222): avc: denied { open } for pid=25356 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=1216 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590864522.686:6240): avc: denied { nlmsg_relay } for pid=25353 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1590864522.600:6221): avc: denied { map } for pid=25356 comm="unix_chkpwd" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590864522.562:6220): avc: denied { setrlimit } for pid=25353 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', u'type=AVC msg=audit(1590864522.601:6225): avc: denied { nlmsg_relay } for pid=25353 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1590864522.685:6237): avc: denied { read } for pid=25353 comm="sudo" name="utmp" dev="tmpfs" ino=3146 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590864522.686:6242): avc: denied { setrlimit } for pid=25367 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', u'type=AVC msg=audit(1590864522.556:6219): avc: denied { execute_no_trans } for pid=25353 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1']

5101845

FAIL

octopus

octopus

py2

smithi

centos 8.1

smithi093 smithi159 smithi164 smithi176

ceph-ansible/smoke/basic/{0-clusters/4-node 1-distros/centos_latest 2-ceph/ceph_ansible 3-config/dmcrypt_on 4-tasks/rest}

SELinux denials found on ubuntu@smithi093.front.sepia.ceph.com: [u'type=AVC msg=audit(1590873674.132:6621): avc: denied { read open } for pid=26550 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590873674.218:6637): avc: denied { read } for pid=26547 comm="sudo" name="utmp" dev="tmpfs" ino=4273 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590873674.088:6619): avc: denied { map } for pid=26547 comm="sudo" path="/usr/bin/sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590873674.218:6638): avc: denied { lock } for pid=26547 comm="sudo" path="/run/utmp" dev="tmpfs" ino=4273 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590873674.219:6642): avc: denied { setrlimit } for pid=26563 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', u'type=AVC msg=audit(1590873674.133:6623): avc: denied { getattr } for pid=26550 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=1225 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590873674.088:6619): avc: denied { execute_no_trans } for pid=26547 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590873674.133:6622): avc: denied { open } for pid=26550 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=1225 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590873674.132:6621): avc: denied { execute } for pid=26550 comm="sudo" name="unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590873674.133:6622): avc: denied { read } for pid=26550 comm="unix_chkpwd" name="shadow" dev="sda1" ino=1225 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590873674.132:6621): avc: denied { execute_no_trans } for pid=26550 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=USER_AVC msg=audit(1590873674.217:6636): pid=2409 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_return dest=:1.1417 spid=2554 tpid=26547 scontext=system_u:system_r:systemd_logind_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', u'type=AVC msg=audit(1590873674.218:6639): avc: denied { create } for pid=26547 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1590873674.133:6624): avc: denied { create } for pid=26547 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1590873674.088:6619): avc: denied { read open } for pid=26547 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590873674.219:6642): avc: denied { sys_resource } for pid=26563 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1590873674.218:6637): avc: denied { open } for pid=26547 comm="sudo" path="/run/utmp" dev="tmpfs" ino=4273 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590873674.218:6640): avc: denied { audit_write } for pid=26547 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1590873674.095:6620): avc: denied { sys_resource } for pid=26547 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1590873674.095:6620): avc: denied { setrlimit } for pid=26547 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', u'type=AVC msg=audit(1590873674.088:6619): avc: denied { execute } for pid=26547 comm="admin_socket" name="sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590873674.133:6625): avc: denied { audit_write } for pid=26547 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1590873674.133:6625): avc: denied { nlmsg_relay } for pid=26547 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1590873674.218:6640): avc: denied { nlmsg_relay } for pid=26547 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1590873674.132:6621): avc: denied { map } for pid=26550 comm="unix_chkpwd" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=USER_AVC msg=audit(1590873674.135:6629): pid=2409 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.login1.Manager member=CreateSession dest=org.freedesktop.login1 spid=26547 tpid=2554 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:systemd_logind_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"']

5101848

FAIL

octopus

octopus

py2

smithi

centos 8.1

smithi005 smithi027 smithi123 smithi144

ceph-ansible/smoke/basic/{0-clusters/4-node 1-distros/centos_latest 2-ceph/ceph_ansible 3-config/bluestore_with_dmcrypt 4-tasks/rbd_import_export}

