2022-02-19T09:53:03.905 INFO:root:teuthology version: 1.1.0-eea25212 2022-02-19T09:53:03.907 INFO:teuthology.results:subset: '111/120000' 2022-02-19T09:53:03.907 INFO:teuthology.results:seed: '8016' 2022-02-19T14:41:08.205 INFO:root:teuthology version: 1.1.0-eea25212 2022-02-19T14:41:08.247 INFO:teuthology.results:Waiting up to 43200 seconds for tests to finish... 2022-02-19T18:28:26.403 INFO:teuthology.results:Tests finished! gathering results... 2022-02-19T18:28:39.208 INFO:scrape:Found 96 jobs 2022-02-19T18:29:37.626 WARNING:scrape:Not-understood crash indication 2022-02-19T11:24:55.709 INFO:tasks.rgw.c2.client.0.smithi082.stderr:daemon-helper: command crashed with signal 11 2022-02-19T18:29:37.627 WARNING:scrape:Not-understood crash indication 2022-02-19T18:29:37.703 WARNING:scrape:Not-understood crash indication 2022-02-19T11:24:55.709 INFO:tasks.rgw.c2.client.0.smithi082.stderr:daemon-helper: command crashed with signal 11 2022-02-19T18:29:37.704 WARNING:scrape:Not-understood crash indication 2022-02-19T18:29:37.722 WARNING:scrape:Not-understood crash indication 2022-02-19T11:24:55.709 INFO:tasks.rgw.c2.client.0.smithi082.stderr:daemon-helper: command crashed with signal 11 2022-02-19T18:29:37.723 WARNING:scrape:Not-understood crash indication 2022-02-19T18:29:37.742 WARNING:scrape:Not-understood crash indication 2022-02-19T11:24:55.709 INFO:tasks.rgw.c2.client.0.smithi082.stderr:daemon-helper: command crashed with signal 11 2022-02-19T18:29:37.743 WARNING:scrape:Not-understood crash indication 2022-02-19T18:29:37.800 WARNING:scrape:Not-understood crash indication 2022-02-19T11:24:55.709 INFO:tasks.rgw.c2.client.0.smithi082.stderr:daemon-helper: command crashed with signal 11 2022-02-19T18:29:37.801 WARNING:scrape:Not-understood crash indication 2022-02-19T18:29:37.880 WARNING:scrape:Not-understood crash indication 2022-02-19T11:24:55.709 INFO:tasks.rgw.c2.client.0.smithi082.stderr:daemon-helper: command crashed with signal 11 2022-02-19T18:29:37.881 WARNING:scrape:Not-understood crash indication 2022-02-19T18:29:37.936 WARNING:scrape:Not-understood crash indication 2022-02-19T11:24:55.709 INFO:tasks.rgw.c2.client.0.smithi082.stderr:daemon-helper: command crashed with signal 11 2022-02-19T18:29:37.937 WARNING:scrape:Not-understood crash indication 2022-02-19T18:29:38.041 WARNING:scrape:Not-understood crash indication 2022-02-19T11:24:55.709 INFO:tasks.rgw.c2.client.0.smithi082.stderr:daemon-helper: command crashed with signal 11 2022-02-19T18:29:38.043 WARNING:scrape:Not-understood crash indication 2022-02-19T18:29:38.072 WARNING:scrape:Not-understood crash indication 2022-02-19T11:24:55.709 INFO:tasks.rgw.c2.client.0.smithi082.stderr:daemon-helper: command crashed with signal 11 2022-02-19T18:29:38.073 WARNING:scrape:Not-understood crash indication 2022-02-19T18:29:38.097 WARNING:scrape:Not-understood crash indication 2022-02-19T11:24:55.709 INFO:tasks.rgw.c2.client.0.smithi082.stderr:daemon-helper: command crashed with signal 11 2022-02-19T18:29:38.098 WARNING:scrape:Not-understood crash indication 2022-02-19T18:30:08.727 WARNING:scrape:Not-understood crash indication 2022-02-19T10:31:15.377 INFO:tasks.rgw.c2.client.0.smithi134.stderr:daemon-helper: command crashed with signal 11 2022-02-19T18:30:08.728 WARNING:scrape:Not-understood crash indication 2022-02-19T18:30:08.785 WARNING:scrape:Not-understood crash indication 2022-02-19T10:31:15.377 INFO:tasks.rgw.c2.client.0.smithi134.stderr:daemon-helper: command crashed with signal 11 2022-02-19T18:30:08.786 WARNING:scrape:Not-understood crash indication 2022-02-19T18:30:08.805 WARNING:scrape:Not-understood crash indication 2022-02-19T10:31:15.377 INFO:tasks.rgw.c2.client.0.smithi134.stderr:daemon-helper: command crashed with signal 11 2022-02-19T18:30:08.806 WARNING:scrape:Not-understood crash indication 2022-02-19T18:30:08.827 WARNING:scrape:Not-understood crash indication 2022-02-19T10:31:15.377 INFO:tasks.rgw.c2.client.0.smithi134.stderr:daemon-helper: command crashed with signal 11 2022-02-19T18:30:08.828 WARNING:scrape:Not-understood crash indication 2022-02-19T18:30:08.884 WARNING:scrape:Not-understood crash indication 2022-02-19T10:31:15.377 INFO:tasks.rgw.c2.client.0.smithi134.stderr:daemon-helper: command crashed with signal 11 2022-02-19T18:30:08.885 WARNING:scrape:Not-understood crash indication 2022-02-19T18:30:08.956 WARNING:scrape:Not-understood crash indication 2022-02-19T10:31:15.377 INFO:tasks.rgw.c2.client.0.smithi134.stderr:daemon-helper: command crashed with signal 11 2022-02-19T18:30:08.957 WARNING:scrape:Not-understood crash indication 2022-02-19T18:30:09.013 WARNING:scrape:Not-understood crash indication 2022-02-19T10:31:15.377 INFO:tasks.rgw.c2.client.0.smithi134.stderr:daemon-helper: command crashed with signal 11 2022-02-19T18:30:09.014 