https://bugzilla.redhat.com/show_bug.cgi?id=1206751



--- Comment #15 from [email protected] ---
ausearch -m avc,user_avc -ts yesterday

```
...
time->Sun Sep 27 17:03:08 2015
type=AVC msg=audit(1443373388.517:411): avc:  denied  { read } for  pid=1328
comm="iptables" path="net:[4026531957]" dev="nsfs" ino=4026531957
scontext=system_u:system_r:iptables_t:s0
tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=0
----
time->Sun Sep 27 17:03:08 2015
type=AVC msg=audit(1443373388.518:412): avc:  denied  { entrypoint } for 
pid=1308 comm="exe" path="/bin/dash" dev="vda1" ino=1164530
scontext=system_u:system_r:spc_t:s0
tcontext=system_u:object_r:docker_var_lib_t:s0 tclass=file permissive=0
----
time->Sun Sep 27 17:03:08 2015
type=AVC msg=audit(1443373388.546:415): avc:  denied  { read } for  pid=1332
comm="iptables" path="net:[4026531957]" dev="nsfs" ino=4026531957
scontext=system_u:system_r:iptables_t:s0
tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=0
----
time->Sun Sep 27 17:03:08 2015
type=AVC msg=audit(1443373388.576:417): avc:  denied  { read } for  pid=1336
comm="iptables" path="net:[4026531957]" dev="nsfs" ino=4026531957
scontext=system_u:system_r:iptables_t:s0
tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=0
----
time->Sun Sep 27 17:03:08 2015
type=AVC msg=audit(1443373388.584:419): avc:  denied  { read } for  pid=1337
comm="iptables" path="net:[4026531957]" dev="nsfs" ino=4026531957
scontext=system_u:system_r:iptables_t:s0
tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=0
----
time->Sun Sep 27 17:03:08 2015
type=AVC msg=audit(1443373388.593:421): avc:  denied  { read } for  pid=1340
comm="iptables" path="net:[4026531957]" dev="nsfs" ino=4026531957
scontext=system_u:system_r:iptables_t:s0
tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=0
----
time->Sun Sep 27 17:03:08 2015
type=AVC msg=audit(1443373388.601:423): avc:  denied  { read } for  pid=1341
comm="iptables" path="net:[4026531957]" dev="nsfs" ino=4026531957
scontext=system_u:system_r:iptables_t:s0
tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=0
----
time->Sun Sep 27 17:03:08 2015
type=AVC msg=audit(1443373388.611:425): avc:  denied  { read } for  pid=1342
comm="iptables" path="net:[4026531957]" dev="nsfs" ino=4026531957
scontext=system_u:system_r:iptables_t:s0
tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=0
----
```

Set SELinux to permissive mode:

```
time->Sun Sep 27 17:05:34 2015
type=AVC msg=audit(1443373534.163:88): avc:  denied  { read } for  pid=719
comm="iptables" path="net:[4026531957]" dev="nsfs" ino=4026531957
scontext=system_u:system_r:iptables_t:s0
tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1
----
time->Sun Sep 27 17:05:35 2015
type=AVC msg=audit(1443373535.199:124): avc:  denied  { entrypoint } for 
pid=858 comm="exe" path="/bin/dash" dev="vda1" ino=1164530
scontext=system_u:system_r:spc_t:s0
tcontext=system_u:object_r:docker_var_lib_t:s0 tclass=file permissive=1
----
time->Sun Sep 27 17:08:32 2015
type=AVC msg=audit(1443373712.152:175): avc:  denied  { read } for  pid=1129
comm="iptables" path="net:[4026531957]" dev="nsfs" ino=4026531957
scontext=system_u:system_r:iptables_t:s0
tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1
----
time->Sun Sep 27 17:08:32 2015
type=AVC msg=audit(1443373712.310:181): avc:  denied  { entrypoint } for 
pid=1147 comm="exe" path="/bin/busybox" dev="vda1" ino=260590
scontext=system_u:system_r:spc_t:s0
tcontext=system_u:object_r:docker_var_lib_t:s0 tclass=file permissive=1
----
time->Sun Sep 27 17:09:10 2015
type=AVC msg=audit(1443373750.571:185): avc:  denied  { entrypoint } for 
pid=1242 comm="exe" path="/bin/dash" dev="vda1" ino=1164530
scontext=system_u:system_r:spc_t:s0
tcontext=system_u:object_r:docker_var_lib_t:s0 tclass=file permissive=1
```

-- 
You are receiving this mail because:
You are on the CC list for the bug.
_______________________________________________
golang mailing list
[email protected]
https://lists.fedoraproject.org/mailman/listinfo/golang

Reply via email to