Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- svc@alecto:~$ sudo ausearch -i -m avc,user_avc,selinux_err,user_selinux_err -ts today
- [sudo] password for svc:
- ----
- type=AVC msg=audit(05/03/2024 07:22:52.779:763) : avc: denied { connectto } for pid=4609 comm=abrt-dump-journ path=/run/systemd/userdb/io.systemd.Home scontext=system_u:system_r:abrt_dump_oops_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=unix_stream_socket permissive=0
- ----
- type=AVC msg=audit(05/03/2024 07:22:52.779:764) : avc: denied { connectto } for pid=4609 comm=abrt-dump-journ path=/run/systemd/userdb/io.systemd.Machine scontext=system_u:system_r:abrt_dump_oops_t:s0 tcontext=system_u:system_r:systemd_machined_t:s0 tclass=unix_stream_socket permissive=0
- ----
- type=AVC msg=audit(05/03/2024 07:22:52.779:765) : avc: denied { connectto } for pid=4609 comm=abrt-dump-journ path=/run/systemd/userdb/io.systemd.Home scontext=system_u:system_r:abrt_dump_oops_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=unix_stream_socket permissive=0
- ----
- type=AVC msg=audit(05/03/2024 07:22:52.779:766) : avc: denied { connectto } for pid=4609 comm=abrt-dump-journ path=/run/systemd/userdb/io.systemd.Machine scontext=system_u:system_r:abrt_dump_oops_t:s0 tcontext=system_u:system_r:systemd_machined_t:s0 tclass=unix_stream_socket permissive=0
- ----
- type=USER_AVC msg=audit(05/03/2024 07:39:58.680:250) : pid=1 uid=root auid=unset ses=unset subj=system_u:system_r:init_t:s0 msg='avc: denied { status } for auid=unset uid=root gid=root cmdline="" function="method_get_unit_file_state" scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=system permissive=1 exe=/usr/lib/systemd/systemd sauid=root hostname=? addr=? terminal=?'
- ----
- type=USER_AVC msg=audit(05/03/2024 08:21:26.594:381) : pid=1 uid=root auid=unset ses=unset subj=system_u:system_r:init_t:s0 msg='avc: denied { status } for auid=unset uid=root gid=root cmdline="" function="method_get_unit_file_state" scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=system permissive=1 exe=/usr/lib/systemd/systemd sauid=root hostname=? addr=? terminal=?'
- ----
- type=AVC msg=audit(05/03/2024 08:22:21.697:399) : avc: denied { create } for pid=20802 comm=swtpm name=1-Tahoe-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c671,c1004 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
- ----
- type=AVC msg=audit(05/03/2024 08:22:27.418:400) : avc: denied { create } for pid=20864 comm=swtpm name=2-Tahoe-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c270,c531 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
- ----
- type=AVC msg=audit(05/03/2024 08:22:57.761:459) : avc: denied { create } for pid=21432 comm=swtpm name=3-Tahoe-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c366,c780 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
- ----
- type=AVC msg=audit(05/03/2024 08:23:00.962:460) : avc: denied { create } for pid=21456 comm=swtpm name=4-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c225,c920 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
- ----
- type=AVC msg=audit(05/03/2024 08:23:15.675:462) : avc: denied { create } for pid=21467 comm=swtpm name=5-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c545,c983 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
- ----
- type=AVC msg=audit(05/03/2024 08:23:20.292:465) : avc: denied { create } for pid=21482 comm=swtpm name=6-Tahoe-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c36,c847 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
- ----
- type=AVC msg=audit(05/03/2024 08:23:22.273:466) : avc: denied { create } for pid=21492 comm=swtpm name=7-Tahoe-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c66,c226 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
- ----
- type=AVC msg=audit(05/03/2024 08:23:38.491:467) : avc: denied { create } for pid=21502 comm=swtpm name=8-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c460,c984 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
- ----
- type=AVC msg=audit(05/03/2024 08:23:54.488:468) : avc: denied { create } for pid=21514 comm=swtpm name=9-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c895,c1010 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
- ----