SELinux denials found on ubuntu@smithi144.front.sepia.ceph.com: [u'type=AVC msg=audit(1590865839.406:6391): avc: denied { sys_resource } for pid=25695 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1590865839.320:6370): avc: denied { map } for pid=25683 comm="unix_chkpwd" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590865839.284:6369): avc: denied { setrlimit } for pid=25680 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', u'type=AVC msg=audit(1590865839.277:6368): avc: denied { map } for pid=25680 comm="sudo" path="/usr/bin/sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590865839.320:6370): avc: denied { execute_no_trans } for pid=25683 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590865839.406:6386): avc: denied { open } for pid=25680 comm="sudo" path="/run/utmp" dev="tmpfs" ino=12432 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590865839.406:6389): avc: denied { audit_write } for pid=25680 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1590865839.320:6370): avc: denied { read open } for pid=25683 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590865839.277:6368): avc: denied { read open } for pid=25680 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=USER_AVC msg=audit(1590865839.323:6378): pid=2397 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.login1.Manager member=CreateSession dest=org.freedesktop.login1 spid=25680 tpid=2536 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:systemd_logind_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', u'type=AVC msg=audit(1590865839.406:6386): avc: denied { read } for pid=25680 comm="sudo" name="utmp" dev="tmpfs" ino=12432 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590865839.406:6387): avc: denied { lock } for pid=25680 comm="sudo" path="/run/utmp" dev="tmpfs" ino=12432 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590865839.321:6372): avc: denied { getattr } for pid=25683 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=1225 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590865839.406:6391): avc: denied { setrlimit } for pid=25695 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', u'type=AVC msg=audit(1590865839.321:6371): avc: denied { read } for pid=25683 comm="unix_chkpwd" name="shadow" dev="sda1" ino=1225 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590865839.406:6389): avc: denied { nlmsg_relay } for pid=25680 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=USER_AVC msg=audit(1590865839.405:6385): pid=2397 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_return dest=:1.1366 spid=2536 tpid=25680 scontext=system_u:system_r:systemd_logind_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', u'type=AVC msg=audit(1590865839.321:6371): avc: denied { open } for pid=25683 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=1225 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590865839.406:6388): avc: denied { create } for pid=25680 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1590865839.321:6374): avc: denied { audit_write } for pid=25680 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1590865839.321:6373): avc: denied { create } for pid=25680 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1590865839.321:6374): avc: denied { nlmsg_relay } for pid=25680 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1590865839.320:6370): avc: denied { execute } for pid=25683 comm="sudo" name="unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590865839.277:6368): avc: denied { execute } for pid=25680 comm="admin_socket" name="sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590865839.277:6368): avc: denied { execute_no_trans } for pid=25680 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590865839.284:6369): avc: denied { sys_resource } for pid=25680 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1']

5101853

FAIL

octopus

octopus

py2

smithi

centos 8.1

smithi035 smithi058 smithi116 smithi154

ceph-ansible/smoke/basic/{0-clusters/4-node 1-distros/centos_latest 2-ceph/ceph_ansible 3-config/dmcrypt_off 4-tasks/ceph-admin-commands}

SELinux denials found on ubuntu@smithi058.front.sepia.ceph.com: [u'type=AVC msg=audit(1590864597.349:6452): avc: denied { sys_resource } for pid=26033 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1590864597.343:6451): avc: denied { execute_no_trans } for pid=26033 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590864597.499:6474): avc: denied { setrlimit } for pid=26049 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', u'type=AVC msg=audit(1590864597.399:6454): avc: denied { read } for pid=26036 comm="unix_chkpwd" name="shadow" dev="sda1" ino=1226 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590864597.343:6451): avc: denied { map } for pid=26033 comm="sudo" path="/usr/bin/sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590864597.498:6469): avc: denied { open } for pid=26033 comm="sudo" path="/run/utmp" dev="tmpfs" ino=13553 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590864597.343:6451): avc: denied { execute } for pid=26033 comm="admin_socket" name="sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590864597.398:6453): avc: denied { execute_no_trans } for pid=26036 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590864597.498:6469): avc: denied { read } for pid=26033 comm="sudo" name="utmp" dev="tmpfs" ino=13553 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=USER_AVC msg=audit(1590864597.401:6461): pid=1587 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.login1.Manager member=CreateSession dest=org.freedesktop.login1 spid=26033 tpid=2550 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:systemd_logind_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', u'type=AVC msg=audit(1590864597.399:6456): avc: denied { create } for pid=26033 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1590864597.399:6454): avc: denied { open } for pid=26036 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=1226 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590864597.499:6474): avc: denied { sys_resource } for pid=26049 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1590864597.498:6472): avc: denied { audit_write } for pid=26033 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=USER_AVC msg=audit(1590864597.497:6468): pid=1587 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_return dest=:1.1383 spid=2550 tpid=26033 scontext=system_u:system_r:systemd_logind_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', u'type=AVC msg=audit(1590864597.398:6453): avc: denied { execute } for pid=26036 comm="sudo" name="unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590864597.398:6453): avc: denied { read open } for pid=26036 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590864597.398:6453): avc: denied { map } for pid=26036 comm="unix_chkpwd" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590864597.498:6471): avc: denied { create } for pid=26033 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1590864597.498:6472): avc: denied { nlmsg_relay } for pid=26033 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1590864597.349:6452): avc: denied { setrlimit } for pid=26033 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', u'type=AVC msg=audit(1590864597.498:6470): avc: denied { lock } for pid=26033 comm="sudo" path="/run/utmp" dev="tmpfs" ino=13553 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590864597.399:6457): avc: denied { nlmsg_relay } for pid=26033 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1590864597.399:6455): avc: denied { getattr } for pid=26036 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=1226 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590864597.343:6451): avc: denied { read open } for pid=26033 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590864597.399:6457): avc: denied { audit_write } for pid=26033 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1']

5101857

FAIL

octopus

octopus

py2

smithi

centos 8.1

smithi068 smithi102 smithi117 smithi180

ceph-ansible/smoke/basic/{0-clusters/4-node 1-distros/centos_latest 2-ceph/ceph_ansible 3-config/bluestore_with_dmcrypt 4-tasks/rest}

SELinux denials found on ubuntu@smithi117.front.sepia.ceph.com: [u'type=AVC msg=audit(1590868519.782:6372): avc: denied { sys_resource } for pid=25668 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1590868519.782:6372): avc: denied { setrlimit } for pid=25668 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', u'type=USER_AVC msg=audit(1590868519.905:6388): pid=2404 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_return dest=:1.1366 spid=2533 tpid=25668 scontext=system_u:system_r:systemd_logind_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', u'type=AVC msg=audit(1590868519.776:6371): avc: denied { read open } for pid=25668 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590868519.820:6375): avc: denied { getattr } for pid=25671 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=1216 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590868519.906:6389): avc: denied { open } for pid=25668 comm="sudo" path="/run/utmp" dev="tmpfs" ino=16512 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590868519.906:6390): avc: denied { lock } for pid=25668 comm="sudo" path="/run/utmp" dev="tmpfs" ino=16512 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590868519.820:6374): avc: denied { open } for pid=25671 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=1216 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590868519.819:6373): avc: denied { execute_no_trans } for pid=25671 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590868519.906:6392): avc: denied { audit_write } for pid=25668 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1590868519.821:6377): avc: denied { nlmsg_relay } for pid=25668 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1590868519.819:6373): avc: denied { read open } for pid=25671 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590868519.776:6371): avc: denied { execute } for pid=25668 comm="admin_socket" name="sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590868519.821:6376): avc: denied { create } for pid=25668 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1590868519.819:6373): avc: denied { map } for pid=25671 comm="unix_chkpwd" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590868519.906:6389): avc: denied { read } for pid=25668 comm="sudo" name="utmp" dev="tmpfs" ino=16512 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590868519.906:6392): avc: denied { nlmsg_relay } for pid=25668 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1590868519.776:6371): avc: denied { execute_no_trans } for pid=25668 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590868519.776:6371): avc: denied { map } for pid=25668 comm="sudo" path="/usr/bin/sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590868519.819:6373): avc: denied { execute } for pid=25671 comm="sudo" name="unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=USER_AVC msg=audit(1590868519.822:6381): pid=2404 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.login1.Manager member=CreateSession dest=org.freedesktop.login1 spid=25668 tpid=2533 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:systemd_logind_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', u'type=AVC msg=audit(1590868519.906:6391): avc: denied { create } for pid=25668 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1590868519.821:6377): avc: denied { audit_write } for pid=25668 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1590868519.820:6374): avc: denied { read } for pid=25671 comm="unix_chkpwd" name="shadow" dev="sda1" ino=1216 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590868519.906:6394): avc: denied { sys_resource } for pid=25684 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1590868519.906:6394): avc: denied { setrlimit } for pid=25684 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1']

5101861

FAIL

octopus

octopus

py2

smithi

centos 8.1

smithi043 smithi057 smithi145 smithi157

ceph-ansible/smoke/basic/{0-clusters/4-node 1-distros/centos_latest 2-ceph/ceph_ansible 3-config/dmcrypt_off 4-tasks/rbd_import_export}

SELinux denials found on ubuntu@smithi145.front.sepia.ceph.com: [u'type=AVC msg=audit(1590872418.226:6141): avc: denied { map } for pid=25074 comm="unix_chkpwd" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590872418.311:6158): avc: denied { lock } for pid=25071 comm="sudo" path="/run/utmp" dev="tmpfs" ino=17445 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590872418.183:6139): avc: denied { execute } for pid=25071 comm="admin_socket" name="sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590872418.183:6139): avc: denied { read open } for pid=25071 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590872418.312:6160): avc: denied { audit_write } for pid=25071 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1590872418.227:6145): avc: denied { audit_write } for pid=25071 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1590872418.312:6159): avc: denied { create } for pid=25071 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1590872418.190:6140): avc: denied { setrlimit } for pid=25071 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', u'type=AVC msg=audit(1590872418.227:6142): avc: denied { read } for pid=25074 comm="unix_chkpwd" name="shadow" dev="sda1" ino=1216 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590872418.227:6143): avc: denied { getattr } for pid=25074 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=1216 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590872418.226:6141): avc: denied { execute } for pid=25074 comm="sudo" name="unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590872418.226:6141): avc: denied { read open } for pid=25074 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590872418.227:6144): avc: denied { create } for pid=25071 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1590872418.311:6157): avc: denied { read } for pid=25071 comm="sudo" name="utmp" dev="tmpfs" ino=17445 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590872418.312:6162): avc: denied { sys_resource } for pid=25086 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=USER_AVC msg=audit(1590872418.311:6156): pid=2386 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_return dest=:1.1333 spid=2542 tpid=25071 scontext=system_u:system_r:systemd_logind_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', u'type=AVC msg=audit(1590872418.190:6140): avc: denied { sys_resource } for pid=25071 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1590872418.183:6139): avc: denied { map } for pid=25071 comm="sudo" path="/usr/bin/sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590872418.227:6145): avc: denied { nlmsg_relay } for pid=25071 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1590872418.226:6141): avc: denied { execute_no_trans } for pid=25074 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=USER_AVC msg=audit(1590872418.229:6149): pid=2386 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.login1.Manager member=CreateSession dest=org.freedesktop.login1 spid=25071 tpid=2542 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:systemd_logind_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', u'type=AVC msg=audit(1590872418.311:6157): avc: denied { open } for pid=25071 comm="sudo" path="/run/utmp" dev="tmpfs" ino=17445 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590872418.227:6142): avc: denied { open } for pid=25074 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=1216 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590872418.312:6160): avc: denied { nlmsg_relay } for pid=25071 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1590872418.183:6139): avc: denied { execute_no_trans } for pid=25071 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590872418.312:6162): avc: denied { setrlimit } for pid=25086 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1']

5101865

FAIL

octopus

octopus

py2

smithi

centos 8.1

smithi018 smithi019 smithi061 smithi078

ceph-ansible/smoke/basic/{0-clusters/4-node 1-distros/centos_latest 2-ceph/ceph_ansible 3-config/dmcrypt_on 4-tasks/ceph-admin-commands}

