teuthology-2020-07-13_04:05:02-ceph-ansible-master-distro-basic-smithi

5219412

FAIL

master

master

master

smithi

centos 8.1

smithi132 smithi169 smithi198

ceph-ansible/smoke/basic/{0-clusters/3-node 1-distros/centos_latest 2-ceph/ceph_ansible 3-config/bluestore_with_dmcrypt 4-tasks/ceph-admin-commands}

SELinux denials found on ubuntu@smithi198.front.sepia.ceph.com: ['type=AVC msg=audit(1594837685.203:6410): avc: denied { create } for pid=29313 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', 'type=USER_AVC msg=audit(1594837685.205:6415): pid=2420 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.login1.Manager member=CreateSession dest=org.freedesktop.login1 spid=29313 tpid=2566 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:systemd_logind_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', 'type=AVC msg=audit(1594837685.289:6428): avc: denied { sys_resource } for pid=29326 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1594837685.167:6406): avc: denied { setrlimit } for pid=29313 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', 'type=AVC msg=audit(1594837685.202:6407): avc: denied { execute } for pid=29314 comm="sudo" name="unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837685.288:6423): avc: denied { read } for pid=29313 comm="sudo" name="utmp" dev="tmpfs" ino=16450 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837685.160:6405): avc: denied { read open } for pid=29313 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', 'type=USER_AVC msg=audit(1594837685.288:6422): pid=2420 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_return dest=:1.1382 spid=2566 tpid=29313 scontext=system_u:system_r:systemd_logind_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', 'type=AVC msg=audit(1594837685.288:6424): avc: denied { lock } for pid=29313 comm="sudo" path="/run/utmp" dev="tmpfs" ino=16450 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837685.203:6408): avc: denied { open } for pid=29314 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=61281 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837685.289:6428): avc: denied { setrlimit } for pid=29326 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', 'type=AVC msg=audit(1594837685.203:6409): avc: denied { getattr } for pid=29314 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=61281 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837685.288:6426): avc: denied { audit_write } for pid=29313 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1594837685.167:6406): avc: denied { sys_resource } for pid=29313 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1594837685.203:6408): avc: denied { read } for pid=29314 comm="unix_chkpwd" name="shadow" dev="sda1" ino=61281 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837685.160:6405): avc: denied { execute_no_trans } for pid=29313 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837685.160:6405): avc: denied { map } for pid=29313 comm="sudo" path="/usr/bin/sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837685.202:6407): avc: denied { execute_no_trans } for pid=29314 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837685.288:6425): avc: denied { create } for pid=29313 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', 'type=AVC msg=audit(1594837685.203:6411): avc: denied { audit_write } for pid=29313 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1594837685.203:6411): avc: denied { nlmsg_relay } for pid=29313 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', 'type=AVC msg=audit(1594837685.160:6405): avc: denied { execute } for pid=29313 comm="admin_socket" name="sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837685.288:6423): avc: denied { open } for pid=29313 comm="sudo" path="/run/utmp" dev="tmpfs" ino=16450 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837685.202:6407): avc: denied { read open } for pid=29314 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837685.288:6426): avc: denied { nlmsg_relay } for pid=29313 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', 'type=AVC msg=audit(1594837685.202:6407): avc: denied { map } for pid=29314 comm="unix_chkpwd" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1']

5219414

FAIL

master

master

master

smithi

centos 8.1

smithi031 smithi094 smithi201

ceph-ansible/smoke/basic/{0-clusters/3-node 1-distros/centos_latest 2-ceph/ceph_ansible 3-config/dmcrypt_on 4-tasks/rest}

SELinux denials found on ubuntu@smithi031.front.sepia.ceph.com: ['type=AVC msg=audit(1594837722.572:6519): avc: denied { getattr } for pid=29709 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=61281 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837722.517:6515): avc: denied { execute_no_trans } for pid=29708 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837722.517:6515): avc: denied { execute } for pid=29708 comm="admin_socket" name="sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837722.517:6515): avc: denied { read open } for pid=29708 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837722.524:6516): avc: denied { sys_resource } for pid=29708 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1594837722.517:6515): avc: denied { map } for pid=29708 comm="sudo" path="/usr/bin/sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837722.571:6517): avc: denied { execute } for pid=29709 comm="sudo" name="unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837722.571:6517): avc: denied { execute_no_trans } for pid=29709 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837722.665:6538): avc: denied { setrlimit } for pid=29722 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', 'type=AVC msg=audit(1594837722.665:6533): avc: denied { read } for pid=29708 comm="sudo" name="utmp" dev="tmpfs" ino=16437 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', 'type=USER_AVC msg=audit(1594837722.574:6525): pid=2445 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.login1.Manager member=CreateSession dest=org.freedesktop.login1 spid=29708 tpid=2553 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:systemd_logind_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', 'type=AVC msg=audit(1594837722.572:6521): avc: denied { audit_write } for pid=29708 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1594837722.571:6517): avc: denied { read open } for pid=29709 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837722.572:6521): avc: denied { nlmsg_relay } for pid=29708 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', 'type=AVC msg=audit(1594837722.572:6518): avc: denied { read } for pid=29709 comm="unix_chkpwd" name="shadow" dev="sda1" ino=61281 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837722.665:6535): avc: denied { create } for pid=29708 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', 'type=AVC msg=audit(1594837722.665:6534): avc: denied { lock } for pid=29708 comm="sudo" path="/run/utmp" dev="tmpfs" ino=16437 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837722.665:6533): avc: denied { open } for pid=29708 comm="sudo" path="/run/utmp" dev="tmpfs" ino=16437 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837722.572:6520): avc: denied { create } for pid=29708 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', 'type=AVC msg=audit(1594837722.572:6518): avc: denied { open } for pid=29709 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=61281 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837722.665:6538): avc: denied { sys_resource } for pid=29722 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1594837722.571:6517): avc: denied { map } for pid=29709 comm="unix_chkpwd" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', 'type=USER_AVC msg=audit(1594837722.664:6532): pid=2445 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_return dest=:1.1404 spid=2553 tpid=29708 scontext=system_u:system_r:systemd_logind_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', 'type=AVC msg=audit(1594837722.665:6536): avc: denied { audit_write } for pid=29708 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1594837722.524:6516): avc: denied { setrlimit } for pid=29708 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', 'type=AVC msg=audit(1594837722.665:6536): avc: denied { nlmsg_relay } for pid=29708 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1']

5219416

FAIL

master

master

master

smithi

centos 8.1

smithi005 smithi085 smithi124

ceph-ansible/smoke/basic/{0-clusters/3-node 1-distros/centos_latest 2-ceph/ceph_ansible 3-config/bluestore_with_dmcrypt 4-tasks/rbd_import_export}