- type=AVC msg=audit(05/03/2024 08:23:59.726:469) : avc: denied { create } for pid=21524 comm=swtpm name=10-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c130,c424 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
- ----
- type=AVC msg=audit(05/03/2024 08:29:33.195:270) : avc: denied { create } for pid=4362 comm=swtpm name=1-Tahoe-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c331,c871 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
- ----
- type=AVC msg=audit(05/03/2024 08:40:23.245:339) : avc: denied { create } for pid=7182 comm=swtpm name=2-Eyre2-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c64,c397 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
- ----
- type=AVC msg=audit(05/03/2024 08:44:19.793:372) : avc: denied { create } for pid=7773 comm=swtpm name=3-Eyre2-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c230,c935 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
- ----
- type=AVC msg=audit(05/03/2024 08:44:41.939:373) : avc: denied { create } for pid=7810 comm=swtpm name=4-Eyre2-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c236,c344 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
- ----
- type=AVC msg=audit(05/03/2024 08:56:08.178:374) : avc: denied { create } for pid=9268 comm=swtpm name=5-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c243,c308 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
- ----
- type=AVC msg=audit(05/03/2024 09:07:59.547:375) : avc: denied { create } for pid=11185 comm=swtpm name=6-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c214,c466 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
- ----
- type=AVC msg=audit(05/03/2024 09:17:47.812:289) : avc: denied { create } for pid=4379 comm=swtpm name=1-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c66,c311 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
- ----
- type=AVC msg=audit(05/03/2024 09:21:53.323:314) : avc: denied { create } for pid=5506 comm=swtpm name=2-win11-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c480,c932 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
- ----
- type=AVC msg=audit(05/03/2024 09:23:15.420:327) : avc: denied { add_name } for pid=5628 comm=swtpm_localca name=.lock.swtpm-localca scontext=system_u:system_r:virtqemud_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1
- ----
- type=AVC msg=audit(05/03/2024 09:23:15.420:328) : avc: denied { create } for pid=5628 comm=swtpm_localca name=.lock.swtpm-localca scontext=system_u:system_r:virtqemud_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=file permissive=1
- ----
- type=AVC msg=audit(05/03/2024 09:23:15.420:329) : avc: denied { write } for pid=5628 comm=swtpm_localca path=/var/lib/swtpm-localca/.lock.swtpm-localca dev="dm-0" ino=2460493 scontext=system_u:system_r:virtqemud_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=file permissive=1
- ----
- type=AVC msg=audit(05/03/2024 09:23:15.556:330) : avc: denied { setattr } for pid=5628 comm=swtpm_localca name=swtpm-localca-rootca-privkey.pem dev="dm-0" ino=2460494 scontext=system_u:system_r:virtqemud_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=file permissive=1
- ----
- type=AVC msg=audit(05/03/2024 09:23:15.559:331) : avc: denied { add_name } for pid=5630 comm=certtool name=swtpm-localca-rootca-cert.pem scontext=system_u:system_r:virtqemud_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1
- ----
- type=AVC msg=audit(05/03/2024 09:24:18.528:364) : avc: denied { create } for pid=5881 comm=swtpm name=3-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c179,c639 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
- ----
- type=AVC msg=audit(05/03/2024 09:26:12.533:367) : avc: denied { create } for pid=6317 comm=swtpm name=4-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c278,c887 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
- ----
- type=AVC msg=audit(05/03/2024 09:30:33.690:382) : avc: denied { create } for pid=6910 comm=swtpm name=5-win11-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c65,c295 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
- ----
- type=AVC msg=audit(05/03/2024 09:31:18.436:387) : avc: denied { create } for pid=7038 comm=swtpm name=6-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c150,c949 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