SELinux denials found on ubuntu@smithi078.front.sepia.ceph.com: [u'type=AVC msg=audit(1590866695.259:6477): avc: denied { nlmsg_relay } for pid=26042 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1590866695.136:6457): avc: denied { sys_resource } for pid=26042 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1590866695.130:6456): avc: denied { execute } for pid=26042 comm="admin_socket" name="sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590866695.259:6476): avc: denied { create } for pid=26042 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1590866695.130:6456): avc: denied { execute_no_trans } for pid=26042 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590866695.174:6460): avc: denied { getattr } for pid=26045 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=1226 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590866695.174:6462): avc: denied { audit_write } for pid=26042 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1590866695.174:6459): avc: denied { read } for pid=26045 comm="unix_chkpwd" name="shadow" dev="sda1" ino=1226 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590866695.173:6458): avc: denied { map } for pid=26045 comm="unix_chkpwd" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590866695.173:6458): avc: denied { execute_no_trans } for pid=26045 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590866695.136:6457): avc: denied { setrlimit } for pid=26042 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', u'type=USER_AVC msg=audit(1590866695.258:6473): pid=2414 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_return dest=:1.1382 spid=2550 tpid=26042 scontext=system_u:system_r:systemd_logind_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', u'type=AVC msg=audit(1590866695.173:6458): avc: denied { execute } for pid=26045 comm="sudo" name="unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590866695.174:6462): avc: denied { nlmsg_relay } for pid=26042 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1590866695.259:6479): avc: denied { setrlimit } for pid=26057 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', u'type=AVC msg=audit(1590866695.174:6459): avc: denied { open } for pid=26045 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=1226 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590866695.258:6474): avc: denied { open } for pid=26042 comm="sudo" path="/run/utmp" dev="tmpfs" ino=15463 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=USER_AVC msg=audit(1590866695.176:6466): pid=2414 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.login1.Manager member=CreateSession dest=org.freedesktop.login1 spid=26042 tpid=2550 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:systemd_logind_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', u'type=AVC msg=audit(1590866695.130:6456): avc: denied { map } for pid=26042 comm="sudo" path="/usr/bin/sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590866695.258:6475): avc: denied { lock } for pid=26042 comm="sudo" path="/run/utmp" dev="tmpfs" ino=15463 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590866695.174:6461): avc: denied { create } for pid=26042 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1590866695.259:6479): avc: denied { sys_resource } for pid=26057 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1590866695.259:6477): avc: denied { audit_write } for pid=26042 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1590866695.258:6474): avc: denied { read } for pid=26042 comm="sudo" name="utmp" dev="tmpfs" ino=15463 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590866695.130:6456): avc: denied { read open } for pid=26042 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590866695.173:6458): avc: denied { read open } for pid=26045 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1']

5101869

FAIL

octopus

octopus

py2

smithi

centos 8.1

smithi060 smithi105 smithi159 smithi196

ceph-ansible/smoke/basic/{0-clusters/4-node 1-distros/centos_latest 2-ceph/ceph_ansible 3-config/dmcrypt_off 4-tasks/rest}

SELinux denials found on ubuntu@smithi196.front.sepia.ceph.com: [u'type=AVC msg=audit(1590868930.539:6476): avc: denied { audit_write } for pid=25993 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1590868930.406:6455): avc: denied { execute } for pid=25993 comm="admin_socket" name="sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590868930.413:6456): avc: denied { setrlimit } for pid=25993 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', u'type=AVC msg=audit(1590868930.450:6457): avc: denied { map } for pid=25996 comm="unix_chkpwd" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590868930.451:6458): avc: denied { open } for pid=25996 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=1225 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590868930.539:6473): avc: denied { read } for pid=25993 comm="sudo" name="utmp" dev="tmpfs" ino=17526 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590868930.451:6461): avc: denied { nlmsg_relay } for pid=25993 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1590868930.451:6460): avc: denied { create } for pid=25993 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=USER_AVC msg=audit(1590868930.538:6472): pid=2437 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_return dest=:1.1385 spid=2539 tpid=25993 scontext=system_u:system_r:systemd_logind_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', u'type=AVC msg=audit(1590868930.406:6455): avc: denied { read open } for pid=25993 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590868930.539:6478): avc: denied { sys_resource } for pid=26010 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1590868930.451:6458): avc: denied { read } for pid=25996 comm="unix_chkpwd" name="shadow" dev="sda1" ino=1225 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590868930.450:6457): avc: denied { execute } for pid=25996 comm="sudo" name="unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590868930.539:6478): avc: denied { setrlimit } for pid=26010 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', u'type=AVC msg=audit(1590868930.450:6457): avc: denied { execute_no_trans } for pid=25996 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590868930.539:6474): avc: denied { lock } for pid=25993 comm="sudo" path="/run/utmp" dev="tmpfs" ino=17526 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=USER_AVC msg=audit(1590868930.453:6465): pid=2437 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.login1.Manager member=CreateSession dest=org.freedesktop.login1 spid=25993 tpid=2539 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:systemd_logind_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', u'type=AVC msg=audit(1590868930.539:6475): avc: denied { create } for pid=25993 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1590868930.451:6459): avc: denied { getattr } for pid=25996 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=1225 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590868930.539:6476): avc: denied { nlmsg_relay } for pid=25993 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1590868930.450:6457): avc: denied { read open } for pid=25996 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590868930.539:6473): avc: denied { open } for pid=25993 comm="sudo" path="/run/utmp" dev="tmpfs" ino=17526 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590868930.413:6456): avc: denied { sys_resource } for pid=25993 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1590868930.451:6461): avc: denied { audit_write } for pid=25993 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1590868930.406:6455): avc: denied { map } for pid=25993 comm="sudo" path="/usr/bin/sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590868930.406:6455): avc: denied { execute_no_trans } for pid=25993 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1']