WARNING:scrape:Not-understood crash indication 2022-02-19T18:30:09.101 WARNING:scrape:Not-understood crash indication 2022-02-19T10:31:15.377 INFO:tasks.rgw.c2.client.0.smithi134.stderr:daemon-helper: command crashed with signal 11 2022-02-19T18:30:09.102 WARNING:scrape:Not-understood crash indication 2022-02-19T18:30:34.911 WARNING:scrape:Not-understood crash indication 2022-02-19T14:42:26.261 INFO:tasks.rgw.c2.client.0.smithi082.stderr:daemon-helper: command crashed with signal 11 2022-02-19T18:30:34.912 WARNING:scrape:Not-understood crash indication 2022-02-19T18:30:34.972 WARNING:scrape:Not-understood crash indication 2022-02-19T14:42:26.261 INFO:tasks.rgw.c2.client.0.smithi082.stderr:daemon-helper: command crashed with signal 11 2022-02-19T18:30:34.973 WARNING:scrape:Not-understood crash indication 2022-02-19T18:30:34.995 WARNING:scrape:Not-understood crash indication 2022-02-19T14:42:26.261 INFO:tasks.rgw.c2.client.0.smithi082.stderr:daemon-helper: command crashed with signal 11 2022-02-19T18:30:34.996 WARNING:scrape:Not-understood crash indication 2022-02-19T18:30:35.013 WARNING:scrape:Not-understood crash indication 2022-02-19T14:42:26.261 INFO:tasks.rgw.c2.client.0.smithi082.stderr:daemon-helper: command crashed with signal 11 2022-02-19T18:30:35.014 WARNING:scrape:Not-understood crash indication 2022-02-19T18:30:35.070 WARNING:scrape:Not-understood crash indication 2022-02-19T14:42:26.261 INFO:tasks.rgw.c2.client.0.smithi082.stderr:daemon-helper: command crashed with signal 11 2022-02-19T18:30:35.071 WARNING:scrape:Not-understood crash indication 2022-02-19T18:30:35.171 WARNING:scrape:Not-understood crash indication 2022-02-19T14:42:26.261 INFO:tasks.rgw.c2.client.0.smithi082.stderr:daemon-helper: command crashed with signal 11 2022-02-19T18:30:35.172 WARNING:scrape:Not-understood crash indication 2022-02-19T18:30:35.230 WARNING:scrape:Not-understood crash indication 2022-02-19T14:42:26.261 INFO:tasks.rgw.c2.client.0.smithi082.stderr:daemon-helper: command crashed with signal 11 2022-02-19T18:30:35.231 WARNING:scrape:Not-understood crash indication 2022-02-19T18:30:35.320 WARNING:scrape:Not-understood crash indication 2022-02-19T14:42:26.261 INFO:tasks.rgw.c2.client.0.smithi082.stderr:daemon-helper: command crashed with signal 11 2022-02-19T18:30:35.321 WARNING:scrape:Not-understood crash indication 2022-02-19T18:32:10.861 WARNING:scrape:Not-understood crash indication 2022-02-19T13:21:57.148 INFO:tasks.rgw.c2.client.0.smithi196.stderr:daemon-helper: command crashed with signal 11 2022-02-19T18:32:10.863 WARNING:scrape:Not-understood crash indication 2022-02-19T18:32:10.927 WARNING:scrape:Not-understood crash indication 2022-02-19T13:21:57.148 INFO:tasks.rgw.c2.client.0.smithi196.stderr:daemon-helper: command crashed with signal 11 2022-02-19T18:32:10.929 WARNING:scrape:Not-understood crash indication 2022-02-19T18:32:10.952 WARNING:scrape:Not-understood crash indication 2022-02-19T13:21:57.148 INFO:tasks.rgw.c2.client.0.smithi196.stderr:daemon-helper: command crashed with signal 11 2022-02-19T18:32:10.953 WARNING:scrape:Not-understood crash indication 2022-02-19T18:32:10.980 WARNING:scrape:Not-understood crash indication 2022-02-19T13:21:57.148 INFO:tasks.rgw.c2.client.0.smithi196.stderr:daemon-helper: command crashed with signal 11 2022-02-19T18:32:10.981 WARNING:scrape:Not-understood crash indication 2022-02-19T18:32:11.060 WARNING:scrape:Not-understood crash indication 2022-02-19T13:21:57.148 INFO:tasks.rgw.c2.client.0.smithi196.stderr:daemon-helper: command crashed with signal 11 2022-02-19T18:32:11.062 WARNING:scrape:Not-understood crash indication 2022-02-19T18:32:11.160 WARNING:scrape:Not-understood crash indication 2022-02-19T13:21:57.148 INFO:tasks.rgw.c2.client.0.smithi196.stderr:daemon-helper: command crashed with signal 11 2022-02-19T18:32:11.161 WARNING:scrape:Not-understood crash indication 2022-02-19T18:32:11.217 WARNING:scrape:Not-understood crash indication 2022-02-19T13:21:57.148 INFO:tasks.rgw.c2.client.0.smithi196.stderr:daemon-helper: command crashed with signal 11 2022-02-19T18:32:11.218 WARNING:scrape:Not-understood crash indication 2022-02-19T18:32:11.322 WARNING:scrape:Not-understood crash indication 2022-02-19T13:21:57.148 INFO:tasks.rgw.c2.client.0.smithi196.stderr:daemon-helper: command crashed with signal 11 2022-02-19T18:32:11.323 WARNING:scrape:Not-understood crash indication 2022-02-19T18:32:11.324 INFO:scrape:Found 16 distinct failure reasons 2022-02-19T18:32:11.325 INFO:scrape:Failure: SELinux denials found on ubuntu@smithi084.front.sepia.ceph.com: ['type=AVC msg=audit(1645275851.708:6963): avc: denied { setattr } for pid=29764 comm="chronyc" name="chronyc.29764.sock" dev="tmpfs" ino=183924 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645276424.304:7312): avc: denied { read } for pid=31370 comm="20-chrony-dhcp" name="passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275851.701:6952): avc: denied { getattr } for pid=29758 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645276424.303:7309): avc: denied { open } for pid=31369 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275851.696:6943): avc: denied { open } for pid=29752 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645276424.308:7320): avc: denied { write } for pid=31372 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=171125 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645276424.304:7314): avc: denied { map } for pid=31370 comm="20-chrony-dhcp" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275851.697:6949): avc: denied { execute } for pid=29752 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645276424.306:7315): avc: denied { execute } for pid=31372 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645276424.303:7311): avc: denied { execute } for pid=31369 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275851.708:6962): avc: denied { dac_override } for pid=29764 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645276424.308:7318): avc: denied { dac_override } for pid=31372 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645275851.708:6961): avc: denied { dac_read_search } for pid=29764 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645275851.697:6947): avc: denied { read } for pid=29752 comm="11-dhclient" name="passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275851.697:6948): avc: denied { getattr } for pid=29752 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275851.700:6951): avc: denied { execute } for pid=29758 comm="20-chrony-dhcp" name="chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275851.697:6946): avc: denied { connectto } for pid=29752 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645275851.697:6945): avc: denied { map } for pid=29752 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645276424.301:7304): avc: denied { execute } for pid=31369 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275851.696:6943): avc: denied { read } for pid=29752 comm="11-dhclient" name="passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275851.700:6951): avc: denied { execute_no_trans } for pid=29758 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275851.696:6942): avc: denied { map } for pid=29752 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645276424.308:7320): avc: denied { sendto } for pid=31372 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645275851.696:6942): avc: denied { execute_no_trans } for pid=29752 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645276424.303:7310): avc: denied { getattr } for pid=31369 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275851.708:6962): avc: denied { add_name } for pid=29764 comm="chronyc" name="chronyc.29764.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645276424.308:7318): avc: denied { write } for pid=31372 comm="chronyc" name="chrony" dev="tmpfs" ino=25613 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645275851.705:6956): avc: denied { read } for pid=29761 comm="chrony-helper" name="chrony-helper" dev="tmpfs" ino=29067 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645275851.708:6962): avc: denied { write } for pid=29764 comm="chronyc" name="chrony" dev="tmpfs" ino=25613 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645275851.696:6942): avc: denied { execute } for pid=29752 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645276424.301:7304): avc: denied { map } for pid=31369 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275851.708:6964): avc: denied { sendto } for pid=29764 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645276424.306:7315): avc: denied { read open } for pid=31372 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645276424.306:7315): avc: denied { execute_no_trans } for pid=31372 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275851.702:6954): avc: denied { open } for pid=29758 comm="chrony-helper" path="/run/chrony-helper/lock" dev="tmpfs" ino=25258 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645276424.308:7317): avc: denied { dac_read_search } for pid=31372 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645276424.302:7308): avc: denied { connectto } for pid=31369 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645276424.306:7315): avc: denied { map } for pid=31372 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275851.696:6942): avc: denied { execute } for pid=29752 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275851.707:6959): avc: denied { execute } for pid=29764 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275851.707:6959): avc: denied { execute_no_trans } for pid=29764 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645276424.302:7305): avc: denied { read } for pid=31369 comm="11-dhclient" name="passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645276424.302:7307): avc: denied { map } for pid=31369 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645276424.308:7318): avc: denied { create } for pid=31372 comm="chronyc" name="chronyc.31372.