SELinux denials found on ubuntu@smithi085.front.sepia.ceph.com: ['type=AVC msg=audit(1594837821.743:6409): avc: denied { open } for pid=29337 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=61281 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837821.742:6408): avc: denied { execute_no_trans } for pid=29337 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', 'type=USER_AVC msg=audit(1594837821.745:6416): pid=2434 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.login1.Manager member=CreateSession dest=org.freedesktop.login1 spid=29335 tpid=2576 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:systemd_logind_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', 'type=AVC msg=audit(1594837821.743:6410): avc: denied { getattr } for pid=29337 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=61281 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837821.744:6412): avc: denied { nlmsg_relay } for pid=29335 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', 'type=AVC msg=audit(1594837821.744:6412): avc: denied { audit_write } for pid=29335 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1594837821.824:6429): avc: denied { sys_resource } for pid=29352 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', 'type=USER_AVC msg=audit(1594837821.823:6423): pid=2434 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_return dest=:1.1382 spid=2576 tpid=29335 scontext=system_u:system_r:systemd_logind_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', 'type=AVC msg=audit(1594837821.744:6411): avc: denied { create } for pid=29335 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', 'type=AVC msg=audit(1594837821.700:6404): avc: denied { read open } for pid=29335 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837821.707:6405): avc: denied { sys_resource } for pid=29335 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1594837821.742:6408): avc: denied { execute } for pid=29337 comm="sudo" name="unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837821.824:6427): avc: denied { nlmsg_relay } for pid=29335 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', 'type=AVC msg=audit(1594837821.823:6425): avc: denied { lock } for pid=29335 comm="sudo" path="/run/utmp" dev="tmpfs" ino=1239 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837821.824:6427): avc: denied { audit_write } for pid=29335 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1594837821.743:6409): avc: denied { read } for pid=29337 comm="unix_chkpwd" name="shadow" dev="sda1" ino=61281 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837821.824:6429): avc: denied { setrlimit } for pid=29352 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', 'type=AVC msg=audit(1594837821.700:6404): avc: denied { map } for pid=29335 comm="sudo" path="/usr/bin/sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837821.707:6405): avc: denied { setrlimit } for pid=29335 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', 'type=AVC msg=audit(1594837821.700:6404): avc: denied { execute } for pid=29335 comm="admin_socket" name="sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837821.823:6424): avc: denied { read } for pid=29335 comm="sudo" name="utmp" dev="tmpfs" ino=1239 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837821.700:6404): avc: denied { execute_no_trans } for pid=29335 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837821.823:6424): avc: denied { open } for pid=29335 comm="sudo" path="/run/utmp" dev="tmpfs" ino=1239 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837821.823:6426): avc: denied { create } for pid=29335 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', 'type=AVC msg=audit(1594837821.742:6408): avc: denied { read open } for pid=29337 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837821.742:6408): avc: denied { map } for pid=29337 comm="unix_chkpwd" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1']

5219418

FAIL

master

master

master

smithi

centos 8.1

smithi006 smithi084 smithi136

ceph-ansible/smoke/basic/{0-clusters/3-node 1-distros/centos_latest 2-ceph/ceph_ansible 3-config/dmcrypt_off 4-tasks/ceph-admin-commands}

SELinux denials found on ubuntu@smithi136.front.sepia.ceph.com: ['type=AVC msg=audit(1594837645.598:6409): avc: denied { read } for pid=29336 comm="unix_chkpwd" name="shadow" dev="sda1" ino=61281 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', 'type=USER_AVC msg=audit(1594837645.680:6423): pid=2421 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_return dest=:1.1382 spid=2558 tpid=29335 scontext=system_u:system_r:systemd_logind_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', 'type=AVC msg=audit(1594837645.680:6424): avc: denied { read } for pid=29335 comm="sudo" name="utmp" dev="tmpfs" ino=14464 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837645.554:6406): avc: denied { execute } for pid=29335 comm="admin_socket" name="sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837645.597:6408): avc: denied { read open } for pid=29336 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837645.561:6407): avc: denied { setrlimit } for pid=29335 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', 'type=AVC msg=audit(1594837645.680:6425): avc: denied { lock } for pid=29335 comm="sudo" path="/run/utmp" dev="tmpfs" ino=14464 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837645.554:6406): avc: denied { map } for pid=29335 comm="sudo" path="/usr/bin/sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', 'type=USER_AVC msg=audit(1594837645.600:6416): pid=2421 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.login1.Manager member=CreateSession dest=org.freedesktop.login1 spid=29335 tpid=2558 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:systemd_logind_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', 'type=AVC msg=audit(1594837645.598:6410): avc: denied { getattr } for pid=29336 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=61281 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837645.598:6412): avc: denied { audit_write } for pid=29335 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1594837645.554:6406): avc: denied { execute_no_trans } for pid=29335 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837645.680:6429): avc: denied { setrlimit } for pid=29352 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', 'type=AVC msg=audit(1594837645.680:6427): avc: denied { audit_write } for pid=29335 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1594837645.680:6424): avc: denied { open } for pid=29335 comm="sudo" path="/run/utmp" dev="tmpfs" ino=14464 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837645.680:6427): avc: denied { nlmsg_relay } for pid=29335 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', 'type=AVC msg=audit(1594837645.680:6429): avc: denied { sys_resource } for pid=29352 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1594837645.561:6407): avc: denied { sys_resource } for pid=29335 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1594837645.598:6409): avc: denied { open } for pid=29336 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=61281 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837645.598:6412): avc: denied { nlmsg_relay } for pid=29335 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', 'type=AVC msg=audit(1594837645.597:6408): avc: denied { execute } for pid=29336 comm="sudo" name="unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837645.597:6408): avc: denied { map } for pid=29336 comm="unix_chkpwd" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837645.597:6408): avc: denied { execute_no_trans } for pid=29336 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837645.554:6406): avc: denied { read open } for pid=29335 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837645.680:6426): avc: denied { create } for pid=29335 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', 'type=AVC msg=audit(1594837645.598:6411): avc: denied { create } for pid=29335 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1']

5219420

FAIL

master

master

master

smithi

centos 8.1

smithi145 smithi179 smithi183

ceph-ansible/smoke/basic/{0-clusters/3-node 1-distros/centos_latest 2-ceph/ceph_ansible 3-config/bluestore_with_dmcrypt 4-tasks/rest}

SELinux denials found on ubuntu@smithi145.front.sepia.ceph.com: ['type=AVC msg=audit(1594837635.932:6535): avc: denied { audit_write } for pid=29683 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1594837635.852:6520): avc: denied { audit_write } for pid=29683 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1594837635.932:6534): avc: denied { create } for pid=29683 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', 'type=AVC msg=audit(1594837635.850:6516): avc: denied { map } for pid=29684 comm="unix_chkpwd" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837635.931:6532): avc: denied { open } for pid=29683 comm="sudo" path="/run/utmp" dev="tmpfs" ino=16453 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837635.809:6514): avc: denied { execute_no_trans } for pid=29683 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837635.809:6514): avc: denied { map } for pid=29683 comm="sudo" path="/usr/bin/sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', 'type=USER_AVC msg=audit(1594837635.931:6531): pid=2420 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_return dest=:1.1403 spid=2572 tpid=29683 scontext=system_u:system_r:systemd_logind_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', 'type=AVC msg=audit(1594837635.851:6517): avc: denied { open } for pid=29684 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=61281 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837635.931:6533): avc: denied { lock } for pid=29683 comm="sudo" path="/run/utmp" dev="tmpfs" ino=16453 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837635.816:6515): avc: denied { sys_resource } for pid=29683 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1594837635.932:6537): avc: denied { setrlimit } for pid=29698 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', 'type=AVC msg=audit(1594837635.851:6517): avc: denied { read } for pid=29684 comm="unix_chkpwd" name="shadow" dev="sda1" ino=61281 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837635.932:6535): avc: denied { nlmsg_relay } for pid=29683 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', 'type=AVC msg=audit(1594837635.850:6516): avc: denied { execute_no_trans } for pid=29684 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837635.850:6516): avc: denied { execute } for pid=29684 comm="sudo" name="unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837635.850:6516): avc: denied { read open } for pid=29684 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837635.809:6514): avc: denied { read open } for pid=29683 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837635.932:6537): avc: denied { sys_resource } for pid=29698 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', 'type=USER_AVC msg=audit(1594837635.853:6524): pid=2420 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.login1.Manager member=CreateSession dest=org.freedesktop.login1 spid=29683 tpid=2572 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:systemd_logind_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', 'type=AVC msg=audit(1594837635.931:6532): avc: denied { read } for pid=29683 comm="sudo" name="utmp" dev="tmpfs" ino=16453 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837635.816:6515): avc: denied { setrlimit } for pid=29683 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', 'type=AVC msg=audit(1594837635.809:6514): avc: denied { execute } for pid=29683 comm="admin_socket" name="sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837635.851:6519): avc: denied { create } for pid=29683 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', 'type=AVC msg=audit(1594837635.851:6518): avc: denied { getattr } for pid=29684 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=61281 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837635.852:6520): avc: denied { nlmsg_relay } for pid=29683 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1']

