Re: A question about comprovagt accessing storage nodes
Karl Schopmeyer <[email protected]> Fri, 09 May 2014 08:32:54 -0500
| Newsgroups | gmane.network.open-pegasus.general |
|---|---|
| Message-ID | <[email protected]> |
This is a multi-part message in MIME format.
--------------000204030606040408070500
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Cimprovagt is the agent process that is the wrapper for your providers
when they are operating in out-of-process mode. I would guess that it
is actually your provider accessing, since the agent is simply the
interface between the cimserver process and the provider APIs. It
receives requests from the cimserver process, maps the requests to the
providers or its own control functions and then sends the responses back
to the cimserver process.
Check the providers to see which ones you have operating as
out-of-process (cimprovider cmd line tool). Note that by moving them
from group to group you can move them from out-of-process to in-process.
Karl
On 05/09/2014 01:46 AM, Sheng SH Liu wrote:
>
> Hi all:
> we are using cimprovagt and get some error.
> we check the log and see following:
>
> type=AVC msg=audit(1394502919.480:2066713): avc: denied { getattr }
> for pid=32761 comm="cimprovagt" path="/dev/dm-7" dev=devtmpfs
> ino=31093 scontext=system_u:system_r:pegasus_t:s0
> tcontext=system_u:object_r:svirt_image_t:s0:c43,c115 tclass=blk_file
> type=SYSCALL msg=audit(1394502919.480:2066713): arch=c000003e
> syscall=4 success=no exit=-13 a0=7f72b80186f0 a1=7f72f9a17040
> a2=7f72f9a17040 a3=0 items=0 ppid=19642 pid=32761 auid=4294967295
> uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none)
> ses=4294967295 comm="cimprovagt" exe="/usr/sbin/cimprovagt"
> subj=system_u:system_r:pegasus_t:s0 key=(null)
>
> here /dev/dm-7 is a guest storage nodes.
> Should comprovagt legitimitely be accessing guest storage nodes?
>
> Thanks!
> Best Regards!
>
--------------000204030606040408070500
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">Cimprovagt is the agent process that is
the wrapper for your providers when they are operating in
out-of-process mode. I would guess that it is actually your
provider accessing, since the agent is simply the interface
between the cimserver process and the provider APIs. It receives
requests from the cimserver process, maps the requests to the
providers or its own control functions and then sends the
responses back to the cimserver process.<br>
<br>
Check the providers to see which ones you have operating as
out-of-process (cimprovider cmd line tool). Note that by moving
them from group to group you can move them from out-of-process to
in-process.<br>
<br>
Karl<br>
On 05/09/2014 01:46 AM, Sheng SH Liu wrote:<br>
</div>
<blockquote
cite="mid:OFB0378600.23F485D2-ON48257CD3.00252C25-48257CD3.002558C2@cn.ibm.com"
type="cite">
<p><font size="2" face="sans-serif">Hi all:</font><br>
<font size="2" face="sans-serif">we are using cimprovagt and get
some error.</font><br>
<font size="2" face="sans-serif">we check the log and see
following:</font><br>
<br>
<font size="2" face="sans-serif">type=AVC
msg=audit(1394502919.480:2066713): avc: denied { getattr }
for pid=32761 comm="cimprovagt" path="/dev/dm-7" dev=devtmpfs
ino=31093 scontext=system_u:system_r:pegasus_t:s0
tcontext=system_u:object_r:svirt_image_t:s0:c43,c115
tclass=blk_file</font><br>
<font size="2" face="sans-serif">type=SYSCALL
msg=audit(1394502919.480:2066713): arch=c000003e syscall=4
success=no exit=-13 a0=7f72b80186f0 a1=7f72f9a17040
a2=7f72f9a17040 a3=0 items=0 ppid=19642 pid=32761
auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0
sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cimprovagt"
exe="/usr/sbin/cimprovagt" subj=system_u:system_r:pegasus_t:s0
key=(null)</font><br>
<br>
<font size="2" face="sans-serif">here /dev/dm-7 is a guest
storage nodes.</font><br>
<font size="2" face="sans-serif">Should comprovagt legitimitely
be accessing guest storage nodes?</font><br>
<br>
<font size="2" face="sans-serif">Thanks!<br>
Best Regards!</font>
</p>
</blockquote>
<br>
</body>
</html>
--------------000204030606040408070500--