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645276424.308:7318): avc: denied { add_name } for pid=31372 comm="chronyc" name="chronyc.31372.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645275851.697:6946): avc: denied { write } for pid=29752 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645276424.302:7305): avc: denied { open } for pid=31369 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645276424.308:7316): avc: denied { create } for pid=31372 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645276424.308:7322): avc: denied { remove_name } for pid=31372 comm="chronyc" name="chronyc.31372.sock" dev="tmpfs" ino=199322 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645275851.708:6962): avc: denied { create } for pid=29764 comm="chronyc" name="chronyc.29764.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645276424.308:7321): avc: denied { sendto } for pid=26384 comm="chronyd" path="/run/chrony/chronyc.31372.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645275851.707:6959): avc: denied { read open } for pid=29764 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275851.708:6960): avc: denied { create } for pid=29764 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645275851.709:6965): avc: denied { sendto } for pid=26384 comm="chronyd" path="/run/chrony/chronyc.29764.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645275851.709:6966): avc: denied { remove_name } for pid=29764 comm="chronyc" name="chronyc.29764.sock" dev="tmpfs" ino=183924 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645276424.302:7308): avc: denied { write } for pid=31369 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645276424.304:7312): avc: denied { open } for pid=31370 comm="20-chrony-dhcp" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275851.707:6959): avc: denied { map } for pid=29764 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275851.709:6966): avc: denied { unlink } for pid=29764 comm="chronyc" name="chronyc.29764.sock" dev="tmpfs" ino=183924 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645275851.702:6954): avc: denied { write } for pid=29758 comm="chrony-helper" name="lock" dev="tmpfs" ino=25258 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275851.699:6950): avc: denied { execute_no_trans } for pid=29756 comm="20-chrony-dhcp" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275851.700:6951): avc: denied { read open } for pid=29758 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275851.701:6953): avc: denied { ioctl } for pid=29758 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 ioctlcmd=0x5401 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275851.703:6955): avc: denied { lock } for pid=29760 comm="flock" path="/run/chrony-helper/lock" dev="tmpfs" ino=25258 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645276424.301:7304): avc: denied { execute_no_trans } for pid=31369 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645276424.308:7319): avc: denied { setattr } for pid=31372 comm="chronyc" name="chronyc.31372.sock" dev="tmpfs" ino=199322 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645276424.303:7309): avc: denied { read } for pid=31369 comm="11-dhclient" name="passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645276424.304:7313): avc: denied { getattr } for pid=31370 comm="20-chrony-dhcp" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275851.697:6947): avc: denied { open } for pid=29752 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275851.697:6944): avc: denied { getattr } for pid=29752 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645276424.301:7304): avc: denied { execute } for pid=31369 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275851.708:6964): avc: denied { write } for pid=29764 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=171125 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645275851.699:6950): avc: denied { map } for pid=29756 comm="rm" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645276424.308:7322): avc: denied { unlink } for pid=31372 comm="chronyc" name="chronyc.31372.sock" dev="tmpfs" ino=199322 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645275851.705:6957): avc: denied { read } for pid=29761 comm="chrony-helper" name="dhclient" dev="sda1" ino=1965 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:dhcpc_state_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645276424.302:7306): avc: denied { getattr } for pid=31369 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1'] 2022-02-19T18:32:11.326 INFO:scrape:10 jobs: ['6695121', '6695067', '6695140', '6695160', '6695117', '6695153', '6695113', '6695101', '6695110', '6695144'] 2022-02-19T18:32:11.326 INFO:scrape:suites intersection: ['conf/{client', 'mds', 'mon', 'osd}', 'whitelist_health', 'whitelist_wrongly_marked_down}'] 2022-02-19T18:32:11.327 INFO:scrape:suites union: ['1-client', '1-ranks/1', '1-ranks/2', '1-volume/{0-create', '2-allow_standby_replay/no', '2-allow_standby_replay/yes', '2-client', '2-upgrade', '3-compat_client/no}}', '3-compat_client/pacific}}', '3-inline/no', '3-inline/yes', '3-upgrade-with-workload', '4-verify}', '4-verify}}', 'centos_8.stream_container_tools', 'centos_latest', 'clusters/1-mds-2-client-micro', 'conf/{client', 'mds', 'mon', 'osd}', 'overrides/{multimds/no', 'overrides/{multimds/yes', 'overrides/{pg-warn', 'pg-warn', 'roles', 'syntax', 'tasks/{0-from/pacific', 'tasks/{0-from/v16.2.4', 'tasks/{0-octopus', 'upgrade/cephfs/featureful_client/old_client/{bluestore-bitmap', 'upgrade/cephfs/mds_upgrade_sequence/{bluestore-bitmap', 'whitelist_health', 'whitelist_wrongly_marked_down}'] 2022-02-19T18:32:11.327 INFO:scrape: 2022-02-19T18:32:11.328 INFO:scrape:Failure: Command failed on smithi169 with status 2: 'cd /home/ubuntu/cephtest/ragweed && ./bootstrap' 2022-02-19T18:32:11.329 INFO:scrape:8 jobs: ['6695076', '6695161', '6695136', '6695087', '6695150', '6695127', '6695112', '6695102'] 2022-02-19T18:32:11.329 INFO:scrape:suites intersection: ['1-ceph-install/octopus', '2-partial-upgrade/firsthalf', '3-thrash/default', '4-workload/{radosbench', '5-finish-upgrade', '6-quincy', '8-final-workload/{rbd-python', 'rbd-cls', 'rbd-import-export', 'rbd_api', 'readwrite', 'rgw_ragweed_prepare', 'snaps-few-objects}', 'snaps-many-objects}', 'start}', 'thrashosds-health', 'ubuntu_20.04}', 'upgrade/octopus-x/stress-split-no-cephadm/{0-cluster/{openstack'] 2022-02-19T18:32:11.330 INFO:scrape:suites union: ['1-ceph-install/octopus', '1.1-pg-log-overrides/normal_pg_log', '1.1-pg-log-overrides/short_pg_log', '2-partial-upgrade/firsthalf', '3-thrash/default', '4-workload/{radosbench', '5-finish-upgrade', '6-quincy', '8-final-workload/{rbd-python', 'mon_election/classic', 'mon_election/connectivity', 'objectstore/bluestore-hybrid', 'objectstore/filestore-xfs', 'rbd-cls', 'rbd-import-export', 'rbd_api', 'readwrite', 'rgw_ragweed_prepare', 'snaps-few-objects}', 'snaps-many-objects}', 'start}', 'thrashosds-health', 'ubuntu_20.04}', 'upgrade/octopus-x/stress-split-no-cephadm/{0-cluster/{openstack'] 2022-02-19T18:32:11.330 INFO:scrape: 2022-02-19T18:32:11.331 INFO:scrape:Failure: No module named 'tasks.rados' 2022-02-19T18:32:11.333 INFO:scrape:3 jobs: ['6695089', '6695095', '6695092'] 2022-02-19T18:32:11.333 INFO:scrape:suites intersection: ['0-roles', '1-start', '3-stress-tasks/{radosbench', 'rbd-cls', 'rbd-import-export', 'rbd_api', 'readwrite', 'snaps-few-objects}'] 2022-02-19T18:32:11.334 INFO:scrape:suites union: ['0-roles', '1-start', '2-first-half-tasks/rbd-cls', '2-first-half-tasks/rbd-import-export', '3-stress-tasks/{radosbench', '4-second-half-tasks/radosbench', '4-second-half-tasks/rbd-import-export', 'mon_election/classic}', 'mon_election/connectivity}', 'rbd-cls', 'rbd-import-export', 'rbd_api', 'readwrite', 'snaps-few-objects}', 'upgrade/octopus-x/stress-split/{0-distro/centos_8.stream_container_tools', 'upgrade/octopus-x/stress-split/{0-distro/centos_8.stream_container_tools_crun', 'upgrade/pacific-x/stress-split/{0-distro/centos_8.stream_container_tools_crun'] 2022-02-19T18:32:11.334 INFO:scrape: 2022-02-19T18:32:11.335 INFO:scrape:Failure: SELinux denials found on ubuntu@smithi141.front.sepia.ceph.com: ['type=AVC msg=audit(1645266212.621:7677): avc: denied { sendto } for pid=26415 comm="chronyd" path="/run/chrony/chronyc.88994.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645266212.608:7659): avc: denied { getattr } for pid=88972 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=39864 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266212.611:7663): avc: denied { read open } for pid=88983 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266212.620:7672): avc: denied { create } for pid=88994 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645266212.617:7670): avc: denied { execute } for pid=88993 comm="nm-dispatcher" name="20-chrony-onoffline" dev="sda1" ino=591 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266887.103:10682): avc: denied { create } for pid=147466 comm="chronyc" name="chronyc.147466.