- ----
- type=AVC msg=audit(05/03/2024 09:59:23.626:388) : avc: denied { create } for pid=10142 comm=swtpm name=7-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c599,c753 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
- ----
- type=AVC msg=audit(05/03/2024 10:03:58.365:406) : avc: denied { create } for pid=10939 comm=swtpm name=8-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c714,c798 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
- ----
- type=AVC msg=audit(05/03/2024 10:42:28.335:439) : avc: denied { create } for pid=15190 comm=swtpm name=9-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c501,c687 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
- ----
- type=AVC msg=audit(05/03/2024 11:17:10.851:442) : avc: denied { create } for pid=18721 comm=swtpm name=10-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c48,c749 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
- ----
- type=AVC msg=audit(05/03/2024 11:17:42.062:443) : avc: denied { create } for pid=18795 comm=swtpm name=12-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c152,c574 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
- ----
- type=AVC msg=audit(05/03/2024 11:19:26.143:472) : avc: denied { create } for pid=19040 comm=swtpm name=14-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c272,c290 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
- ----
- type=AVC msg=audit(05/03/2024 12:37:28.942:481) : avc: denied { create } for pid=24281 comm=swtpm name=15-win11_3-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c749,c1001 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
- ----
- type=USER_AVC msg=audit(05/03/2024 12:52:46.084:515) : pid=1 uid=root auid=unset ses=unset subj=system_u:system_r:init_t:s0 msg='avc: denied { status } for auid=unset uid=root gid=root cmdline="" function="method_get_unit_file_state" scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=system permissive=1 exe=/usr/lib/systemd/systemd sauid=root hostname=? addr=? terminal=?'
- ----
- type=AVC msg=audit(05/03/2024 12:57:18.992:533) : avc: denied { execheap } for pid=30059 comm=wine-preloader scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=process permissive=0
- ----
- type=AVC msg=audit(05/03/2024 13:16:40.949:538) : avc: denied { create } for pid=33523 comm=swtpm name=16-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c319,c851 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
- svc@alecto:~$ less /var/log/dnf.log
- svc@alecto:~$ less /var/log/dnf.log
- svc@alecto:~$ xclip -sel c < /var/log/dnf.log
- svc@alecto:~$ sudo ausearch -i -m avc,user_avc,selinux_err,user_selinux_err -ts today
- [sudo] password for svc:
- ----
- type=AVC msg=audit(05/03/2024 07:22:52.779:763) : avc: denied { connectto } for pid=4609 comm=abrt-dump-journ path=/run/systemd/userdb/io.systemd.Home scontext=system_u:system_r:abrt_dump_oops_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=unix_stream_socket permissive=0
- ----
- type=AVC msg=audit(05/03/2024 07:22:52.779:764) : avc: denied { connectto } for pid=4609 comm=abrt-dump-journ path=/run/systemd/userdb/io.systemd.Machine scontext=system_u:system_r:abrt_dump_oops_t:s0 tcontext=system_u:system_r:systemd_machined_t:s0 tclass=unix_stream_socket permissive=0
- ----
- type=AVC msg=audit(05/03/2024 07:22:52.779:765) : avc: denied { connectto } for pid=4609 comm=abrt-dump-journ path=/run/systemd/userdb/io.systemd.Home scontext=system_u:system_r:abrt_dump_oops_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=unix_stream_socket permissive=0
- ----
- type=AVC msg=audit(05/03/2024 07:22:52.779:766) : avc: denied { connectto } for pid=4609 comm=abrt-dump-journ path=/run/systemd/userdb/io.systemd.Machine scontext=system_u:system_r:abrt_dump_oops_t:s0 tcontext=system_u:system_r:systemd_machined_t:s0 tclass=unix_stream_socket permissive=0
- ----
- type=USER_AVC msg=audit(05/03/2024 07:39:58.680:250) : pid=1 uid=root auid=unset ses=unset subj=system_u:system_r:init_t:s0 msg='avc: denied { status } for auid=unset uid=root gid=root cmdline="" function="method_get_unit_file_state" scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=system permissive=1 exe=/usr/lib/systemd/systemd sauid=root hostname=? addr=? terminal=?'
- ----
- type=USER_AVC msg=audit(05/03/2024 08:21:26.594:381) : pid=1 uid=root auid=unset ses=unset subj=system_u:system_r:init_t:s0 msg='avc: denied { status } for auid=unset uid=root gid=root cmdline="" function="method_get_unit_file_state" scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=system permissive=1 exe=/usr/lib/systemd/systemd sauid=root hostname=? addr=? terminal=?'
- ----
- type=AVC msg=audit(05/03/2024 08:22:21.697:399) : avc: denied { create } for pid=20802 comm=swtpm name=1-Tahoe-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c671,c1004 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
- ----
- type=AVC msg=audit(05/03/2024 08:22:27.418:400) : avc: denied { create } for pid=20864 comm=swtpm name=2-Tahoe-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c270,c531 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
- ----
- type=AVC msg=audit(05/03/2024 08:22:57.761:459) : avc: denied { create } for pid=21432 comm=swtpm name=3-Tahoe-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c366,c780 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
- ----
- type=AVC msg=audit(05/03/2024 08:23:00.962:460) : avc: denied { create } for pid=21456 comm=swtpm name=4-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c225,c920 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
- ----
- type=AVC msg=audit(05/03/2024 08:23:15.675:462) : avc: denied { create } for pid=21467 comm=swtpm name=5-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c545,c983 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
- ----
- type=AVC msg=audit(05/03/2024 08:23:20.292:465) : avc: denied { create } for pid=21482 comm=swtpm name=6-Tahoe-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c36,c847 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
- ----
- type=AVC msg=audit(05/03/2024 08:23:22.273:466) : avc: denied { create } for pid=21492 comm=swtpm name=7-Tahoe-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c66,c226 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
- ----
- type=AVC msg=audit(05/03/2024 08:23:38.491:467) : avc: denied { create } for pid=21502 comm=swtpm name=8-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c460,c984 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
- ----
- type=AVC msg=audit(05/03/2024 08:23:54.488:468) : avc: denied { create } for pid=21514 comm=swtpm name=9-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c895,c1010 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
- ----
- type=AVC msg=audit(05/03/2024 08:23:59.726:469) : avc: denied { create } for pid=21524 comm=swtpm name=10-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c130,c424 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
- ----
- type=AVC msg=audit(05/03/2024 08:29:33.195:270) : avc: denied { create } for pid=4362 comm=swtpm name=1-Tahoe-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c331,c871 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
- ----
- type=AVC msg=audit(05/03/2024 08:40:23.245:339) : avc: denied { create } for pid=7182 comm=swtpm name=2-Eyre2-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c64,c397 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
- ----
- type=AVC msg=audit(05/03/2024 08:44:19.793:372) : avc: denied { create } for pid=7773 comm=swtpm name=3-Eyre2-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c230,c935 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
- ----
- type=AVC msg=audit(05/03/2024 08:44:41.939:373) : avc: denied { create } for pid=7810 comm=swtpm name=4-Eyre2-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c236,c344 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
- ----
- type=AVC msg=audit(05/03/2024 08:56:08.178:374) : avc: denied { create } for pid=9268 comm=swtpm name=5-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c243,c308 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
- ----
- type=AVC msg=audit(05/03/2024 09:07:59.547:375) : avc: denied { create } for pid=11185 comm=swtpm name=6-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c214,c466 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
- ----
- type=AVC msg=audit(05/03/2024 09:17:47.812:289) : avc: denied { create } for pid=4379 comm=swtpm name=1-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c66,c311 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
- ----
- type=AVC msg=audit(05/03/2024 09:21:53.323:314) : avc: denied { create } for pid=5506 comm=swtpm name=2-win11-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c480,c932 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
- ----