5219422

FAIL

master

master

master

smithi

centos 8.1

smithi071 smithi089 smithi151

ceph-ansible/smoke/basic/{0-clusters/3-node 1-distros/centos_latest 2-ceph/ceph_ansible 3-config/dmcrypt_off 4-tasks/rbd_import_export}

SELinux denials found on ubuntu@smithi151.front.sepia.ceph.com: ['type=AVC msg=audit(1594837870.589:6410): avc: denied { getattr } for pid=29330 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=61281 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837870.589:6409): avc: denied { open } for pid=29330 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=61281 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837870.669:6424): avc: denied { open } for pid=29329 comm="sudo" path="/run/utmp" dev="tmpfs" ino=13096 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837870.588:6408): avc: denied { map } for pid=29330 comm="unix_chkpwd" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837870.589:6411): avc: denied { create } for pid=29329 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', 'type=AVC msg=audit(1594837870.670:6427): avc: denied { audit_write } for pid=29329 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1594837870.670:6427): avc: denied { nlmsg_relay } for pid=29329 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', 'type=AVC msg=audit(1594837870.588:6408): avc: denied { execute_no_trans } for pid=29330 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837870.669:6425): avc: denied { lock } for pid=29329 comm="sudo" path="/run/utmp" dev="tmpfs" ino=13096 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837870.669:6424): avc: denied { read } for pid=29329 comm="sudo" name="utmp" dev="tmpfs" ino=13096 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837870.546:6406): avc: denied { read open } for pid=29329 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837870.670:6426): avc: denied { create } for pid=29329 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', 'type=AVC msg=audit(1594837870.589:6409): avc: denied { read } for pid=29330 comm="unix_chkpwd" name="shadow" dev="sda1" ino=61281 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837870.589:6412): avc: denied { audit_write } for pid=29329 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1594837870.589:6412): avc: denied { nlmsg_relay } for pid=29329 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', 'type=AVC msg=audit(1594837870.546:6406): avc: denied { execute_no_trans } for pid=29329 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', 'type=USER_AVC msg=audit(1594837870.669:6423): pid=2424 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_return dest=:1.1382 spid=2552 tpid=29329 scontext=system_u:system_r:systemd_logind_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', 'type=AVC msg=audit(1594837870.553:6407): avc: denied { setrlimit } for pid=29329 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', 'type=AVC msg=audit(1594837870.588:6408): avc: denied { read open } for pid=29330 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', 'type=USER_AVC msg=audit(1594837870.591:6416): pid=2424 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.login1.Manager member=CreateSession dest=org.freedesktop.login1 spid=29329 tpid=2552 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:systemd_logind_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', 'type=AVC msg=audit(1594837870.546:6406): avc: denied { execute } for pid=29329 comm="admin_socket" name="sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837870.588:6408): avc: denied { execute } for pid=29330 comm="sudo" name="unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837870.670:6429): avc: denied { setrlimit } for pid=29343 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', 'type=AVC msg=audit(1594837870.546:6406): avc: denied { map } for pid=29329 comm="sudo" path="/usr/bin/sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837870.670:6429): avc: denied { sys_resource } for pid=29343 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1594837870.553:6407): avc: denied { sys_resource } for pid=29329 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1']

5219424

FAIL

master

master

master

smithi

centos 8.1

smithi074 smithi131 smithi197

ceph-ansible/smoke/basic/{0-clusters/3-node 1-distros/centos_latest 2-ceph/ceph_ansible 3-config/dmcrypt_on 4-tasks/ceph-admin-commands}

SELinux denials found on ubuntu@smithi131.front.sepia.ceph.com: ['type=AVC msg=audit(1594838328.488:6406): avc: denied { map } for pid=29328 comm="sudo" path="/usr/bin/sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594838328.611:6424): avc: denied { read } for pid=29328 comm="sudo" name="utmp" dev="tmpfs" ino=1090 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594838328.530:6408): avc: denied { execute_no_trans } for pid=29329 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594838328.531:6412): avc: denied { nlmsg_relay } for pid=29328 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', 'type=AVC msg=audit(1594838328.611:6425): avc: denied { lock } for pid=29328 comm="sudo" path="/run/utmp" dev="tmpfs" ino=1090 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594838328.530:6408): avc: denied { map } for pid=29329 comm="unix_chkpwd" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594838328.495:6407): avc: denied { setrlimit } for pid=29328 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', 'type=AVC msg=audit(1594838328.611:6426): avc: denied { create } for pid=29328 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', 'type=AVC msg=audit(1594838328.611:6424): avc: denied { open } for pid=29328 comm="sudo" path="/run/utmp" dev="tmpfs" ino=1090 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594838328.611:6427): avc: denied { nlmsg_relay } for pid=29328 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', 'type=AVC msg=audit(1594838328.531:6411): avc: denied { create } for pid=29328 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', 'type=AVC msg=audit(1594838328.488:6406): avc: denied { execute_no_trans } for pid=29328 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594838328.488:6406): avc: denied { read open } for pid=29328 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594838328.530:6409): avc: denied { open } for pid=29329 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=61281 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594838328.531:6412): avc: denied { audit_write } for pid=29328 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1594838328.611:6429): avc: denied { setrlimit } for pid=29342 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', 'type=AVC msg=audit(1594838328.530:6408): avc: denied { read open } for pid=29329 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594838328.530:6410): avc: denied { getattr } for pid=29329 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=61281 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594838328.495:6407): avc: denied { sys_resource } for pid=29328 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1594838328.530:6408): avc: denied { execute } for pid=29329 comm="sudo" name="unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594838328.530:6409): avc: denied { read } for pid=29329 comm="unix_chkpwd" name="shadow" dev="sda1" ino=61281 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594838328.611:6427): avc: denied { audit_write } for pid=29328 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', 'type=USER_AVC msg=audit(1594838328.532:6416): pid=2399 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.login1.Manager member=CreateSession dest=org.freedesktop.login1 spid=29328 tpid=2554 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:systemd_logind_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', 'type=USER_AVC msg=audit(1594838328.610:6423): pid=2399 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_return dest=:1.1382 spid=2554 tpid=29328 scontext=system_u:system_r:systemd_logind_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', 'type=AVC msg=audit(1594838328.611:6429): avc: denied { sys_resource } for pid=29342 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1594838328.488:6406): avc: denied { execute } for pid=29328 comm="admin_socket" name="sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1']

