Guest User

Untitled

a guest
May 3rd, 2024
218
0
Never
11
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 23.62 KB | None | 0 0
  1. svc@alecto:~$ sudo ausearch -i -m avc,user_avc,selinux_err,user_selinux_err -ts today
  2. [sudo] password for svc:
  3. ----
  4. type=AVC msg=audit(05/03/2024 07:22:52.779:763) : avc: denied { connectto } for pid=4609 comm=abrt-dump-journ path=/run/systemd/userdb/io.systemd.Home scontext=system_u:system_r:abrt_dump_oops_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=unix_stream_socket permissive=0
  5. ----
  6. type=AVC msg=audit(05/03/2024 07:22:52.779:764) : avc: denied { connectto } for pid=4609 comm=abrt-dump-journ path=/run/systemd/userdb/io.systemd.Machine scontext=system_u:system_r:abrt_dump_oops_t:s0 tcontext=system_u:system_r:systemd_machined_t:s0 tclass=unix_stream_socket permissive=0
  7. ----
  8. type=AVC msg=audit(05/03/2024 07:22:52.779:765) : avc: denied { connectto } for pid=4609 comm=abrt-dump-journ path=/run/systemd/userdb/io.systemd.Home scontext=system_u:system_r:abrt_dump_oops_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=unix_stream_socket permissive=0
  9. ----
  10. type=AVC msg=audit(05/03/2024 07:22:52.779:766) : avc: denied { connectto } for pid=4609 comm=abrt-dump-journ path=/run/systemd/userdb/io.systemd.Machine scontext=system_u:system_r:abrt_dump_oops_t:s0 tcontext=system_u:system_r:systemd_machined_t:s0 tclass=unix_stream_socket permissive=0
  11. ----
  12. type=USER_AVC msg=audit(05/03/2024 07:39:58.680:250) : pid=1 uid=root auid=unset ses=unset subj=system_u:system_r:init_t:s0 msg='avc: denied { status } for auid=unset uid=root gid=root cmdline="" function="method_get_unit_file_state" scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=system permissive=1 exe=/usr/lib/systemd/systemd sauid=root hostname=? addr=? terminal=?'
  13. ----
  14. type=USER_AVC msg=audit(05/03/2024 08:21:26.594:381) : pid=1 uid=root auid=unset ses=unset subj=system_u:system_r:init_t:s0 msg='avc: denied { status } for auid=unset uid=root gid=root cmdline="" function="method_get_unit_file_state" scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=system permissive=1 exe=/usr/lib/systemd/systemd sauid=root hostname=? addr=? terminal=?'
  15. ----
  16. type=AVC msg=audit(05/03/2024 08:22:21.697:399) : avc: denied { create } for pid=20802 comm=swtpm name=1-Tahoe-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c671,c1004 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
  17. ----
  18. type=AVC msg=audit(05/03/2024 08:22:27.418:400) : avc: denied { create } for pid=20864 comm=swtpm name=2-Tahoe-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c270,c531 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
  19. ----
  20. type=AVC msg=audit(05/03/2024 08:22:57.761:459) : avc: denied { create } for pid=21432 comm=swtpm name=3-Tahoe-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c366,c780 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
  21. ----
  22. type=AVC msg=audit(05/03/2024 08:23:00.962:460) : avc: denied { create } for pid=21456 comm=swtpm name=4-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c225,c920 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
  23. ----
  24. type=AVC msg=audit(05/03/2024 08:23:15.675:462) : avc: denied { create } for pid=21467 comm=swtpm name=5-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c545,c983 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
  25. ----
  26. type=AVC msg=audit(05/03/2024 08:23:20.292:465) : avc: denied { create } for pid=21482 comm=swtpm name=6-Tahoe-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c36,c847 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
  27. ----
  28. type=AVC msg=audit(05/03/2024 08:23:22.273:466) : avc: denied { create } for pid=21492 comm=swtpm name=7-Tahoe-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c66,c226 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
  29. ----
  30. type=AVC msg=audit(05/03/2024 08:23:38.491:467) : avc: denied { create } for pid=21502 comm=swtpm name=8-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c460,c984 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
  31. ----
  32. type=AVC msg=audit(05/03/2024 08:23:54.488:468) : avc: denied { create } for pid=21514 comm=swtpm name=9-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c895,c1010 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
  33. ----
  34. type=AVC msg=audit(05/03/2024 08:23:59.726:469) : avc: denied { create } for pid=21524 comm=swtpm name=10-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c130,c424 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
  35. ----
  36. type=AVC msg=audit(05/03/2024 08:29:33.195:270) : avc: denied { create } for pid=4362 comm=swtpm name=1-Tahoe-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c331,c871 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
  37. ----
  38. type=AVC msg=audit(05/03/2024 08:40:23.245:339) : avc: denied { create } for pid=7182 comm=swtpm name=2-Eyre2-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c64,c397 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
  39. ----
  40. type=AVC msg=audit(05/03/2024 08:44:19.793:372) : avc: denied { create } for pid=7773 comm=swtpm name=3-Eyre2-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c230,c935 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
  41. ----
  42. type=AVC msg=audit(05/03/2024 08:44:41.939:373) : avc: denied { create } for pid=7810 comm=swtpm name=4-Eyre2-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c236,c344 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
  43. ----
  44. type=AVC msg=audit(05/03/2024 08:56:08.178:374) : avc: denied { create } for pid=9268 comm=swtpm name=5-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c243,c308 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
  45. ----
  46. type=AVC msg=audit(05/03/2024 09:07:59.547:375) : avc: denied { create } for pid=11185 comm=swtpm name=6-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c214,c466 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
  47. ----
  48. type=AVC msg=audit(05/03/2024 09:17:47.812:289) : avc: denied { create } for pid=4379 comm=swtpm name=1-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c66,c311 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
  49. ----
  50. type=AVC msg=audit(05/03/2024 09:21:53.323:314) : avc: denied { create } for pid=5506 comm=swtpm name=2-win11-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c480,c932 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
  51. ----
  52. type=AVC msg=audit(05/03/2024 09:23:15.420:327) : avc: denied { add_name } for pid=5628 comm=swtpm_localca name=.lock.swtpm-localca scontext=system_u:system_r:virtqemud_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1
  53. ----
  54. type=AVC msg=audit(05/03/2024 09:23:15.420:328) : avc: denied { create } for pid=5628 comm=swtpm_localca name=.lock.swtpm-localca scontext=system_u:system_r:virtqemud_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=file permissive=1
  55. ----
  56. type=AVC msg=audit(05/03/2024 09:23:15.420:329) : avc: denied { write } for pid=5628 comm=swtpm_localca path=/var/lib/swtpm-localca/.lock.swtpm-localca dev="dm-0" ino=2460493 scontext=system_u:system_r:virtqemud_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=file permissive=1
  57. ----
  58. type=AVC msg=audit(05/03/2024 09:23:15.556:330) : avc: denied { setattr } for pid=5628 comm=swtpm_localca name=swtpm-localca-rootca-privkey.pem dev="dm-0" ino=2460494 scontext=system_u:system_r:virtqemud_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=file permissive=1
  59. ----
  60. type=AVC msg=audit(05/03/2024 09:23:15.559:331) : avc: denied { add_name } for pid=5630 comm=certtool name=swtpm-localca-rootca-cert.pem scontext=system_u:system_r:virtqemud_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1
  61. ----
  62. type=AVC msg=audit(05/03/2024 09:24:18.528:364) : avc: denied { create } for pid=5881 comm=swtpm name=3-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c179,c639 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
  63. ----
  64. type=AVC msg=audit(05/03/2024 09:26:12.533:367) : avc: denied { create } for pid=6317 comm=swtpm name=4-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c278,c887 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
  65. ----
  66. type=AVC msg=audit(05/03/2024 09:30:33.690:382) : avc: denied { create } for pid=6910 comm=swtpm name=5-win11-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c65,c295 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
  67. ----
  68. type=AVC msg=audit(05/03/2024 09:31:18.436:387) : avc: denied { create } for pid=7038 comm=swtpm name=6-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c150,c949 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