5101873

FAIL

octopus

octopus

py2

smithi

centos 8.1

smithi093 smithi164 smithi171 smithi176

ceph-ansible/smoke/basic/{0-clusters/4-node 1-distros/centos_latest 2-ceph/ceph_ansible 3-config/dmcrypt_on 4-tasks/rbd_import_export}

SELinux denials found on ubuntu@smithi176.front.sepia.ceph.com: [u'type=AVC msg=audit(1590867813.512:6367): avc: denied { read open } for pid=25668 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590867813.557:6371): avc: denied { getattr } for pid=25671 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=1216 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590867813.641:6388): avc: denied { audit_write } for pid=25668 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1590867813.641:6386): avc: denied { lock } for pid=25668 comm="sudo" path="/run/utmp" dev="tmpfs" ino=16493 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590867813.518:6368): avc: denied { sys_resource } for pid=25668 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1590867813.512:6367): avc: denied { map } for pid=25668 comm="sudo" path="/usr/bin/sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590867813.555:6369): avc: denied { map } for pid=25671 comm="unix_chkpwd" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590867813.641:6387): avc: denied { create } for pid=25668 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1590867813.557:6373): avc: denied { audit_write } for pid=25668 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1590867813.512:6367): avc: denied { execute } for pid=25668 comm="admin_socket" name="sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590867813.641:6390): avc: denied { setrlimit } for pid=25683 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', u'type=AVC msg=audit(1590867813.555:6369): avc: denied { execute } for pid=25671 comm="sudo" name="unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590867813.641:6390): avc: denied { sys_resource } for pid=25683 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', u'type=AVC msg=audit(1590867813.557:6370): avc: denied { read } for pid=25671 comm="unix_chkpwd" name="shadow" dev="sda1" ino=1216 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590867813.555:6369): avc: denied { execute_no_trans } for pid=25671 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590867813.557:6372): avc: denied { create } for pid=25668 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1590867813.557:6370): avc: denied { open } for pid=25671 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=1216 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590867813.640:6385): avc: denied { read } for pid=25668 comm="sudo" name="utmp" dev="tmpfs" ino=16493 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590867813.557:6373): avc: denied { nlmsg_relay } for pid=25668 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1590867813.641:6388): avc: denied { nlmsg_relay } for pid=25668 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', u'type=AVC msg=audit(1590867813.640:6385): avc: denied { open } for pid=25668 comm="sudo" path="/run/utmp" dev="tmpfs" ino=16493 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', u'type=USER_AVC msg=audit(1590867813.558:6377): pid=2423 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.login1.Manager member=CreateSession dest=org.freedesktop.login1 spid=25668 tpid=2534 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:systemd_logind_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', u'type=AVC msg=audit(1590867813.512:6367): avc: denied { execute_no_trans } for pid=25668 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=7720 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590867813.555:6369): avc: denied { read open } for pid=25671 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=5956 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', u'type=AVC msg=audit(1590867813.518:6368): avc: denied { setrlimit } for pid=25668 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', u'type=USER_AVC msg=audit(1590867813.640:6384): pid=2423 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_return dest=:1.1365 spid=2534 tpid=25668 scontext=system_u:system_r:systemd_logind_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"']