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266212.607:7653): avc: denied { map } for pid=88972 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266212.608:7658): avc: denied { read } for pid=88972 comm="11-dhclient" name="passwd" dev="sda1" ino=39864 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266887.103:10685): avc: denied { sendto } for pid=26415 comm="chronyd" path="/run/chrony/chronyc.147466.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645266212.607:7653): avc: denied { execute_no_trans } for pid=88972 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266212.608:7657): avc: denied { write } for pid=88972 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266212.621:7678): avc: denied { remove_name } for pid=88994 comm="chronyc" name="chronyc.88994.sock" dev="tmpfs" ino=384592 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645266887.103:10681): avc: denied { dac_read_search } for pid=147466 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645266887.097:10671): avc: denied { execute_no_trans } for pid=147463 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266887.103:10682): avc: denied { write } for pid=147466 comm="chronyc" name="chrony" dev="tmpfs" ino=20747 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645266212.607:7653): avc: denied { execute } for pid=88972 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266212.607:7653): avc: denied { execute } for pid=88972 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266212.608:7654): avc: denied { open } for pid=88972 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=39862 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266212.608:7657): avc: denied { connectto } for pid=88972 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645266887.097:10671): avc: denied { execute } for pid=147463 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266212.608:7655): avc: denied { getattr } for pid=88972 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=39862 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266212.611:7663): avc: denied { execute } for pid=88983 comm="20-chrony-dhcp" name="chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266212.614:7666): avc: denied { write } for pid=88983 comm="chrony-helper" name="lock" dev="tmpfs" ino=25738 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266212.621:7675): avc: denied { setattr } for pid=88994 comm="chronyc" name="chronyc.88994.sock" dev="tmpfs" ino=384592 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266887.098:10677): avc: denied { getattr } for pid=147463 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=39864 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266887.097:10672): avc: denied { read } for pid=147463 comm="11-dhclient" name="passwd" dev="sda1" ino=39862 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266212.610:7661): avc: denied { write } for pid=88977 comm="20-chrony-dhcp" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266212.618:7671): avc: denied { map } for pid=88994 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266212.618:7671): avc: denied { read open } for pid=88994 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266887.101:10679): avc: denied { execute } for pid=147466 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266212.610:7662): avc: denied { execute_no_trans } for pid=88980 comm="20-chrony-dhcp" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266212.614:7666): avc: denied { open } for pid=88983 comm="chrony-helper" path="/run/chrony-helper/lock" dev="tmpfs" ino=25738 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266887.103:10684): avc: denied { sendto } for pid=147466 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645266887.097:10671): avc: denied { execute } for pid=147463 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266212.621:7676): avc: denied { sendto } for pid=88994 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645266887.097:10675): avc: denied { write } for pid=147463 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266212.621:7678): avc: denied { unlink } for pid=88994 comm="chronyc" name="chronyc.88994.sock" dev="tmpfs" ino=384592 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266212.612:7664): avc: denied { getattr } for pid=88983 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266887.097:10675): avc: denied { connectto } for pid=147463 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645266887.098:10676): avc: denied { open } for pid=147463 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=39864 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266212.614:7667): avc: denied { lock } for pid=88990 comm="flock" path="/run/chrony-helper/lock" dev="tmpfs" ino=25738 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266887.101:10679): avc: denied { execute_no_trans } for pid=147466 