5219426

FAIL

master

master

master

smithi

centos 8.1

smithi060 smithi086 smithi099

ceph-ansible/smoke/basic/{0-clusters/3-node 1-distros/centos_latest 2-ceph/ceph_ansible 3-config/dmcrypt_off 4-tasks/rest}

SELinux denials found on ubuntu@smithi099.front.sepia.ceph.com: ['type=AVC msg=audit(1594838551.794:6405): avc: denied { read open } for pid=29345 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', 'type=USER_AVC msg=audit(1594838551.919:6422): pid=2426 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_return dest=:1.1382 spid=2567 tpid=29345 scontext=system_u:system_r:systemd_logind_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', 'type=AVC msg=audit(1594838551.837:6407): avc: denied { execute } for pid=29346 comm="sudo" name="unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594838551.920:6428): avc: denied { sys_resource } for pid=29359 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1594838551.919:6423): avc: denied { open } for pid=29345 comm="sudo" path="/run/utmp" dev="tmpfs" ino=16454 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594838551.919:6426): avc: denied { nlmsg_relay } for pid=29345 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', 'type=AVC msg=audit(1594838551.838:6408): avc: denied { read } for pid=29346 comm="unix_chkpwd" name="shadow" dev="sda1" ino=61281 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594838551.838:6409): avc: denied { getattr } for pid=29346 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=61281 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594838551.838:6411): avc: denied { nlmsg_relay } for pid=29345 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', 'type=AVC msg=audit(1594838551.919:6423): avc: denied { read } for pid=29345 comm="sudo" name="utmp" dev="tmpfs" ino=16454 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594838551.837:6407): avc: denied { execute_no_trans } for pid=29346 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594838551.838:6411): avc: denied { audit_write } for pid=29345 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1594838551.794:6405): avc: denied { execute } for pid=29345 comm="admin_socket" name="sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594838551.838:6408): avc: denied { open } for pid=29346 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=61281 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594838551.837:6407): avc: denied { read open } for pid=29346 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594838551.919:6426): avc: denied { audit_write } for pid=29345 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1594838551.919:6424): avc: denied { lock } for pid=29345 comm="sudo" path="/run/utmp" dev="tmpfs" ino=16454 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594838551.919:6425): avc: denied { create } for pid=29345 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', 'type=AVC msg=audit(1594838551.801:6406): avc: denied { sys_resource } for pid=29345 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1594838551.837:6407): avc: denied { map } for pid=29346 comm="unix_chkpwd" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594838551.920:6428): avc: denied { setrlimit } for pid=29359 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', 'type=AVC msg=audit(1594838551.801:6406): avc: denied { setrlimit } for pid=29345 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', 'type=AVC msg=audit(1594838551.794:6405): avc: denied { execute_no_trans } for pid=29345 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594838551.794:6405): avc: denied { map } for pid=29345 comm="sudo" path="/usr/bin/sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594838551.838:6410): avc: denied { create } for pid=29345 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', 'type=USER_AVC msg=audit(1594838551.841:6415): pid=2426 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.login1.Manager member=CreateSession dest=org.freedesktop.login1 spid=29345 tpid=2567 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:systemd_logind_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"']

5219428

FAIL

master

master

master

smithi

centos 8.1

smithi023 smithi049 smithi142

ceph-ansible/smoke/basic/{0-clusters/3-node 1-distros/centos_latest 2-ceph/ceph_ansible 3-config/dmcrypt_on 4-tasks/rbd_import_export}

SELinux denials found on ubuntu@smithi142.front.sepia.ceph.com: ['type=AVC msg=audit(1594837887.513:6406): avc: denied { execute_no_trans } for pid=29338 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837887.513:6406): avc: denied { read open } for pid=29338 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', 'type=USER_AVC msg=audit(1594837887.558:6416): pid=2423 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.login1.Manager member=CreateSession dest=org.freedesktop.login1 spid=29338 tpid=2560 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:systemd_logind_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', 'type=AVC msg=audit(1594837887.519:6407): avc: denied { sys_resource } for pid=29338 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1594837887.513:6406): avc: denied { map } for pid=29338 comm="sudo" path="/usr/bin/sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837887.519:6407): avc: denied { setrlimit } for pid=29338 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', 'type=AVC msg=audit(1594837887.557:6412): avc: denied { nlmsg_relay } for pid=29338 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', 'type=AVC msg=audit(1594837887.648:6424): avc: denied { read } for pid=29338 comm="sudo" name="utmp" dev="tmpfs" ino=15517 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837887.556:6410): avc: denied { getattr } for pid=29339 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=61281 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837887.555:6408): avc: denied { execute } for pid=29339 comm="sudo" name="unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837887.648:6424): avc: denied { open } for pid=29338 comm="sudo" path="/run/utmp" dev="tmpfs" ino=15517 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837887.555:6408): avc: denied { read open } for pid=29339 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', 'type=USER_AVC msg=audit(1594837887.648:6423): pid=2423 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_return dest=:1.1382 spid=2560 tpid=29338 scontext=system_u:system_r:systemd_logind_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', 'type=AVC msg=audit(1594837887.649:6427): avc: denied { audit_write } for pid=29338 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1594837887.555:6408): avc: denied { execute_no_trans } for pid=29339 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837887.556:6409): avc: denied { read } for pid=29339 comm="unix_chkpwd" name="shadow" dev="sda1" ino=61281 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837887.649:6425): avc: denied { lock } for pid=29338 comm="sudo" path="/run/utmp" dev="tmpfs" ino=15517 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837887.649:6429): avc: denied { sys_resource } for pid=29355 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1594837887.649:6429): avc: denied { setrlimit } for pid=29355 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', 'type=AVC msg=audit(1594837887.649:6427): avc: denied { nlmsg_relay } for pid=29338 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', 'type=AVC msg=audit(1594837887.555:6408): avc: denied { map } for pid=29339 comm="unix_chkpwd" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837887.557:6411): avc: denied { create } for pid=29338 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', 'type=AVC msg=audit(1594837887.557:6412): avc: denied { audit_write } for pid=29338 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1594837887.513:6406): avc: denied { execute } for pid=29338 comm="admin_socket" name="sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594837887.649:6426): avc: denied { create } for pid=29338 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', 'type=AVC msg=audit(1594837887.556:6409): avc: denied { open } for pid=29339 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=61281 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1']

5219430

FAIL

master

master

master

smithi

centos 8.1

smithi051 smithi077 smithi125 smithi148

ceph-ansible/smoke/basic/{0-clusters/4-node 1-distros/centos_latest 2-ceph/ceph_ansible 3-config/bluestore_with_dmcrypt 4-tasks/ceph-admin-commands}

SELinux denials found on ubuntu@smithi051.front.sepia.ceph.com: ['type=AVC msg=audit(1594832384.493:6443): avc: denied { create } for pid=25503 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', 'type=AVC msg=audit(1594832384.438:6438): avc: denied { execute_no_trans } for pid=25503 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', 'type=USER_AVC msg=audit(1594832384.494:6448): pid=2400 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.login1.Manager member=CreateSession dest=org.freedesktop.login1 spid=25503 tpid=2546 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:systemd_logind_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', 'type=AVC msg=audit(1594832384.492:6441): avc: denied { read } for pid=25504 comm="unix_chkpwd" name="shadow" dev="sda1" ino=61279 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594832384.493:6444): avc: denied { audit_write } for pid=25503 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1594832384.587:6456): avc: denied { read } for pid=25503 comm="sudo" name="utmp" dev="tmpfs" ino=12040 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594832384.493:6444): avc: denied { nlmsg_relay } for pid=25503 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', 'type=AVC msg=audit(1594832384.587:6459): avc: denied { audit_write } for pid=25503 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1594832384.438:6438): avc: denied { map } for pid=25503 comm="sudo" path="/usr/bin/sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594832384.587:6459): avc: denied { nlmsg_relay } for pid=25503 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', 'type=AVC msg=audit(1594832384.492:6440): avc: denied { read open } for pid=25504 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594832384.492:6442): avc: denied { getattr } for pid=25504 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=61279 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594832384.492:6440): avc: denied { map } for pid=25504 comm="unix_chkpwd" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594832384.438:6438): avc: denied { execute } for pid=25503 comm="admin_socket" name="sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594832384.492:6441): avc: denied { open } for pid=25504 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=61279 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594832384.492:6440): avc: denied { execute_no_trans } for pid=25504 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', 'type=USER_AVC msg=audit(1594832384.587:6455): pid=2400 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_return dest=:1.1398 spid=2546 tpid=25503 scontext=system_u:system_r:systemd_logind_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', 'type=AVC msg=audit(1594832384.444:6439): avc: denied { setrlimit } for pid=25503 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', 'type=AVC msg=audit(1594832384.587:6457): avc: denied { lock } for pid=25503 comm="sudo" path="/run/utmp" dev="tmpfs" ino=12040 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594832384.588:6461): avc: denied { setrlimit } for pid=25516 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', 'type=AVC msg=audit(1594832384.587:6458): avc: denied { create } for pid=25503 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', 'type=AVC msg=audit(1594832384.444:6439): avc: denied { sys_resource } for pid=25503 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1594832384.492:6440): avc: denied { execute } for pid=25504 comm="sudo" name="unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594832384.438:6438): avc: denied { read open } for pid=25503 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594832384.588:6461): avc: denied { sys_resource } for pid=25516 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1594832384.587:6456): avc: denied { open } for pid=25503 comm="sudo" path="/run/utmp" dev="tmpfs" ino=12040 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1']

5219432

FAIL

master

master

master

smithi

centos 8.1

smithi014 smithi187 smithi190 smithi193

ceph-ansible/smoke/basic/{0-clusters/4-node 1-distros/centos_latest 2-ceph/ceph_ansible 3-config/dmcrypt_on 4-tasks/rest}

SELinux denials found on ubuntu@smithi193.front.sepia.ceph.com: ['type=AVC msg=audit(1594831300.064:6349): avc: denied { create } for pid=25127 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', 'type=AVC msg=audit(1594831299.985:6333): avc: denied { getattr } for pid=25128 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=61279 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594831300.064:6350): avc: denied { nlmsg_relay } for pid=25127 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', 'type=AVC msg=audit(1594831299.984:6331): avc: denied { execute } for pid=25128 comm="sudo" name="unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594831300.064:6348): avc: denied { lock } for pid=25127 comm="sudo" path="/run/utmp" dev="tmpfs" ino=13072 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594831299.943:6329): avc: denied { execute_no_trans } for pid=25127 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594831299.943:6329): avc: denied { map } for pid=25127 comm="sudo" path="/usr/bin/sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594831299.950:6330): avc: denied { sys_resource } for pid=25127 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1594831299.984:6331): avc: denied { map } for pid=25128 comm="unix_chkpwd" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594831299.985:6332): avc: denied { read } for pid=25128 comm="unix_chkpwd" name="shadow" dev="sda1" ino=61279 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594831300.064:6347): avc: denied { open } for pid=25127 comm="sudo" path="/run/utmp" dev="tmpfs" ino=13072 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594831299.943:6329): avc: denied { execute } for pid=25127 comm="admin_socket" name="sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', 'type=USER_AVC msg=audit(1594831299.986:6339): pid=2406 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.login1.Manager member=CreateSession dest=org.freedesktop.login1 spid=25127 tpid=2559 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:systemd_logind_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', 'type=USER_AVC msg=audit(1594831300.064:6346): pid=2406 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_return dest=:1.1376 spid=2559 tpid=25127 scontext=system_u:system_r:systemd_logind_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', 'type=AVC msg=audit(1594831299.943:6329): avc: denied { read open } for pid=25127 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594831299.985:6335): avc: denied { audit_write } for pid=25127 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1594831299.985:6335): avc: denied { nlmsg_relay } for pid=25127 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', 'type=AVC msg=audit(1594831300.064:6347): avc: denied { read } for pid=25127 comm="sudo" name="utmp" dev="tmpfs" ino=13072 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594831299.985:6332): avc: denied { open } for pid=25128 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=61279 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594831299.950:6330): avc: denied { setrlimit } for pid=25127 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', 'type=AVC msg=audit(1594831300.065:6352): avc: denied { setrlimit } for pid=25140 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', 'type=AVC msg=audit(1594831299.985:6334): avc: denied { create } for pid=25127 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', 'type=AVC msg=audit(1594831299.984:6331): avc: denied { execute_no_trans } for pid=25128 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594831300.064:6350): avc: denied { audit_write } for pid=25127 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1594831300.065:6352): avc: denied { sys_resource } for pid=25140 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1594831299.984:6331): avc: denied { read open } for pid=25128 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1']

5219434

FAIL

master

master

master

smithi

centos 8.1

smithi120 smithi143 smithi150 smithi173

ceph-ansible/smoke/basic/{0-clusters/4-node 1-distros/centos_latest 2-ceph/ceph_ansible 3-config/bluestore_with_dmcrypt 4-tasks/rbd_import_export}

SELinux denials found on ubuntu@smithi173.front.sepia.ceph.com: ['type=AVC msg=audit(1594830849.317:6332): avc: denied { map } for pid=25134 comm="unix_chkpwd" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', 'type=USER_AVC msg=audit(1594830849.319:6340): pid=2427 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.login1.Manager member=CreateSession dest=org.freedesktop.login1 spid=25133 tpid=2563 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:systemd_logind_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', 'type=AVC msg=audit(1594830849.275:6330): avc: denied { read open } for pid=25133 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594830849.398:6353): avc: denied { setrlimit } for pid=25145 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', 'type=AVC msg=audit(1594830849.398:6348): avc: denied { read } for pid=25133 comm="sudo" name="utmp" dev="tmpfs" ino=15461 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594830849.398:6350): avc: denied { create } for pid=25133 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', 'type=AVC msg=audit(1594830849.281:6331): avc: denied { setrlimit } for pid=25133 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', 'type=AVC msg=audit(1594830849.281:6331): avc: denied { sys_resource } for pid=25133 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1594830849.398:6351): avc: denied { audit_write } for pid=25133 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1594830849.275:6330): avc: denied { execute_no_trans } for pid=25133 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594830849.318:6334): avc: denied { getattr } for pid=25134 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=61278 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594830849.398:6351): avc: denied { nlmsg_relay } for pid=25133 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', 'type=AVC msg=audit(1594830849.398:6348): avc: denied { open } for pid=25133 comm="sudo" path="/run/utmp" dev="tmpfs" ino=15461 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594830849.318:6336): avc: denied { audit_write } for pid=25133 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1594830849.275:6330): avc: denied { execute } for pid=25133 comm="admin_socket" name="sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594830849.318:6336): avc: denied { nlmsg_relay } for pid=25133 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', 'type=AVC msg=audit(1594830849.317:6332): avc: denied { read open } for pid=25134 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594830849.317:6332): avc: denied { execute_no_trans } for pid=25134 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594830849.398:6353): avc: denied { sys_resource } for pid=25145 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1594830849.317:6333): avc: denied { read } for pid=25134 comm="unix_chkpwd" name="shadow" dev="sda1" ino=61278 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594830849.317:6332): avc: denied { execute } for pid=25134 comm="sudo" name="unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594830849.275:6330): avc: denied { map } for pid=25133 comm="sudo" path="/usr/bin/sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594830849.317:6333): avc: denied { open } for pid=25134 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=61278 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594830849.318:6335): avc: denied { create } for pid=25133 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', 'type=AVC msg=audit(1594830849.398:6349): avc: denied { lock } for pid=25133 comm="sudo" path="/run/utmp" dev="tmpfs" ino=15461 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', 'type=USER_AVC msg=audit(1594830849.397:6347): pid=2427 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_return dest=:1.1376 spid=2563 tpid=25133 scontext=system_u:system_r:systemd_logind_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"']

5219436

FAIL

master

master

master

smithi

centos 8.1

smithi044 smithi164 smithi184 smithi185

ceph-ansible/smoke/basic/{0-clusters/4-node 1-distros/centos_latest 2-ceph/ceph_ansible 3-config/dmcrypt_off 4-tasks/ceph-admin-commands}

SELinux denials found on ubuntu@smithi184.front.sepia.ceph.com: ['type=AVC msg=audit(1594834471.515:6311): avc: denied { open } for pid=25049 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=61279 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594834471.515:6311): avc: denied { read } for pid=25049 comm="unix_chkpwd" name="shadow" dev="sda1" ino=61279 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594834471.595:6326): avc: denied { open } for pid=25048 comm="sudo" path="/run/utmp" dev="tmpfs" ino=17532 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594834471.473:6308): avc: denied { execute } for pid=25048 comm="admin_socket" name="sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', 'type=USER_AVC msg=audit(1594834471.595:6325): pid=2412 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_return dest=:1.1371 spid=2549 tpid=25048 scontext=system_u:system_r:systemd_logind_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', 'type=AVC msg=audit(1594834471.595:6328): avc: denied { create } for pid=25048 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', 'type=AVC msg=audit(1594834471.515:6314): avc: denied { nlmsg_relay } for pid=25048 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', 'type=AVC msg=audit(1594834471.479:6309): avc: denied { sys_resource } for pid=25048 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1594834471.515:6312): avc: denied { getattr } for pid=25049 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=61279 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594834471.596:6331): avc: denied { setrlimit } for pid=25061 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', 'type=AVC msg=audit(1594834471.473:6308): avc: denied { execute_no_trans } for pid=25048 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594834471.595:6326): avc: denied { read } for pid=25048 comm="sudo" name="utmp" dev="tmpfs" ino=17532 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594834471.514:6310): avc: denied { map } for pid=25049 comm="unix_chkpwd" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594834471.473:6308): avc: denied { read open } for pid=25048 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594834471.515:6314): avc: denied { audit_write } for pid=25048 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1594834471.479:6309): avc: denied { setrlimit } for pid=25048 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', 'type=AVC msg=audit(1594834471.514:6310): avc: denied { execute_no_trans } for pid=25049 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594834471.515:6313): avc: denied { create } for pid=25048 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', 'type=AVC msg=audit(1594834471.596:6331): avc: denied { sys_resource } for pid=25061 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1594834471.514:6310): avc: denied { read open } for pid=25049 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594834471.473:6308): avc: denied { map } for pid=25048 comm="sudo" path="/usr/bin/sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594834471.595:6329): avc: denied { audit_write } for pid=25048 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1594834471.595:6329): avc: denied { nlmsg_relay } for pid=25048 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', 'type=AVC msg=audit(1594834471.595:6327): avc: denied { lock } for pid=25048 comm="sudo" path="/run/utmp" dev="tmpfs" ino=17532 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', 'type=USER_AVC msg=audit(1594834471.516:6318): pid=2412 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.login1.Manager member=CreateSession dest=org.freedesktop.login1 spid=25048 tpid=2549 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:systemd_logind_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', 'type=AVC msg=audit(1594834471.514:6310): avc: denied { execute } for pid=25049 comm="sudo" name="unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1']

5219438

FAIL

master

master

master

smithi

centos 8.1

smithi037 smithi063 smithi118 smithi162

ceph-ansible/smoke/basic/{0-clusters/4-node 1-distros/centos_latest 2-ceph/ceph_ansible 3-config/bluestore_with_dmcrypt 4-tasks/rest}

SELinux denials found on ubuntu@smithi162.front.sepia.ceph.com: ['type=AVC msg=audit(1594836233.402:6353): avc: denied { audit_write } for pid=25097 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1594836233.322:6334): avc: denied { execute } for pid=25098 comm="sudo" name="unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594836233.322:6334): avc: denied { map } for pid=25098 comm="unix_chkpwd" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594836233.280:6332): avc: denied { execute } for pid=25097 comm="admin_socket" name="sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594836233.322:6334): avc: denied { read open } for pid=25098 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594836233.402:6353): avc: denied { nlmsg_relay } for pid=25097 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', 'type=AVC msg=audit(1594836233.323:6336): avc: denied { getattr } for pid=25098 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=61279 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594836233.402:6352): avc: denied { create } for pid=25097 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', 'type=AVC msg=audit(1594836233.323:6335): avc: denied { read } for pid=25098 comm="unix_chkpwd" name="shadow" dev="sda1" ino=61279 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594836233.322:6334): avc: denied { execute_no_trans } for pid=25098 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594836233.402:6350): avc: denied { read } for pid=25097 comm="sudo" name="utmp" dev="tmpfs" ino=2144 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594836233.280:6332): avc: denied { map } for pid=25097 comm="sudo" path="/usr/bin/sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594836233.287:6333): avc: denied { sys_resource } for pid=25097 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1594836233.287:6333): avc: denied { setrlimit } for pid=25097 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', 'type=AVC msg=audit(1594836233.403:6355): avc: denied { sys_resource } for pid=25109 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1594836233.323:6338): avc: denied { audit_write } for pid=25097 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1594836233.280:6332): avc: denied { execute_no_trans } for pid=25097 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', 'type=USER_AVC msg=audit(1594836233.401:6349): pid=2419 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_return dest=:1.1377 spid=2552 tpid=25097 scontext=system_u:system_r:systemd_logind_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', 'type=AVC msg=audit(1594836233.403:6355): avc: denied { setrlimit } for pid=25109 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', 'type=AVC msg=audit(1594836233.280:6332): avc: denied { read open } for pid=25097 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594836233.402:6351): avc: denied { lock } for pid=25097 comm="sudo" path="/run/utmp" dev="tmpfs" ino=2144 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594836233.402:6350): avc: denied { open } for pid=25097 comm="sudo" path="/run/utmp" dev="tmpfs" ino=2144 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594836233.323:6337): avc: denied { create } for pid=25097 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', 'type=USER_AVC msg=audit(1594836233.325:6342): pid=2419 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.login1.Manager member=CreateSession dest=org.freedesktop.login1 spid=25097 tpid=2552 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:systemd_logind_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', 'type=AVC msg=audit(1594836233.323:6338): avc: denied { nlmsg_relay } for pid=25097 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', 'type=AVC msg=audit(1594836233.323:6335): avc: denied { open } for pid=25098 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=61279 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1']

5219440

FAIL

master

master

master

smithi

centos 8.1

smithi022 smithi075 smithi097 smithi155

ceph-ansible/smoke/basic/{0-clusters/4-node 1-distros/centos_latest 2-ceph/ceph_ansible 3-config/dmcrypt_off 4-tasks/rbd_import_export}

SELinux denials found on ubuntu@smithi075.front.sepia.ceph.com: ['type=AVC msg=audit(1594830735.175:6333): avc: denied { lock } for pid=25095 comm="sudo" path="/run/utmp" dev="tmpfs" ino=15459 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594830735.054:6314): avc: denied { map } for pid=25095 comm="sudo" path="/usr/bin/sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594830735.054:6314): avc: denied { read open } for pid=25095 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594830735.095:6316): avc: denied { read open } for pid=25096 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594830735.175:6332): avc: denied { open } for pid=25095 comm="sudo" path="/run/utmp" dev="tmpfs" ino=15459 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594830735.096:6317): avc: denied { read } for pid=25096 comm="unix_chkpwd" name="shadow" dev="sda1" ino=61278 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594830735.175:6334): avc: denied { create } for pid=25095 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', 'type=AVC msg=audit(1594830735.096:6319): avc: denied { create } for pid=25095 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', 'type=AVC msg=audit(1594830735.096:6317): avc: denied { open } for pid=25096 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=61278 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594830735.175:6332): avc: denied { read } for pid=25095 comm="sudo" name="utmp" dev="tmpfs" ino=15459 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594830735.175:6337): avc: denied { setrlimit } for pid=25107 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', 'type=AVC msg=audit(1594830735.061:6315): avc: denied { setrlimit } for pid=25095 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', 'type=AVC msg=audit(1594830735.175:6335): avc: denied { nlmsg_relay } for pid=25095 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', 'type=AVC msg=audit(1594830735.096:6318): avc: denied { getattr } for pid=25096 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=61278 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594830735.175:6335): avc: denied { audit_write } for pid=25095 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1594830735.175:6337): avc: denied { sys_resource } for pid=25107 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', 'type=USER_AVC msg=audit(1594830735.174:6331): pid=2407 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_return dest=:1.1372 spid=2557 tpid=25095 scontext=system_u:system_r:systemd_logind_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', 'type=AVC msg=audit(1594830735.054:6314): avc: denied { execute_no_trans } for pid=25095 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', 'type=USER_AVC msg=audit(1594830735.098:6324): pid=2407 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.login1.Manager member=CreateSession dest=org.freedesktop.login1 spid=25095 tpid=2557 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:systemd_logind_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', 'type=AVC msg=audit(1594830735.095:6316): avc: denied { map } for pid=25096 comm="unix_chkpwd" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594830735.061:6315): avc: denied { sys_resource } for pid=25095 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1594830735.095:6316): avc: denied { execute_no_trans } for pid=25096 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594830735.054:6314): avc: denied { execute } for pid=25095 comm="admin_socket" name="sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594830735.096:6320): avc: denied { nlmsg_relay } for pid=25095 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', 'type=AVC msg=audit(1594830735.095:6316): avc: denied { execute } for pid=25096 comm="sudo" name="unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594830735.096:6320): avc: denied { audit_write } for pid=25095 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1']

5219442

FAIL

master

master

master

smithi

centos 8.1

smithi037 smithi073 smithi095 smithi205

ceph-ansible/smoke/basic/{0-clusters/4-node 1-distros/centos_latest 2-ceph/ceph_ansible 3-config/dmcrypt_on 4-tasks/ceph-admin-commands}

SELinux denials found on ubuntu@smithi073.front.sepia.ceph.com: ['type=USER_AVC msg=audit(1594832011.260:6436): pid=2418 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_return dest=:1.1393 spid=2557 tpid=25442 scontext=system_u:system_r:systemd_logind_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', 'type=AVC msg=audit(1594832011.183:6423): avc: denied { getattr } for pid=25443 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=61278 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594832011.183:6425): avc: denied { nlmsg_relay } for pid=25442 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', 'type=AVC msg=audit(1594832011.261:6438): avc: denied { lock } for pid=25442 comm="sudo" path="/run/utmp" dev="tmpfs" ino=12059 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594832011.182:6421): avc: denied { execute_no_trans } for pid=25443 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594832011.183:6422): avc: denied { open } for pid=25443 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=61278 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594832011.183:6424): avc: denied { create } for pid=25442 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', 'type=AVC msg=audit(1594832011.146:6420): avc: denied { sys_resource } for pid=25442 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1594832011.140:6419): avc: denied { map } for pid=25442 comm="sudo" path="/usr/bin/sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594832011.140:6419): avc: denied { read open } for pid=25442 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594832011.261:6439): avc: denied { create } for pid=25442 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', 'type=AVC msg=audit(1594832011.261:6440): avc: denied { nlmsg_relay } for pid=25442 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', 'type=AVC msg=audit(1594832011.182:6421): avc: denied { read open } for pid=25443 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594832011.261:6437): avc: denied { read } for pid=25442 comm="sudo" name="utmp" dev="tmpfs" ino=12059 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594832011.261:6442): avc: denied { sys_resource } for pid=25454 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1594832011.261:6442): avc: denied { setrlimit } for pid=25454 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', 'type=USER_AVC msg=audit(1594832011.184:6429): pid=2418 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.login1.Manager member=CreateSession dest=org.freedesktop.login1 spid=25442 tpid=2557 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:systemd_logind_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', 'type=AVC msg=audit(1594832011.261:6437): avc: denied { open } for pid=25442 comm="sudo" path="/run/utmp" dev="tmpfs" ino=12059 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594832011.261:6440): avc: denied { audit_write } for pid=25442 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1594832011.140:6419): avc: denied { execute } for pid=25442 comm="admin_socket" name="sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594832011.182:6421): avc: denied { execute } for pid=25443 comm="sudo" name="unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594832011.183:6422): avc: denied { read } for pid=25443 comm="unix_chkpwd" name="shadow" dev="sda1" ino=61278 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594832011.146:6420): avc: denied { setrlimit } for pid=25442 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', 'type=AVC msg=audit(1594832011.182:6421): avc: denied { map } for pid=25443 comm="unix_chkpwd" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594832011.140:6419): avc: denied { execute_no_trans } for pid=25442 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594832011.183:6425): avc: denied { audit_write } for pid=25442 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1']

