A question about comprovagt accessing storage nodes
Sheng SH Liu <[email protected]> Fri, 9 May 2014 14:46:48 +0800
| Newsgroups | gmane.network.open-pegasus.general |
|---|---|
| Message-ID | <OFB0378600.23F485D2-ON48257CD3.00252C25-48257CD3.002558C2@cn.ibm.com> |
--0__=C7BBF640DFB6AAB58f9e8a93df938690918cC7BBF640DFB6AAB5
Content-type: text/plain; charset=US-ASCII
Content-transfer-encoding: quoted-printable
Hi all:
we are using cimprovagt and get some error.
we check the log and see following:
type=3DAVC msg=3Daudit(1394502919.480:2066713): avc: denied { getattr=
} for
pid=3D32761 comm=3D"cimprovagt" path=3D"/dev/dm-7" dev=3Ddevtmpfs ino=3D=
31093
scontext=3Dsystem_u:system_r:pegasus_t:s0
tcontext=3Dsystem_u:object_r:svirt_image_t:s0:c43,c115 tclass=3Dblk_fil=
e
type=3DSYSCALL msg=3Daudit(1394502919.480:2066713): arch=3Dc000003e sys=
call=3D4
success=3Dno exit=3D-13 a0=3D7f72b80186f0 a1=3D7f72f9a17040 a2=3D7f72f9=
a17040 a3=3D0
items=3D0 ppid=3D19642 pid=3D32761 auid=3D4294967295 uid=3D0 gid=3D0 eu=
id=3D0 suid=3D0
fsuid=3D0 egid=3D0 sgid=3D0 fsgid=3D0 tty=3D(none) ses=3D4294967295 com=
m=3D"cimprovagt"
exe=3D"/usr/sbin/cimprovagt" subj=3Dsystem_u:system_r:pegasus_t:s0 key=3D=
(null)
here /dev/dm-7 is a guest storage nodes.
Should comprovagt legitimitely be accessing guest storage nodes?
Thanks!
Best Regards!=
--0__=C7BBF640DFB6AAB58f9e8a93df938690918cC7BBF640DFB6AAB5
Content-type: text/html; charset=US-ASCII
Content-Disposition: inline
Content-transfer-encoding: quoted-printable
<html><body>
<p><font size=3D"2" face=3D"sans-serif">Hi all:</font><br>
<font size=3D"2" face=3D"sans-serif">we are using cimprovagt and get so=
me error.</font><br>
<font size=3D"2" face=3D"sans-serif">we check the log and see following=
:</font><br>
<br>
<font size=3D"2" face=3D"sans-serif">type=3DAVC msg=3Daudit(1394502919.=
480:2066713): avc: denied { getattr } for pid=3D32761=
comm=3D"cimprovagt" path=3D"/dev/dm-7" dev=3Ddevtm=
pfs ino=3D31093 scontext=3Dsystem_u:system_r:pegasus_t:s0 tcontext=3Dsy=
stem_u:object_r:svirt_image_t:s0:c43,c115 tclass=3Dblk_file</font><br>
<font size=3D"2" face=3D"sans-serif">type=3DSYSCALL msg=3Daudit(1394502=
919.480:2066713): arch=3Dc000003e syscall=3D4 success=3Dno exit=3D-13 a=
0=3D7f72b80186f0 a1=3D7f72f9a17040 a2=3D7f72f9a17040 a3=3D0 items=3D0 p=
pid=3D19642 pid=3D32761 auid=3D4294967295 uid=3D0 gid=3D0 euid=3D0 suid=
=3D0 fsuid=3D0 egid=3D0 sgid=3D0 fsgid=3D0 tty=3D(none) ses=3D429496729=
5 comm=3D"cimprovagt" exe=3D"/usr/sbin/cimprovagt" =
subj=3Dsystem_u:system_r:pegasus_t:s0 key=3D(null)</font><br>
<br>
<font size=3D"2" face=3D"sans-serif">here /dev/dm-7 is a guest storage =
nodes.</font><br>
<font size=3D"2" face=3D"sans-serif">Should comprovagt legitimitely be =
accessing guest storage nodes?</font><br>
<br>
<font size=3D"2" face=3D"sans-serif">Thanks!<br>
Best Regards!</font></body></html>=
--0__=C7BBF640DFB6AAB58f9e8a93df938690918cC7BBF640DFB6AAB5--