Skip to content

Instantly share code, notes, and snippets.

@richm
Created February 23, 2016 20:18
Show Gist options
  • Save richm/faa881de3460afd43db2 to your computer and use it in GitHub Desktop.
Save richm/faa881de3460afd43db2 to your computer and use it in GitHub Desktop.
# ausearch -ts recent -m avc
----
time->Tue Feb 23 20:09:26 2016
type=SYSCALL msg=audit(1456258166.390:135): arch=c000003e syscall=2 success=no exit=-13 a0=7ffc5ab7df59 a1=80000 a2=1b6 a3=21000 items=0 ppid=1033 pid=13577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null)
type=AVC msg=audit(1456258166.390:135): avc: denied { open } for pid=13577 comm="iptables-restor" path="/tmp/kube-temp-iptables-restore-850979159" dev="vda1" ino=16818306 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:init_tmp_t:s0 tclass=file
----
time->Tue Feb 23 20:09:26 2016
type=SYSCALL msg=audit(1456258166.453:137): arch=c000003e syscall=2 success=no exit=-13 a0=7ffc5a3a5f59 a1=80000 a2=1b6 a3=21000 items=0 ppid=1033 pid=13584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null)
type=AVC msg=audit(1456258166.453:137): avc: denied { open } for pid=13584 comm="iptables-restor" path="/tmp/kube-temp-iptables-restore-387819722" dev="vda1" ino=16818306 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:init_tmp_t:s0 tclass=file
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment