Pulpito

yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695156

Posted Started Updated
Runtime
Duration
In Waiting
 Machine Teuthology Branch OS Type OS Version Nodes Status
2022-02-18 22:55:52 2022-02-19 14:19:42 2022-02-19 14:51:46 0:32:04 0:18:46 0:13:18 smithi master centos 8.stream 3 fail

Description: upgrade/cephfs/featureful_client/upgraded_client/{bluestore-bitmap centos_latest clusters/1-mds-2-client-micro conf/{client mds mon osd} overrides/{multimds/yes pg-warn whitelist_health whitelist_wrongly_marked_down} tasks/{0-octopus 1-client 2-upgrade 3-client-upgrade 4-compat_client 5-client-sanity}}

Log: http://qa-proxy.ceph.com/teuthology/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695156/teuthology.log

Failure Reason:

SELinux denials found on ubuntu@smithi142.front.sepia.ceph.com: ['type=AVC msg=audit(1645281558.897:6950): avc: denied { open } for pid=29739 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11735 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.733:7747): avc: denied { setattr } for pid=32897 comm="chronyc" name="chronyc.32897.sock" dev="tmpfs" ino=219816 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281558.895:6945): avc: denied { map } for pid=29739 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.901:6956): avc: denied { ioctl } for pid=29745 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 ioctlcmd=0x5401 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.728:7737): avc: denied { getattr } for pid=32894 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.727:7735): avc: denied { execute } for pid=32894 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.733:7746): avc: denied { add_name } for pid=32897 comm="chronyc" name="chronyc.32897.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645281968.733:7746): avc: denied { write } for pid=32897 comm="chronyc" name="chrony" dev="tmpfs" ino=22999 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645281804.890:7421): avc: denied { read open } for pid=31542 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.897:6950): avc: denied { read } for pid=29739 comm="11-dhclient" name="passwd" dev="sda1" ino=11735 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.909:6969): avc: denied { write } for pid=29752 comm="chronyc" name="chrony" dev="tmpfs" ino=22999 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645281558.907:6963): avc: denied { execute_no_trans } for pid=29752 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.231:7354): avc: denied { map } for pid=31413 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.733:7750): avc: denied { remove_name } for pid=32897 comm="chronyc" name="chronyc.32897.sock" dev="tmpfs" ino=219816 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645281804.895:7427): avc: denied { read } for pid=31549 comm="chrony-helper" name="dhclient" dev="sda1" ino=1965 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:dhcpc_state_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645281558.909:6969): avc: denied { add_name } for pid=29752 comm="chronyc" name="chronyc.29752.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645281968.733:7748): avc: denied { sendto } for pid=32897 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645281968.728:7741): avc: denied { getattr } for pid=32894 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11735 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.907:6963): avc: denied { map } for pid=29752 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.232:7359): avc: denied { read } for pid=31413 comm="11-dhclient" name="passwd" dev="sda1" ino=11735 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.889:7420): avc: denied { map } for pid=31539 comm="rm" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.900:6954): avc: denied { execute_no_trans } for pid=29745 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.889:7420): avc: denied { execute_no_trans } for pid=31539 comm="20-chrony-dhcp" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.728:7739): avc: denied { write } for pid=32894 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281804.237:7365): avc: denied { add_name } for pid=31416 comm="chronyc" name="chronyc.31416.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645281804.232:7359): avc: denied { open } for pid=31413 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11735 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.907:6963): avc: denied { execute } for pid=29752 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.896:6949): avc: denied { write } for pid=29739 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281804.237:7367): avc: denied { sendto } for pid=31416 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645281804.237:7365): avc: denied { dac_override } for pid=31416 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645281558.896:6946): avc: denied { open } for pid=29739 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.235:7362): avc: denied { execute_no_trans } for pid=31416 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.895:6945): avc: denied { execute } for pid=29739 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.733:7748): avc: denied { write } for pid=32897 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=169119 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281804.892:7424): avc: denied { open } for pid=31542 comm="chrony-helper" path="/run/chrony-helper/lock" dev="tmpfs" ino=24791 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.896:6946): avc: denied { read } for pid=29739 comm="11-dhclient" name="passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.733:7746): avc: denied { create } for pid=32897 comm="chronyc" name="chronyc.32897.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281804.895:7426): avc: denied { read } for pid=31549 comm="chrony-helper" name="chrony-helper" dev="tmpfs" ino=21840 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645281558.909:6967): avc: denied { create } for pid=29752 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645281804.892:7424): avc: denied { write } for pid=31542 comm="chrony-helper" name="lock" dev="tmpfs" ino=24791 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.238:7369): avc: denied { unlink } for pid=31416 comm="chronyc" name="chronyc.31416.sock" dev="tmpfs" ino=197590 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281968.733:7750): avc: denied { unlink } for pid=32897 comm="chronyc" name="chronyc.32897.sock" dev="tmpfs" ino=219816 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281968.733:7745): avc: denied { dac_read_search } for pid=32897 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645281558.899:6953): avc: denied { execute_no_trans } for pid=29743 comm="20-chrony-dhcp" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.902:6957): avc: denied { write } for pid=29745 comm="chrony-helper" name="lock" dev="tmpfs" ino=24791 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.237:7368): avc: denied { sendto } for pid=26398 comm="chronyd" path="/run/chrony/chronyc.31416.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645281558.896:6947): avc: denied { getattr } for pid=29739 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.733:7746): avc: denied { dac_override } for pid=32897 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645281804.232:7360): avc: denied { getattr } for pid=31413 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11735 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.890:7421): avc: denied { execute_no_trans } for pid=31542 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.909:6969): avc: denied { dac_override } for pid=29752 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645281558.909:6971): avc: denied { write } for pid=29752 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=169119 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281804.231:7354): avc: denied { execute_no_trans } for pid=31413 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.905:6960): avc: denied { read } for pid=29748 comm="chrony-helper" name="chrony-helper" dev="tmpfs" ino=21840 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645281968.727:7735): avc: denied { map } for pid=32894 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.728:7740): avc: denied { read } for pid=32894 comm="11-dhclient" name="passwd" dev="sda1" ino=11735 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.731:7743): avc: denied { read open } for pid=32897 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.909:6969): avc: denied { create } for pid=29752 comm="chronyc" name="chronyc.29752.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281558.909:6973): avc: denied { unlink } for pid=29752 comm="chronyc" name="chronyc.29752.sock" dev="tmpfs" ino=183883 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281804.891:7423): avc: denied { ioctl } for pid=31542 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 ioctlcmd=0x5401 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.909:6971): avc: denied { sendto } for pid=29752 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645281804.238:7369): avc: denied { remove_name } for pid=31416 comm="chronyc" name="chronyc.31416.sock" dev="tmpfs" ino=197590 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645281558.909:6973): avc: denied { remove_name } for pid=29752 comm="chronyc" name="chronyc.29752.sock" dev="tmpfs" ino=183883 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645281804.235:7362): avc: denied { execute } for pid=31416 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.237:7367): avc: denied { write } for pid=31416 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=169119 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281558.909:6972): avc: denied { sendto } for pid=26398 comm="chronyd" path="/run/chrony/chronyc.29752.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645281968.731:7743): avc: denied { execute } for pid=32897 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.895:6945): avc: denied { execute_no_trans } for pid=29739 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.909:6968): avc: denied { dac_read_search } for pid=29752 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645281558.896:6949): avc: denied { connectto } for pid=29739 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645281804.232:7357): avc: denied { map } for pid=31413 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.895:6945): avc: denied { execute } for pid=29739 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.900:6954): avc: denied { read open } for pid=29745 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.902:6957): avc: denied { open } for pid=29745 comm="chrony-helper" path="/run/chrony-helper/lock" dev="tmpfs" ino=24791 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.731:7743): avc: denied { execute_no_trans } for pid=32897 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.237:7363): avc: denied { create } for pid=31416 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645281968.728:7740): avc: denied { open } for pid=32894 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11735 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.897:6951): avc: denied { getattr } for pid=29739 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11735 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.903:6958): avc: denied { lock } for pid=29747 comm="flock" path="/run/chrony-helper/lock" dev="tmpfs" ino=24791 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.232:7358): avc: denied { write } for pid=31413 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281558.900:6954): avc: denied { execute } for pid=29745 comm="20-chrony-dhcp" name="chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.237:7365): avc: denied { create } for pid=31416 comm="chronyc" name="chronyc.31416.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281804.235:7362): avc: denied { map } for pid=31416 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.733:7744): avc: denied { create } for pid=32897 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645281804.231:7354): avc: denied { execute } for pid=31413 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.906:6962): avc: denied { execute } for pid=29750 comm="nm-dispatcher" name="20-chrony-onoffline" dev="sda1" ino=591 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.896:6948): avc: denied { map } for pid=29739 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.731:7743): avc: denied { map } for pid=32897 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.231:7354): avc: denied { execute } for pid=31413 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.733:7749): avc: denied { sendto } for pid=26398 comm="chronyd" path="/run/chrony/chronyc.32897.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645281804.232:7355): avc: denied { read } for pid=31413 comm="11-dhclient" name="passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.899:6953): avc: denied { map } for pid=29743 comm="rm" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.727:7735): avc: denied { execute } for pid=32894 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.887:7419): avc: denied { write } for pid=31532 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281804.235:7362): avc: denied { read open } for pid=31416 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.232:7358): avc: denied { connectto } for pid=31413 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645281968.728:7738): avc: denied { map } for pid=32894 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.891:7422): avc: denied { getattr } for pid=31542 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.232:7356): avc: denied { getattr } for pid=31413 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.232:7355): avc: denied { open } for pid=31413 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.893:7425): avc: denied { lock } for pid=31547 comm="flock" path="/run/chrony-helper/lock" dev="tmpfs" ino=24791 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.898:7428): avc: denied { create } for pid=31556 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645281804.232:7361): avc: denied { execute } for pid=31413 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.909:6970): avc: denied { setattr } for pid=29752 comm="chronyc" name="chronyc.29752.sock" dev="tmpfs" ino=183883 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281968.728:7736): avc: denied { open } for pid=32894 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.237:7366): avc: denied { setattr } for pid=31416 comm="chronyc" name="chronyc.31416.sock" dev="tmpfs" ino=197590 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281804.237:7365): avc: denied { write } for pid=31416 comm="chronyc" name="chrony" dev="tmpfs" ino=22999 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645281804.890:7421): avc: denied { execute } for pid=31542 comm="20-chrony-dhcp" name="chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.728:7742): avc: denied { execute } for pid=32894 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.901:6955): avc: denied { getattr } for pid=29745 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.727:7735): avc: denied { execute_no_trans } for pid=32894 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.897:6952): avc: denied { execute } for pid=29739 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.237:7364): avc: denied { dac_read_search } for pid=31416 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645281968.728:7739): avc: denied { connectto } for pid=32894 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645281558.906:6962): avc: denied { execute_no_trans } for pid=29750 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/20-chrony-onoffline" dev="sda1" ino=591 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.905:6961): avc: denied { read } for pid=29748 comm="chrony-helper" name="dhclient" dev="sda1" ino=1965 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:dhcpc_state_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645281968.728:7736): avc: denied { read } for pid=32894 comm="11-dhclient" name="passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.907:6963): avc: denied { read open } for pid=29752 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1']

All Details...

  • log_href: http://qa-proxy.ceph.com/teuthology/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695156/teuthology.log