- type=AVC msg=audit(05/03/2024 09:23:15.420:327) : avc: denied { add_name } for pid=5628 comm=swtpm_localca name=.lock.swtpm-localca scontext=system_u:system_r:virtqemud_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1
- ----
- type=AVC msg=audit(05/03/2024 09:23:15.420:328) : avc: denied { create } for pid=5628 comm=swtpm_localca name=.lock.swtpm-localca scontext=system_u:system_r:virtqemud_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=file permissive=1
- ----
- type=AVC msg=audit(05/03/2024 09:23:15.420:329) : avc: denied { write } for pid=5628 comm=swtpm_localca path=/var/lib/swtpm-localca/.lock.swtpm-localca dev="dm-0" ino=2460493 scontext=system_u:system_r:virtqemud_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=file permissive=1
- ----
- type=AVC msg=audit(05/03/2024 09:23:15.556:330) : avc: denied { setattr } for pid=5628 comm=swtpm_localca name=swtpm-localca-rootca-privkey.pem dev="dm-0" ino=2460494 scontext=system_u:system_r:virtqemud_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=file permissive=1
- ----
- type=AVC msg=audit(05/03/2024 09:23:15.559:331) : avc: denied { add_name } for pid=5630 comm=certtool name=swtpm-localca-rootca-cert.pem scontext=system_u:system_r:virtqemud_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1
- ----
- type=AVC msg=audit(05/03/2024 09:24:18.528:364) : avc: denied { create } for pid=5881 comm=swtpm name=3-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c179,c639 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
- ----
- type=AVC msg=audit(05/03/2024 09:26:12.533:367) : avc: denied { create } for pid=6317 comm=swtpm name=4-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c278,c887 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
- ----
- type=AVC msg=audit(05/03/2024 09:30:33.690:382) : avc: denied { create } for pid=6910 comm=swtpm name=5-win11-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c65,c295 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
- ----
- type=AVC msg=audit(05/03/2024 09:31:18.436:387) : avc: denied { create } for pid=7038 comm=swtpm name=6-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c150,c949 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
- ----
- type=AVC msg=audit(05/03/2024 09:59:23.626:388) : avc: denied { create } for pid=10142 comm=swtpm name=7-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c599,c753 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
- ----
- type=AVC msg=audit(05/03/2024 10:03:58.365:406) : avc: denied { create } for pid=10939 comm=swtpm name=8-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c714,c798 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
- ----
- type=AVC msg=audit(05/03/2024 10:42:28.335:439) : avc: denied { create } for pid=15190 comm=swtpm name=9-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c501,c687 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
- ----
- type=AVC msg=audit(05/03/2024 11:17:10.851:442) : avc: denied { create } for pid=18721 comm=swtpm name=10-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c48,c749 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
- ----
- type=AVC msg=audit(05/03/2024 11:17:42.062:443) : avc: denied { create } for pid=18795 comm=swtpm name=12-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c152,c574 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
- ----
- type=AVC msg=audit(05/03/2024 11:19:26.143:472) : avc: denied { create } for pid=19040 comm=swtpm name=14-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c272,c290 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
- ----
- type=AVC msg=audit(05/03/2024 12:37:28.942:481) : avc: denied { create } for pid=24281 comm=swtpm name=15-win11_3-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c749,c1001 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
- ----
- type=USER_AVC msg=audit(05/03/2024 12:52:46.084:515) : pid=1 uid=root auid=unset ses=unset subj=system_u:system_r:init_t:s0 msg='avc: denied { status } for auid=unset uid=root gid=root cmdline="" function="method_get_unit_file_state" scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=system permissive=1 exe=/usr/lib/systemd/systemd sauid=root hostname=? addr=? terminal=?'
- ----
- type=AVC msg=audit(05/03/2024 12:57:18.992:533) : avc: denied { execheap } for pid=30059 comm=wine-preloader scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=process permissive=0
- ----
- type=AVC msg=audit(05/03/2024 13:16:40.949:538) : avc: denied { create } for pid=33523 comm=swtpm name=16-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c319,c851 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
Advertisement