  69. ----
  70. type=AVC msg=audit(05/03/2024 09:59:23.626:388) : avc: denied { create } for pid=10142 comm=swtpm name=7-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c599,c753 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
  71. ----
  72. type=AVC msg=audit(05/03/2024 10:03:58.365:406) : avc: denied { create } for pid=10939 comm=swtpm name=8-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c714,c798 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
  73. ----
  74. type=AVC msg=audit(05/03/2024 10:42:28.335:439) : avc: denied { create } for pid=15190 comm=swtpm name=9-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c501,c687 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
  75. ----
  76. type=AVC msg=audit(05/03/2024 11:17:10.851:442) : avc: denied { create } for pid=18721 comm=swtpm name=10-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c48,c749 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
  77. ----
  78. type=AVC msg=audit(05/03/2024 11:17:42.062:443) : avc: denied { create } for pid=18795 comm=swtpm name=12-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c152,c574 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
  79. ----
  80. type=AVC msg=audit(05/03/2024 11:19:26.143:472) : avc: denied { create } for pid=19040 comm=swtpm name=14-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c272,c290 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
  81. ----
  82. type=AVC msg=audit(05/03/2024 12:37:28.942:481) : avc: denied { create } for pid=24281 comm=swtpm name=15-win11_3-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c749,c1001 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
  83. ----
  84. type=USER_AVC msg=audit(05/03/2024 12:52:46.084:515) : pid=1 uid=root auid=unset ses=unset subj=system_u:system_r:init_t:s0 msg='avc: denied { status } for auid=unset uid=root gid=root cmdline="" function="method_get_unit_file_state" scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=system permissive=1 exe=/usr/lib/systemd/systemd sauid=root hostname=? addr=? terminal=?'
  85. ----
  86. type=AVC msg=audit(05/03/2024 12:57:18.992:533) : avc: denied { execheap } for pid=30059 comm=wine-preloader scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=process permissive=0
  87. ----
  88. type=AVC msg=audit(05/03/2024 13:16:40.949:538) : avc: denied { create } for pid=33523 comm=swtpm name=16-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c319,c851 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
  89. svc@alecto:~$ less /var/log/dnf.log
  90. svc@alecto:~$ less /var/log/dnf.log
  91. svc@alecto:~$ xclip -sel c < /var/log/dnf.log
  92. svc@alecto:~$ sudo ausearch -i -m avc,user_avc,selinux_err,user_selinux_err -ts today
  93. [sudo] password for svc:
  94. ----
  95. type=AVC msg=audit(05/03/2024 07:22:52.779:763) : avc: denied { connectto } for pid=4609 comm=abrt-dump-journ path=/run/systemd/userdb/io.systemd.Home scontext=system_u:system_r:abrt_dump_oops_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=unix_stream_socket permissive=0
  96. ----
  97. type=AVC msg=audit(05/03/2024 07:22:52.779:764) : avc: denied { connectto } for pid=4609 comm=abrt-dump-journ path=/run/systemd/userdb/io.systemd.Machine scontext=system_u:system_r:abrt_dump_oops_t:s0 tcontext=system_u:system_r:systemd_machined_t:s0 tclass=unix_stream_socket permissive=0
  98. ----
  99. type=AVC msg=audit(05/03/2024 07:22:52.779:765) : avc: denied { connectto } for pid=4609 comm=abrt-dump-journ path=/run/systemd/userdb/io.systemd.Home scontext=system_u:system_r:abrt_dump_oops_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=unix_stream_socket permissive=0
  100. ----
  101. type=AVC msg=audit(05/03/2024 07:22:52.779:766) : avc: denied { connectto } for pid=4609 comm=abrt-dump-journ path=/run/systemd/userdb/io.systemd.Machine scontext=system_u:system_r:abrt_dump_oops_t:s0 tcontext=system_u:system_r:systemd_machined_t:s0 tclass=unix_stream_socket permissive=0
  102. ----
  103. type=USER_AVC msg=audit(05/03/2024 07:39:58.680:250) : pid=1 uid=root auid=unset ses=unset subj=system_u:system_r:init_t:s0 msg='avc: denied { status } for auid=unset uid=root gid=root cmdline="" function="method_get_unit_file_state" scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=system permissive=1 exe=/usr/lib/systemd/systemd sauid=root hostname=? addr=? terminal=?'