  • archive_path: /home/teuthworker/archive/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695156
  • description: upgrade/cephfs/featureful_client/upgraded_client/{bluestore-bitmap centos_latest clusters/1-mds-2-client-micro conf/{client mds mon osd} overrides/{multimds/yes pg-warn whitelist_health whitelist_wrongly_marked_down} tasks/{0-octopus 1-client 2-upgrade 3-client-upgrade 4-compat_client 5-client-sanity}}
  • duration: 0:18:46
  • email: ceph-qa@ceph.io
  • failure_reason: SELinux denials found on ubuntu@smithi142.front.sepia.ceph.com: ['type=AVC msg=audit(1645281558.897:6950): avc: denied { open } for pid=29739 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11735 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.733:7747): avc: denied { setattr } for pid=32897 comm="chronyc" name="chronyc.32897.sock" dev="tmpfs" ino=219816 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281558.895:6945): avc: denied { map } for pid=29739 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.901:6956): avc: denied { ioctl } for pid=29745 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 ioctlcmd=0x5401 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.728:7737): avc: denied { getattr } for pid=32894 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.727:7735): avc: denied { execute } for pid=32894 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.733:7746): avc: denied { add_name } for pid=32897 comm="chronyc" name="chronyc.32897.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645281968.733:7746): avc: denied { write } for pid=32897 comm="chronyc" name="chrony" dev="tmpfs" ino=22999 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645281804.890:7421): avc: denied { read open } for pid=31542 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.897:6950): avc: denied { read } for pid=29739 comm="11-dhclient" name="passwd" dev="sda1" ino=11735 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.909:6969): avc: denied { write } for pid=29752 comm="chronyc" name="chrony" dev="tmpfs" ino=22999 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645281558.907:6963): avc: denied { execute_no_trans } for pid=29752 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.231:7354): avc: denied { map } for pid=31413 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.733:7750): avc: denied { remove_name } for pid=32897 comm="chronyc" name="chronyc.32897.sock" dev="tmpfs" ino=219816 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645281804.895:7427): avc: denied { read } for pid=31549 comm="chrony-helper" name="dhclient" dev="sda1" ino=1965 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:dhcpc_state_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645281558.909:6969): avc: denied { add_name } for pid=29752 comm="chronyc" name="chronyc.29752.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645281968.733:7748): avc: denied { sendto } for pid=32897 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645281968.728:7741): avc: denied { getattr } for pid=32894 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11735 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.907:6963): avc: denied { map } for pid=29752 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.232:7359): avc: denied { read } for pid=31413 comm="11-dhclient" name="passwd" dev="sda1" ino=11735 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.889:7420): avc: denied { map } for pid=31539 comm="rm" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.900:6954): avc: denied { execute_no_trans } for pid=29745 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.889:7420): avc: denied { execute_no_trans } for pid=31539 comm="20-chrony-dhcp" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.728:7739): avc: denied { write } for pid=32894 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281804.237:7365): avc: denied { add_name } for pid=31416 comm="chronyc" name="chronyc.31416.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645281804.232:7359): avc: denied { open } for pid=31413 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11735 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.907:6963): avc: denied { execute } for pid=29752 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.896:6949): avc: denied { write } for pid=29739 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281804.237:7367): avc: denied { sendto } for pid=31416 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645281804.237:7365): avc: denied { dac_override } for pid=31416 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645281558.896:6946): avc: denied { open } for pid=29739 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.235:7362): avc: denied { execute_no_trans } for pid=31416 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.895:6945): avc: denied { execute } for pid=29739 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.733:7748): avc: denied { write } for pid=32897 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=169119 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281804.892:7424): avc: denied { open } for pid=31542 comm="chrony-helper" path="/run/chrony-helper/lock" dev="tmpfs" ino=24791 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.896:6946): avc: denied { read } for pid=29739 comm="11-dhclient" name="passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.733:7746): avc: denied { create } for pid=32897 comm="chronyc" name="chronyc.32897.