Re: systemd strangeness

On 07/02/17 08:04, Lukas Berk wrote:
> Hi,
> 
> "Nathan Scott" <[email protected]> writes:
> [...]
>> SELinux?  getenforce(8)
> 
> If this is the case, Ken, would you mind sending me (offlist or on
> list), the related AVC denial?  It'd be in /var/log/audit/audit.log
> 
> I'd like to try and capture this instance if cuased by selinux in my
> selinux branch/type enforcement module.

Lukas, below is the tail of audit.log during an attempt to install the sample pmda using an Internet socket on port 5670.

This means nothing to me I'm afraid, so if you know how to fix it, I'd be most appreciative of the recipe, especially as I have a cluster of other unexplained QA failures, e.g. using pmdatrace that also uses a tcp socket.

type=AVC msg=audit(1486418311.446:32339): avc:  denied  { name_bind } for  pid=31726 comm="pmdasample" src=5670 scontext=system_u:system_r:pcp_pmcd_t:s0 tcontext=system_u:object_r:unreserved_port_t:s0 tclass=tcp_socket
type=SYSCALL msg=audit(1486418311.446:32339): arch=c000003e syscall=49 success=no exit=-13 a0=4 a1=10a6ba0 a2=10 a3=7ffcdd60b160 items=0 ppid=11117 pid=31726 auid=4294967295 uid=992 gid=990 euid=992 suid=992 fsuid=992 egid=990 sgid=990 fsgid=990 tty=(none) ses=4294967295 comm="pmdasample" exe="/var/lib/pcp/pmdas/sample/pmdasample" subj=system_u:system_r:pcp_pmcd_t:s0 key=(null)
type=AVC msg=audit(1486418313.440:32340): avc:  denied  { name_connect } for  pid=11112 comm="pmcd" dest=5670 scontext=system_u:system_r:pcp_pmcd_t:s0 tcontext=system_u:object_r:unreserved_port_t:s0 tclass=tcp_socket
type=SYSCALL msg=audit(1486418313.440:32340): arch=c000003e syscall=42 success=no exit=-13 a0=1a a1=7fb1349c5430 a2=10 a3=7ffc61fa81bc items=0 ppid=1 pid=11112 auid=4294967295 uid=992 gid=990 euid=992 suid=992 fsuid=992 egid=990 sgid=990 fsgid=990 tty=(none) ses=4294967295 comm="pmcd" exe="/usr/libexec/pcp/bin/pmcd" subj=system_u:system_r:pcp_pmcd_t:s0 key=(null)
type=AVC msg=audit(1486418313.440:32341): avc:  denied  { name_connect } for  pid=11112 comm="pmcd" dest=5670 scontext=system_u:system_r:pcp_pmcd_t:s0 tcontext=system_u:object_r:unreserved_port_t:s0 tclass=tcp_socket
type=SYSCALL msg=audit(1486418313.440:32341): arch=c000003e syscall=42 success=no exit=-13 a0=1a a1=7fb1349c5430 a2=10 a3=7ffc61fa81bc items=0 ppid=1 pid=11112 auid=4294967295 uid=992 gid=990 euid=992 suid=992 fsuid=992 egid=990 sgid=990 fsgid=990 tty=(none) ses=4294967295 comm="pmcd" exe="/usr/libexec/pcp/bin/pmcd" subj=system_u:system_r:pcp_pmcd_t:s0 key=(null)
type=AVC msg=audit(1486418313.440:32342): avc:  denied  { name_connect } for  pid=11112 comm="pmcd" dest=5670 scontext=system_u:system_r:pcp_pmcd_t:s0 tcontext=system_u:object_r:unreserved_port_t:s0 tclass=tcp_socket
type=SYSCALL msg=audit(1486418313.440:32342): arch=c000003e syscall=42 success=no exit=-13 a0=1a a1=7fb1349c5430 a2=10 a3=7ffc61fa81bc items=0 ppid=1 pid=11112 auid=4294967295 uid=992 gid=990 euid=992 suid=992 fsuid=992 egid=990 sgid=990 fsgid=990 tty=(none) ses=4294967295 comm="pmcd" exe="/usr/libexec/pcp/bin/pmcd" subj=system_u:system_r:pcp_pmcd_t:s0 key=(null)
type=AVC msg=audit(1486418315.706:32343): avc:  denied  { name_bind } for  pid=31841 comm="pmdasample" src=5670 scontext=system_u:system_r:pcp_pmcd_t:s0 tcontext=system_u:object_r:unreserved_port_t:s0 tclass=tcp_socket
type=SYSCALL msg=audit(1486418315.706:32343): arch=c000003e syscall=49 success=no exit=-13 a0=4 a1=98eba0 a2=10 a3=7ffd37a575c0 items=0 ppid=11117 pid=31841 auid=4294967295 uid=992 gid=990 euid=992 suid=992 fsuid=992 egid=990 sgid=990 fsgid=990 tty=(none) ses=4294967295 comm="pmdasample" exe="/var/lib/pcp/pmdas/sample/pmdasample" subj=system_u:system_r:pcp_pmcd_t:s0 key=(null)
type=AVC msg=audit(1486418317.703:32344): avc:  denied  { name_connect } for  pid=11112 comm="pmcd" dest=5670 scontext=system_u:system_r:pcp_pmcd_t:s0 tcontext=system_u:object_r:unreserved_port_t:s0 tclass=tcp_socket
type=SYSCALL msg=audit(1486418317.703:32344): arch=c000003e syscall=42 success=no exit=-13 a0=1a a1=7fb1349b9c70 a2=10 a3=7ffc61fa81bc items=0 ppid=1 pid=11112 auid=4294967295 uid=992 gid=990 euid=992 suid=992 fsuid=992 egid=990 sgid=990 fsgid=990 tty=(none) ses=4294967295 comm="pmcd" exe="/usr/libexec/pcp/bin/pmcd" subj=system_u:system_r:pcp_pmcd_t:s0 key=(null)
type=AVC msg=audit(1486418317.703:32345): avc:  denied  { name_connect } for  pid=11112 comm="pmcd" dest=5670 scontext=system_u:system_r:pcp_pmcd_t:s0 tcontext=system_u:object_r:unreserved_port_t:s0 tclass=tcp_socket
type=SYSCALL msg=audit(1486418317.703:32345): arch=c000003e syscall=42 success=no exit=-13 a0=1a a1=7fb1349b9c70 a2=10 a3=7ffc61fa81bc items=0 ppid=1 pid=11112 auid=4294967295 uid=992 gid=990 euid=992 suid=992 fsuid=992 egid=990 sgid=990 fsgid=990 tty=(none) ses=4294967295 comm="pmcd" exe="/usr/libexec/pcp/bin/pmcd" subj=system_u:system_r:pcp_pmcd_t:s0 key=(null)
type=AVC msg=audit(1486418317.703:32346): avc:  denied  { name_connect } for  pid=11112 comm="pmcd" dest=5670 scontext=system_u:system_r:pcp_pmcd_t:s0 tcontext=system_u:object_r:unreserved_port_t:s0 tclass=tcp_socket
type=SYSCALL msg=audit(1486418317.703:32346): arch=c000003e syscall=42 success=no exit=-13 a0=1a a1=7fb1349b9c70 a2=10 a3=7ffc61fa81bc items=0 ppid=1 pid=11112 auid=4294967295 uid=992 gid=990 euid=992 suid=992 fsuid=992 egid=990 sgid=990 fsgid=990 tty=(none) ses=4294967295 comm="pmcd" exe="/usr/libexec/pcp/bin/pmcd" subj=system_u:system_r:pcp_pmcd_t:s0 key=(null)
type=AVC msg=audit(1486418318.893:32347): avc:  denied  { name_bind } for  pid=31939 comm="pmdasample" src=5670 scontext=system_u:system_r:pcp_pmcd_t:s0 tcontext=system_u:object_r:unreserved_port_t:s0 tclass=tcp_socket
type=SYSCALL msg=audit(1486418318.893:32347): arch=c000003e syscall=49 success=no exit=-13 a0=4 a1=1731ba0 a2=10 a3=7ffe615a3dd0 items=0 ppid=11117 pid=31939 auid=4294967295 uid=992 gid=990 euid=992 suid=992 fsuid=992 egid=990 sgid=990 fsgid=990 tty=(none) ses=4294967295 comm="pmdasample" exe="/var/lib/pcp/pmdas/sample/pmdasample" subj=system_u:system_r:pcp_pmcd_t:s0 key=(null)
type=AVC msg=audit(1486418320.891:32348): avc:  denied  { name_connect } for  pid=11112 comm="pmcd" dest=5670 scontext=system_u:system_r:pcp_pmcd_t:s0 tcontext=system_u:object_r:unreserved_port_t:s0 tclass=tcp_socket
type=SYSCALL msg=audit(1486418320.891:32348): arch=c000003e syscall=42 success=no exit=-13 a0=21 a1=7fb1349a39c0 a2=10 a3=7ffc61fa81bc items=0 ppid=1 pid=11112 auid=4294967295 uid=992 gid=990 euid=992 suid=992 fsuid=992 egid=990 sgid=990 fsgid=990 tty=(none) ses=4294967295 comm="pmcd" exe="/usr/libexec/pcp/bin/pmcd" subj=system_u:system_r:pcp_pmcd_t:s0 key=(null)
type=AVC msg=audit(1486418320.891:32349): avc:  denied  { name_connect } for  pid=11112 comm="pmcd" dest=5670 scontext=system_u:system_r:pcp_pmcd_t:s0 tcontext=system_u:object_r:unreserved_port_t:s0 tclass=tcp_socket
type=SYSCALL msg=audit(1486418320.891:32349): arch=c000003e syscall=42 success=no exit=-13 a0=21 a1=7fb1349a39c0 a2=10 a3=7ffc61fa81bc items=0 ppid=1 pid=11112 auid=4294967295 uid=992 gid=990 euid=992 suid=992 fsuid=992 egid=990 sgid=990 fsgid=990 tty=(none) ses=4294967295 comm="pmcd" exe="/usr/libexec/pcp/bin/pmcd" subj=system_u:system_r:pcp_pmcd_t:s0 key=(null)
type=AVC msg=audit(1486418320.891:32350): avc:  denied  { name_connect } for  pid=11112 comm="pmcd" dest=5670 scontext=system_u:system_r:pcp_pmcd_t:s0 tcontext=system_u:object_r:unreserved_port_t:s0 tclass=tcp_socket
type=SYSCALL msg=audit(1486418320.891:32350): arch=c000003e syscall=42 success=no exit=-13 a0=21 a1=7fb1349a39c0 a2=10 a3=7ffc61fa81bc items=0 ppid=1 pid=11112 auid=4294967295 uid=992 gid=990 euid=992 suid=992 fsuid=992 egid=990 sgid=990 fsgid=990 tty=(none) ses=4294967295 comm="pmcd" exe="/usr/libexec/pcp/bin/pmcd" subj=system_u:system_r:pcp_pmcd_t:s0 key=(null)


-=-=-=-=-=-=-=-=-=-=-=-
Groups.io Links:

You receive all messages sent to this group.

View/Reply Online (#15076): https://groups.io/g/pcp/message/15076
View All Messages In Topic (4): https://groups.io/g/pcp/topic/4336473
Mute This Topic: https://groups.io/mt/4336473?uid=174580
New Topic: https://groups.io/g/pcp/post
-=-=-
pcp mailing list
[email protected]
https://groups.io/g/pcp/messages
-=-=-
Change Your Subscription: https://groups.io/g/pcp/editsub?uid=174580
Group Home: https://groups.io/g/pcp
Contact Group Owner: [email protected]
Terms of Service: https://groups.io/static/tos
Unsubscribe: https://groups.io/g/pcp/leave/354243/563757577/xyzzy
-=-=-=-=-=-=-=-=-=-=-=-