5219444

FAIL

master

master

master

smithi

centos 8.1

smithi163 smithi187 smithi190 smithi192

ceph-ansible/smoke/basic/{0-clusters/4-node 1-distros/centos_latest 2-ceph/ceph_ansible 3-config/dmcrypt_off 4-tasks/rest}

SELinux denials found on ubuntu@smithi187.front.sepia.ceph.com: ['type=AVC msg=audit(1594838533.750:6315): avc: denied { create } for pid=25076 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', 'type=AVC msg=audit(1594838533.830:6331): avc: denied { audit_write } for pid=25076 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1594838533.750:6316): avc: denied { audit_write } for pid=25076 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1594838533.831:6333): avc: denied { setrlimit } for pid=25089 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', 'type=AVC msg=audit(1594838533.707:6310): avc: denied { execute } for pid=25076 comm="admin_socket" name="sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594838533.707:6310): avc: denied { read open } for pid=25076 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594838533.750:6316): avc: denied { nlmsg_relay } for pid=25076 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', 'type=AVC msg=audit(1594838533.707:6310): avc: denied { map } for pid=25076 comm="sudo" path="/usr/bin/sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594838533.830:6331): avc: denied { nlmsg_relay } for pid=25076 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', 'type=AVC msg=audit(1594838533.750:6313): avc: denied { read } for pid=25077 comm="unix_chkpwd" name="shadow" dev="sda1" ino=61278 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594838533.749:6312): avc: denied { execute } for pid=25077 comm="sudo" name="unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594838533.713:6311): avc: denied { sys_resource } for pid=25076 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1594838533.749:6312): avc: denied { map } for pid=25077 comm="unix_chkpwd" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', 'type=USER_AVC msg=audit(1594838533.751:6320): pid=2445 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.login1.Manager member=CreateSession dest=org.freedesktop.login1 spid=25076 tpid=2549 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:systemd_logind_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', 'type=USER_AVC msg=audit(1594838533.830:6327): pid=2445 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_return dest=:1.1371 spid=2549 tpid=25076 scontext=system_u:system_r:systemd_logind_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', 'type=AVC msg=audit(1594838533.749:6312): avc: denied { execute_no_trans } for pid=25077 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594838533.830:6328): avc: denied { read } for pid=25076 comm="sudo" name="utmp" dev="tmpfs" ino=14463 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594838533.830:6328): avc: denied { open } for pid=25076 comm="sudo" path="/run/utmp" dev="tmpfs" ino=14463 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594838533.750:6314): avc: denied { getattr } for pid=25077 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=61278 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594838533.831:6333): avc: denied { sys_resource } for pid=25089 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1594838533.830:6329): avc: denied { lock } for pid=25076 comm="sudo" path="/run/utmp" dev="tmpfs" ino=14463 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594838533.830:6330): avc: denied { create } for pid=25076 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', 'type=AVC msg=audit(1594838533.707:6310): avc: denied { execute_no_trans } for pid=25076 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594838533.750:6313): avc: denied { open } for pid=25077 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=61278 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594838533.749:6312): avc: denied { read open } for pid=25077 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594838533.713:6311): avc: denied { setrlimit } for pid=25076 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1']

5219446

FAIL

master

master

master

smithi

centos 8.1

smithi035 smithi068 smithi081 smithi093

ceph-ansible/smoke/basic/{0-clusters/4-node 1-distros/centos_latest 2-ceph/ceph_ansible 3-config/dmcrypt_on 4-tasks/rbd_import_export}

SELinux denials found on ubuntu@smithi035.front.sepia.ceph.com: ['type=AVC msg=audit(1594843455.743:6445): avc: denied { nlmsg_relay } for pid=25502 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', 'type=AVC msg=audit(1594843455.744:6447): avc: denied { sys_resource } for pid=25514 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1594843455.649:6430): avc: denied { nlmsg_relay } for pid=25502 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', 'type=AVC msg=audit(1594843455.593:6424): avc: denied { map } for pid=25502 comm="sudo" path="/usr/bin/sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594843455.647:6426): avc: denied { execute } for pid=25503 comm="sudo" name="unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594843455.593:6424): avc: denied { read open } for pid=25502 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594843455.648:6427): avc: denied { open } for pid=25503 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=61279 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594843455.648:6427): avc: denied { read } for pid=25503 comm="unix_chkpwd" name="shadow" dev="sda1" ino=61279 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594843455.593:6424): avc: denied { execute } for pid=25502 comm="admin_socket" name="sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594843455.593:6424): avc: denied { execute_no_trans } for pid=25502 comm="admin_socket" path="/usr/bin/sudo" dev="sda1" ino=5064 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594843455.743:6442): avc: denied { open } for pid=25502 comm="sudo" path="/run/utmp" dev="tmpfs" ino=12084 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594843455.743:6445): avc: denied { audit_write } for pid=25502 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1594843455.744:6447): avc: denied { setrlimit } for pid=25514 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', 'type=AVC msg=audit(1594843455.600:6425): avc: denied { setrlimit } for pid=25502 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=process permissive=1', 'type=AVC msg=audit(1594843455.648:6429): avc: denied { create } for pid=25502 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', 'type=USER_AVC msg=audit(1594843455.650:6434): pid=2451 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.login1.Manager member=CreateSession dest=org.freedesktop.login1 spid=25502 tpid=2557 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:systemd_logind_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', 'type=AVC msg=audit(1594843455.647:6426): avc: denied { read open } for pid=25503 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594843455.649:6430): avc: denied { audit_write } for pid=25502 comm="sudo" capability=29 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1594843455.743:6444): avc: denied { create } for pid=25502 comm="sudo" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=netlink_audit_socket permissive=1', 'type=AVC msg=audit(1594843455.743:6442): avc: denied { read } for pid=25502 comm="sudo" name="utmp" dev="tmpfs" ino=12084 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594843455.647:6426): avc: denied { map } for pid=25503 comm="unix_chkpwd" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594843455.600:6425): avc: denied { sys_resource } for pid=25502 comm="sudo" capability=24 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=capability permissive=1', 'type=USER_AVC msg=audit(1594843455.742:6441): pid=2451 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=\'avc: denied { send_msg } for msgtype=method_return dest=:1.1395 spid=2557 tpid=25502 scontext=system_u:system_r:systemd_logind_t:s0 tcontext=system_u:system_r:ceph_t:s0 tclass=dbus permissive=1 exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?\'\x1dUID="dbus" AUID="unset" SAUID="dbus"', 'type=AVC msg=audit(1594843455.743:6443): avc: denied { lock } for pid=25502 comm="sudo" path="/run/utmp" dev="tmpfs" ino=12084 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594843455.648:6428): avc: denied { getattr } for pid=25503 comm="unix_chkpwd" path="/etc/shadow" dev="sda1" ino=61279 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1594843455.647:6426): avc: denied { execute_no_trans } for pid=25503 comm="sudo" path="/usr/sbin/unix_chkpwd" dev="sda1" ino=3300 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=1']