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281804.895:7426): avc: denied { read } for pid=31549 comm="chrony-helper" name="chrony-helper" dev="tmpfs" ino=21840 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645281558.909:6967): avc: denied { create } for pid=29752 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645281804.892:7424): avc: denied { write } for pid=31542 comm="chrony-helper" name="lock" dev="tmpfs" ino=24791 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.238:7369): avc: denied { unlink } for pid=31416 comm="chronyc" name="chronyc.31416.sock" dev="tmpfs" ino=197590 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281968.733:7750): avc: denied { unlink } for pid=32897 comm="chronyc" name="chronyc.32897.sock" dev="tmpfs" ino=219816 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281968.733:7745): avc: denied { dac_read_search } for pid=32897 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645281558.899:6953): avc: denied { execute_no_trans } for pid=29743 comm="20-chrony-dhcp" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.902:6957): avc: denied { write } for pid=29745 comm="chrony-helper" name="lock" dev="tmpfs" ino=24791 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.237:7368): avc: denied { sendto } for pid=26398 comm="chronyd" path="/run/chrony/chronyc.31416.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645281558.896:6947): avc: denied { getattr } for pid=29739 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.733:7746): avc: denied { dac_override } for pid=32897 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645281804.232:7360): avc: denied { getattr } for pid=31413 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11735 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.890:7421): avc: denied { execute_no_trans } for pid=31542 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.909:6969): avc: denied { dac_override } for pid=29752 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645281558.909:6971): avc: denied { write } for pid=29752 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=169119 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281804.231:7354): avc: denied { execute_no_trans } for pid=31413 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.905:6960): avc: denied { read } for pid=29748 comm="chrony-helper" name="chrony-helper" dev="tmpfs" ino=21840 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645281968.727:7735): avc: denied { map } for pid=32894 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.728:7740): avc: denied { read } for pid=32894 comm="11-dhclient" name="passwd" dev="sda1" ino=11735 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.731:7743): avc: denied { read open } for pid=32897 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.909:6969): avc: denied { create } for pid=29752 comm="chronyc" name="chronyc.29752.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281558.909:6973): avc: denied { unlink } for pid=29752 comm="chronyc" name="chronyc.29752.sock" dev="tmpfs" ino=183883 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281804.891:7423): avc: denied { ioctl } for pid=31542 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 ioctlcmd=0x5401 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.909:6971): avc: denied { sendto } for pid=29752 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645281804.238:7369): avc: denied { remove_name } for pid=31416 comm="chronyc" name="chronyc.31416.sock" dev="tmpfs" ino=197590 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645281558.909:6973): avc: denied { remove_name } for pid=29752 comm="chronyc" name="chronyc.29752.sock" dev="tmpfs" ino=183883 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645281804.235:7362): avc: denied { execute } for pid=31416 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.237:7367): avc: denied { write } for pid=31416 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=169119 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281558.909:6972): avc: denied { sendto } for pid=26398 comm="chronyd" path="/run/chrony/chronyc.29752.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645281968.731:7743): avc: denied { execute } for pid=32897 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.895:6945): avc: denied { execute_no_trans } for pid=29739 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.909:6968): avc: denied { dac_read_search } for pid=29752 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645281558.896:6949): avc: denied { connectto } for pid=29739 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645281804.232:7357): avc: denied { map } for pid=31413 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.895:6945): avc: denied { execute } for pid=29739 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.900:6954): avc: denied { read open } for pid=29745 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.902:6957): avc: denied { open } for pid=29745 comm="chrony-helper" path="/run/chrony-helper/lock" dev="tmpfs" ino=24791 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.731:7743): avc: denied { execute_no_trans } for pid=32897 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.237:7363): avc: denied { create } for pid=31416 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645281968.728:7740): avc: denied { open } for pid=32894 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11735 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.897:6951): avc: denied { getattr } for pid=29739 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11735 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.903:6958): avc: denied { lock } for pid=29747 comm="flock" path="/run/chrony-helper/lock" dev="tmpfs" ino=24791 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.232:7358): avc: denied { write } for pid=31413 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281558.900:6954): avc: denied { execute } for pid=29745 comm="20-chrony-dhcp" name="chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.237:7365): avc: denied { create } for pid=31416 comm="chronyc" name="chronyc.31416.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281804.235:7362): avc: denied { map } for pid=31416 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.733:7744): avc: denied { create } for pid=32897 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645281804.231:7354): avc: denied { execute } for pid=31413 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.906:6962): avc: denied { execute } for pid=29750 comm="nm-dispatcher" name="20-chrony-onoffline" dev="sda1" ino=591 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.896:6948): avc: denied { map } for pid=29739 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.731:7743): avc: denied { map } for pid=32897 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.231:7354): avc: denied { execute } for pid=31413 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.733:7749): avc: denied { sendto } for pid=26398 comm="chronyd" path="/run/chrony/chronyc.32897.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645281804.232:7355): avc: denied { read } for pid=31413 comm="11-dhclient" name="passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.899:6953): avc: denied { map } for pid=29743 comm="rm" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.727:7735): avc: denied { execute } for pid=32894 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.887:7419): avc: denied { write } for pid=31532 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281804.235:7362): avc: denied { read open } for pid=31416 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.232:7358): avc: denied { connectto } for pid=31413 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645281968.728:7738): avc: denied { map } for pid=32894 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.891:7422): avc: denied { getattr } for pid=31542 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.232:7356): avc: denied { getattr } for pid=31413 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.232:7355): avc: denied { open } for pid=31413 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.893:7425): avc: denied { lock } for pid=31547 comm="flock" path="/run/chrony-helper/lock" dev="tmpfs" ino=24791 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.898:7428): avc: denied { create } for pid=31556 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645281804.232:7361): avc: denied { execute } for pid=31413 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.909:6970): avc: denied { setattr } for pid=29752 comm="chronyc" name="chronyc.29752.sock" dev="tmpfs" ino=183883 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281968.728:7736): avc: denied { open } for pid=32894 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.237:7366): avc: denied { setattr } for pid=31416 comm="chronyc" name="chronyc.31416.sock" dev="tmpfs" ino=197590 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281804.237:7365): avc: denied { write } for pid=31416 comm="chronyc" name="chrony" dev="tmpfs" ino=22999 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645281804.890:7421): avc: denied { execute } for pid=31542 comm="20-chrony-dhcp" name="chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.728:7742): avc: denied { execute } for pid=32894 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.901:6955): avc: denied { getattr } for pid=29745 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.727:7735): avc: denied { execute_no_trans } for pid=32894 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.897:6952): avc: denied { execute } for pid=29739 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.237:7364): avc: denied { dac_read_search } for pid=31416 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645281968.728:7739): avc: denied { connectto } for pid=32894 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645281558.906:6962): avc: denied { execute_no_trans } for pid=29750 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/20-chrony-onoffline" dev="sda1" ino=591 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.905:6961): avc: denied { read } for pid=29748 comm="chrony-helper" name="dhclient" dev="sda1" ino=1965 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:dhcpc_state_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645281968.728:7736): avc: denied { read } for pid=32894 comm="11-dhclient" name="passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.907:6963): avc: denied { read open } for pid=29752 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1']
  • flavor: default
  • job_id: 6695156
  • kernel:
    • kdb: True
    • sha1: distro
  • last_in_suite: False
  • machine_type: smithi
  • name: yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi
  • nuke_on_error: False
  • os_type: centos
  • os_version: 8.stream
  • overrides:
    • admin_socket:
      • branch: wip-yuriw-quincy-2.18.22
    • ceph:
      • cephfs:
        • max_mds: 2
      • conf:
        • client:
          • client mount timeout: 600
          • debug client: 20
          • debug ms: 1
          • rados mon op timeout: 900
          • rados osd op timeout: 900
        • global:
          • bluestore warn on legacy statfs: False
          • bluestore warn on no per pool omap: False
          • mon pg warn min per osd: 0
        • mds:
          • debug mds: 20
          • debug ms: 1
          • mds debug frag: True
          • mds debug scatterstat: True
          • mds op complaint time: 180
          • mds verify scatter: True
          • osd op complaint time: 180
          • rados mon op timeout: 900
          • rados osd op timeout: 900
        • mgr:
          • debug mgr: 20
          • debug ms: 1
        • mon:
          • debug mon: 20
          • debug ms: 1
          • debug paxos: 20
          • mon op complaint time: 120
          • mon warn on osd down out interval zero: False
        • osd:
          • bdev async discard: True
          • bdev enable discard: True
          • bluestore allocator: bitmap
          • bluestore block size: 96636764160
          • bluestore fsck on mount: True
          • debug bluefs: 1/20
          • debug bluestore: 1/20
          • debug ms: 1
          • debug osd: 20
          • debug rocksdb: 4/10
          • mon osd backfillfull_ratio: 0.85
          • mon osd full ratio: 0.9
          • mon osd nearfull ratio: 0.8
          • osd failsafe full ratio: 0.95
          • osd objectstore: bluestore
          • osd op complaint time: 180
      • flavor: default
      • fs: xfs
      • log-ignorelist:
        • \(MDS_ALL_DOWN\)
        • \(MDS_UP_LESS_THAN_MAX\)
        • overall HEALTH_
        • \(FS_DEGRADED\)
        • \(MDS_FAILED\)
        • \(MDS_DEGRADED\)
        • \(FS_WITH_FAILED_MDS\)
        • \(MDS_DAMAGE\)
        • \(MDS_ALL_DOWN\)
        • \(MDS_UP_LESS_THAN_MAX\)
        • \(FS_INLINE_DATA_DEPRECATED\)
        • overall HEALTH_
        • \(OSD_DOWN\)
        • \(OSD_
        • but it is still running
        • is not responding
        • scrub mismatch
        • ScrubResult
        • wrongly marked
        • \(POOL_APP_NOT_ENABLED\)
        • \(SLOW_OPS\)
        • overall HEALTH_
        • \(MON_MSGR2_NOT_ENABLED\)
        • slow request
        • missing required features
      • log-whitelist:
        • \(MDS_ALL_DOWN\)
        • \(MDS_UP_LESS_THAN_MAX\)
      • sha1: 74120ac0bca22353d26546d53c15d90ca8dca373
    • ceph-deploy:
      • bluestore: True
      • conf:
        • client:
          • log file: /var/log/ceph/ceph-$name.$pid.log
        • mon:
          • osd default pool size: 2
        • osd:
          • bdev async discard: True
          • bdev enable discard: True
          • bluestore block size: 96636764160
          • bluestore fsck on mount: True
          • debug bluefs: 1/20
          • debug bluestore: 1/20
          • debug rocksdb: 4/10
          • mon osd backfillfull_ratio: 0.85
          • mon osd full ratio: 0.9
          • mon osd nearfull ratio: 0.8
          • osd failsafe full ratio: 0.95
          • osd objectstore: bluestore
      • fs: xfs
    • install:
      • ceph:
        • flavor: default
        • sha1: 74120ac0bca22353d26546d53c15d90ca8dca373
    • nuke-on-error: False
    • selinux:
      • whitelist:
        • scontext=system_u:system_r:logrotate_t:s0
    • thrashosds:
      • bdev_inject_crash: 2
      • bdev_inject_crash_probability: 0.5
    • workunit:
      • branch: wip-yuriw-quincy-2.18.22
      • sha1: 74120ac0bca22353d26546d53c15d90ca8dca373
  • owner: scheduled_yuriw@teuthology
  • pid:
  • roles:
    • ['mon.a', 'mon.b', 'mon.c', 'mgr.x', 'mgr.y', 'mds.a', 'mds.b', 'mds.c', 'osd.0', 'osd.1', 'osd.2', 'osd.3']
    • ['client.0']
    • ['client.1']
  • sentry_event:
  • status: fail
  • success: False
  • branch: wip-yuriw-quincy-2.18.22
  • seed:
  • sha1: 74120ac0bca22353d26546d53c15d90ca8dca373
  • subset:
  • suite:
  • suite_branch: wip-yuriw-quincy-2.18.22
  • suite_path:
  • suite_relpath:
  • suite_repo:
  • suite_sha1: 74120ac0bca22353d26546d53c15d90ca8dca373
  • targets:
    • smithi039.front.sepia.ceph.com: ssh-rsa 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
    • smithi142.front.sepia.ceph.com: ssh-rsa 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
    • smithi159.front.sepia.ceph.com: ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABgQC10FPMQRJxO15EGfGRDR9sVy6xdbt4TQstef3pKyCRNkCIg5qFFckmnHpSz7K7Qb7t0ElG4bYks8is4Pro2bvvw+2vDqnza0IUS7P85F3rgk73NR3mPe5025+TvSxEgw29BFkfWECgcKFUWb52EmBPxOozFPnToSzPKpegOoynbzzqdzFBKb2DyZO5XlCjFuJlxj+9PBy7Ek+Z1c8701z08R3+6e0euVeFG7ZdK5XPlqq2tBXr+ib5XeTKNufbUoVQYy7MHmXtXf56mg9g3lvG1FWLFTOrB4mChbRsJsIesuo4C29noKmAbDAYsYo2TmnEgGCDkagfY01AmTy6R2wS+DQuGLfjTHpeZjY9P5mngRnTIT9yJuBAtWO3y6PSlXthanMOSI73HmVizys34WRf7OKSsL8KncviP/1isR27XmGZM/fbGw88G/BpeOmKCZB3mwKYylHwexeAaPTR36h9g/frnzeNe6HRptgAtnxhTQi8XDL2nsJjep3vOom+/Kc=
  • tasks:
    • internal.check_packages:
    • internal.buildpackages_prep:
    • internal.save_config:
    • internal.check_lock:
    • internal.add_remotes:
    • console_log:
    • internal.connect:
    • internal.push_inventory:
    • internal.serialize_remote_roles:
    • internal.check_conflict:
    • internal.check_ceph_data:
    • internal.vm_setup:
    • kernel:
      • kdb: True
      • sha1: distro
    • internal.base:
    • internal.archive_upload:
    • internal.archive:
    • internal.coredump:
    • internal.sudo:
    • internal.syslog:
    • internal.timer:
    • pcp:
    • selinux:
    • ansible.cephlab:
    • clock:
    • install:
      • branch: octopus
      • exclude_packages:
        • librados3
        • ceph-mgr-dashboard
        • ceph-mgr-diskprediction-local
        • ceph-mgr-rook
        • ceph-mgr-cephadm
        • cephadm
        • ceph-volume
      • extra_packages:
        • librados2
      • flavor: default
      • sha1: 74120ac0bca22353d26546d53c15d90ca8dca373
    • print: **** done installing octopus
    • ceph:
      • conf:
        • global:
          • mon warn on pool no app: False
          • ms bind msgr2: False
          • bluestore warn on legacy statfs: False
          • bluestore warn on no per pool omap: False
          • mon pg warn min per osd: 0
        • client:
          • client mount timeout: 600
          • debug client: 20
          • debug ms: 1
          • rados mon op timeout: 900
          • rados osd op timeout: 900
        • mds:
          • debug mds: 20
          • debug ms: 1
          • mds debug frag: True
          • mds debug scatterstat: True
          • mds op complaint time: 180
          • mds verify scatter: True
          • osd op complaint time: 180
          • rados mon op timeout: 900
          • rados osd op timeout: 900
        • mgr:
          • debug mgr: 20
          • debug ms: 1
        • mon:
          • debug mon: 20
          • debug ms: 1
          • debug paxos: 20
          • mon op complaint time: 120
          • mon warn on osd down out interval zero: False
        • osd:
          • bdev async discard: True
          • bdev enable discard: True
          • bluestore allocator: bitmap
          • bluestore block size: 96636764160
          • bluestore fsck on mount: True
          • debug bluefs: 1/20
          • debug bluestore: 1/20
          • debug ms: 1
          • debug osd: 20
          • debug rocksdb: 4/10
          • mon osd backfillfull_ratio: 0.85
          • mon osd full ratio: 0.9
          • mon osd nearfull ratio: 0.8
          • osd failsafe full ratio: 0.95
          • osd objectstore: bluestore
          • osd op complaint time: 180
      • log-ignorelist:
        • overall HEALTH_
        • \(FS_
        • \(MDS_
        • \(OSD_
        • \(MON_DOWN\)
        • \(CACHE_POOL_
        • \(POOL_
        • \(MGR_DOWN\)
        • \(PG_
        • \(SMALLER_PGP_NUM\)
        • Monitor daemon marked osd
        • Behind on trimming
        • Manager daemon
        • \(MDS_ALL_DOWN\)
        • \(MDS_UP_LESS_THAN_MAX\)
        • overall HEALTH_
        • \(FS_DEGRADED\)
        • \(MDS_FAILED\)
        • \(MDS_DEGRADED\)
        • \(FS_WITH_FAILED_MDS\)
        • \(MDS_DAMAGE\)
        • \(MDS_ALL_DOWN\)
        • \(MDS_UP_LESS_THAN_MAX\)
        • \(FS_INLINE_DATA_DEPRECATED\)
        • overall HEALTH_
        • \(OSD_DOWN\)
        • \(OSD_
        • but it is still running
        • is not responding
        • scrub mismatch
        • ScrubResult
        • wrongly marked
        • \(POOL_APP_NOT_ENABLED\)
        • \(SLOW_OPS\)
        • overall HEALTH_
        • \(MON_MSGR2_NOT_ENABLED\)
        • slow request
        • missing required features
      • cephfs:
        • max_mds: 2
      • flavor: default
      • fs: xfs
      • log-whitelist:
        • \(MDS_ALL_DOWN\)
        • \(MDS_UP_LESS_THAN_MAX\)
      • sha1: 74120ac0bca22353d26546d53c15d90ca8dca373
      • cluster: ceph
    • exec:
      • osd.0:
        • ceph osd set-require-min-compat-client octopus
    • print: **** done ceph
    • ceph-fuse:
    • print: **** done octopus client
    • print: **** done fsstress
    • mds_pre_upgrade:
    • print: **** done mds pre-upgrade sequence
    • install.upgrade:
      • mon.a:
      • mon.b:
    • print: **** done install.upgrade both hosts
    • ceph.restart:
      • daemons:
        • mon.*
        • mgr.*
      • mon-health-to-clog: False
      • wait-for-healthy: False
    • ceph.healthy:
    • ceph.restart:
      • daemons:
        • osd.*
      • wait-for-healthy: False
      • wait-for-osds-up: True
    • ceph.stop:
      • mds.*
    • ceph.restart:
      • daemons:
        • mds.*
      • wait-for-healthy: False
      • wait-for-osds-up: True
    • exec:
      • mon.a:
        • ceph versions
        • ceph osd dump -f json-pretty
        • ceph osd require-osd-release quincy
        • for f in `ceph osd pool ls` ; do ceph osd pool set $f pg_autoscale_mode off ; done
    • ceph.healthy:
    • print: **** done ceph.restart
    • install.upgrade:
      • client.0:
    • print: **** done install.upgrade on client.0
    • ceph-fuse:
      • client.0:
        • mounted: False
      • client.1:
        • skip: True
    • ceph-fuse:
      • client.0:
      • client.1:
        • skip: True
    • print: **** done remount client
    • exec:
      • mon.a:
        • ceph fs dump --format=json-pretty
        • ceph fs required_client_features cephfs add metric_collect
    • sleep:
      • duration: 5
    • fs.clients_evicted:
      • clients:
        • client.0: False
        • client.1: True
    • workunit:
      • clients:
        • client.0:
          • suites/fsstress.sh
      • branch: wip-yuriw-quincy-2.18.22
      • sha1: 74120ac0bca22353d26546d53c15d90ca8dca373
    • print: **** done fsstress
  • teuthology_branch: master
  • verbose: True
  • pcp_grafana_url:
  • priority:
  • user:
  • queue:
  • posted: 2022-02-18 22:55:52
  • started: 2022-02-19 14:19:42
  • updated: 2022-02-19 14:51:46
  • status_class: danger
  • runtime: 0:32:04
  • wait_time: 0:13:18