  104. ----
  105. type=USER_AVC msg=audit(05/03/2024 08:21:26.594:381) : pid=1 uid=root auid=unset ses=unset subj=system_u:system_r:init_t:s0 msg='avc: denied { status } for auid=unset uid=root gid=root cmdline="" function="method_get_unit_file_state" scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=system permissive=1 exe=/usr/lib/systemd/systemd sauid=root hostname=? addr=? terminal=?'
  106. ----
  107. type=AVC msg=audit(05/03/2024 08:22:21.697:399) : avc: denied { create } for pid=20802 comm=swtpm name=1-Tahoe-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c671,c1004 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
  108. ----
  109. type=AVC msg=audit(05/03/2024 08:22:27.418:400) : avc: denied { create } for pid=20864 comm=swtpm name=2-Tahoe-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c270,c531 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
  110. ----
  111. type=AVC msg=audit(05/03/2024 08:22:57.761:459) : avc: denied { create } for pid=21432 comm=swtpm name=3-Tahoe-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c366,c780 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
  112. ----
  113. type=AVC msg=audit(05/03/2024 08:23:00.962:460) : avc: denied { create } for pid=21456 comm=swtpm name=4-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c225,c920 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
  114. ----
  115. type=AVC msg=audit(05/03/2024 08:23:15.675:462) : avc: denied { create } for pid=21467 comm=swtpm name=5-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c545,c983 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
  116. ----
  117. type=AVC msg=audit(05/03/2024 08:23:20.292:465) : avc: denied { create } for pid=21482 comm=swtpm name=6-Tahoe-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c36,c847 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
  118. ----
  119. type=AVC msg=audit(05/03/2024 08:23:22.273:466) : avc: denied { create } for pid=21492 comm=swtpm name=7-Tahoe-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c66,c226 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
  120. ----
  121. type=AVC msg=audit(05/03/2024 08:23:38.491:467) : avc: denied { create } for pid=21502 comm=swtpm name=8-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c460,c984 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
  122. ----
  123. type=AVC msg=audit(05/03/2024 08:23:54.488:468) : avc: denied { create } for pid=21514 comm=swtpm name=9-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c895,c1010 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
  124. ----
  125. type=AVC msg=audit(05/03/2024 08:23:59.726:469) : avc: denied { create } for pid=21524 comm=swtpm name=10-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c130,c424 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
  126. ----
  127. type=AVC msg=audit(05/03/2024 08:29:33.195:270) : avc: denied { create } for pid=4362 comm=swtpm name=1-Tahoe-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c331,c871 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
  128. ----
  129. type=AVC msg=audit(05/03/2024 08:40:23.245:339) : avc: denied { create } for pid=7182 comm=swtpm name=2-Eyre2-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c64,c397 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
  130. ----
  131. type=AVC msg=audit(05/03/2024 08:44:19.793:372) : avc: denied { create } for pid=7773 comm=swtpm name=3-Eyre2-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c230,c935 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
  132. ----
  133. type=AVC msg=audit(05/03/2024 08:44:41.939:373) : avc: denied { create } for pid=7810 comm=swtpm name=4-Eyre2-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c236,c344 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
  134. ----
  135. type=AVC msg=audit(05/03/2024 08:56:08.178:374) : avc: denied { create } for pid=9268 comm=swtpm name=5-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c243,c308 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
  136. ----
  137. type=AVC msg=audit(05/03/2024 09:07:59.547:375) : avc: denied { create } for pid=11185 comm=swtpm name=6-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c214,c466 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
  138. ----
  139. type=AVC msg=audit(05/03/2024 09:17:47.812:289) : avc: denied { create } for pid=4379 comm=swtpm name=1-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c66,c311 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
  140. ----
  141. type=AVC msg=audit(05/03/2024 09:21:53.323:314) : avc: denied { create } for pid=5506 comm=swtpm name=2-win11-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c480,c932 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
  142. ----
  143. type=AVC msg=audit(05/03/2024 09:23:15.420:327) : avc: denied { add_name } for pid=5628 comm=swtpm_localca name=.lock.swtpm-localca scontext=system_u:system_r:virtqemud_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1
  144. ----
  145. type=AVC msg=audit(05/03/2024 09:23:15.420:328) : avc: denied { create } for pid=5628 comm=swtpm_localca name=.lock.swtpm-localca scontext=system_u:system_r:virtqemud_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=file permissive=1
  146. ----
  147. type=AVC msg=audit(05/03/2024 09:23:15.420:329) : avc: denied { write } for pid=5628 comm=swtpm_localca path=/var/lib/swtpm-localca/.lock.swtpm-localca dev="dm-0" ino=2460493 scontext=system_u:system_r:virtqemud_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=file permissive=1
  148. ----
  149. type=AVC msg=audit(05/03/2024 09:23:15.556:330) : avc: denied { setattr } for pid=5628 comm=swtpm_localca name=swtpm-localca-rootca-privkey.pem dev="dm-0" ino=2460494 scontext=system_u:system_r:virtqemud_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=file permissive=1
  150. ----
  151. type=AVC msg=audit(05/03/2024 09:23:15.559:331) : avc: denied { add_name } for pid=5630 comm=certtool name=swtpm-localca-rootca-cert.pem scontext=system_u:system_r:virtqemud_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1
  152. ----
  153. type=AVC msg=audit(05/03/2024 09:24:18.528:364) : avc: denied { create } for pid=5881 comm=swtpm name=3-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c179,c639 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
  154. ----
  155. type=AVC msg=audit(05/03/2024 09:26:12.533:367) : avc: denied { create } for pid=6317 comm=swtpm name=4-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c278,c887 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
  156. ----
  157. type=AVC msg=audit(05/03/2024 09:30:33.690:382) : avc: denied { create } for pid=6910 comm=swtpm name=5-win11-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c65,c295 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
  158. ----
  159. type=AVC msg=audit(05/03/2024 09:31:18.436:387) : avc: denied { create } for pid=7038 comm=swtpm name=6-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c150,c949 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
  160. ----
  161. type=AVC msg=audit(05/03/2024 09:59:23.626:388) : avc: denied { create } for pid=10142 comm=swtpm name=7-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c599,c753 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
  162. ----
  163. type=AVC msg=audit(05/03/2024 10:03:58.365:406) : avc: denied { create } for pid=10939 comm=swtpm name=8-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c714,c798 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
  164. ----
  165. type=AVC msg=audit(05/03/2024 10:42:28.335:439) : avc: denied { create } for pid=15190 comm=swtpm name=9-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c501,c687 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
  166. ----
  167. type=AVC msg=audit(05/03/2024 11:17:10.851:442) : avc: denied { create } for pid=18721 comm=swtpm name=10-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c48,c749 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
  168. ----
  169. type=AVC msg=audit(05/03/2024 11:17:42.062:443) : avc: denied { create } for pid=18795 comm=swtpm name=12-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c152,c574 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
  170. ----
  171. type=AVC msg=audit(05/03/2024 11:19:26.143:472) : avc: denied { create } for pid=19040 comm=swtpm name=14-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c272,c290 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
  172. ----
  173. type=AVC msg=audit(05/03/2024 12:37:28.942:481) : avc: denied { create } for pid=24281 comm=swtpm name=15-win11_3-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c749,c1001 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
  174. ----
  175. type=USER_AVC msg=audit(05/03/2024 12:52:46.084:515) : pid=1 uid=root auid=unset ses=unset subj=system_u:system_r:init_t:s0 msg='avc: denied { status } for auid=unset uid=root gid=root cmdline="" function="method_get_unit_file_state" scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=system permissive=1 exe=/usr/lib/systemd/systemd sauid=root hostname=? addr=? terminal=?'
  176. ----
  177. type=AVC msg=audit(05/03/2024 12:57:18.992:533) : avc: denied { execheap } for pid=30059 comm=wine-preloader scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=process permissive=0
  178. ----
  179. type=AVC msg=audit(05/03/2024 13:16:40.949:538) : avc: denied { create } for pid=33523 comm=swtpm name=16-Eyre-swtpm.sock scontext=unconfined_u:unconfined_r:svirt_t:s0:c319,c851 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0
  180.  
Advertisement
Comments
  • User was banned
  • User was banned
  • User was banned
  • User was banned
  • User was banned
  • User was banned
  • User was banned
  • User was banned
  • User was banned
  • User was banned
  • User was banned
Add Comment
Please, Sign In to add comment