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266212.612:7665): avc: denied { ioctl } for pid=88983 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 ioctlcmd=0x5401 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266212.618:7671): avc: denied { execute_no_trans } for pid=88994 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266212.608:7654): avc: denied { read } for pid=88972 comm="11-dhclient" name="passwd" dev="sda1" ino=39862 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266887.098:10676): avc: denied { read } for pid=147463 comm="11-dhclient" name="passwd" dev="sda1" ino=39864 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266212.620:7673): avc: denied { dac_read_search } for pid=88994 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645266887.103:10686): avc: denied { remove_name } for pid=147466 comm="chronyc" name="chronyc.147466.sock" dev="tmpfs" ino=603100 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645266212.621:7674): avc: denied { add_name } for pid=88994 comm="chronyc" name="chronyc.88994.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645266212.610:7662): avc: denied { map } for pid=88980 comm="rm" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266887.101:10679): avc: denied { map } for pid=147466 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266887.097:10672): avc: denied { open } for pid=147463 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=39862 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266212.608:7658): avc: denied { open } for pid=88972 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=39864 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266212.617:7668): avc: denied { read } for pid=88991 comm="chrony-helper" name="chrony-helper" dev="tmpfs" ino=20246 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645266212.618:7671): avc: denied { execute } for pid=88994 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266212.617:7670): avc: denied { execute_no_trans } for pid=88993 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/20-chrony-onoffline" dev="sda1" ino=591 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266887.103:10682): avc: denied { add_name } for pid=147466 comm="chronyc" name="chronyc.147466.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645266887.097:10671): avc: denied { map } for pid=147463 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266212.608:7656): avc: denied { map } for pid=88972 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=39862 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266887.097:10674): avc: denied { map } for pid=147463 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=39862 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266212.621:7674): avc: denied { dac_override } for pid=88994 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645266887.103:10682): avc: denied { dac_override } for pid=147466 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645266212.621:7674): avc: denied { create } for pid=88994 comm="chronyc" name="chronyc.88994.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266887.103:10686): avc: denied { unlink } for pid=147466 comm="chronyc" name="chronyc.147466.sock" dev="tmpfs" ino=603100 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266887.097:10673): avc: denied { getattr } for pid=147463 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=39862 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266212.621:7676): avc: denied { write } for pid=88994 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=170200 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266212.617:7669): avc: denied { read } for pid=88991 comm="chrony-helper" name="dhclient" dev="sda1" ino=1965 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:dhcpc_state_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645266212.611:7663): avc: denied { execute_no_trans } for pid=88983 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266212.609:7660): avc: denied { execute } for pid=88972 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266887.103:10680): avc: denied { create } for pid=147466 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645266212.621:7674): avc: denied { write } for pid=88994 comm="chronyc" name="chrony" dev="tmpfs" ino=20747 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645266887.103:10684): avc: denied { write } for pid=147466 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=170200 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266887.101:10679): avc: denied { read open } for pid=147466 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266887.098:10678): avc: denied { execute } for pid=147463 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266887.103:10683): avc: denied { setattr } for pid=147466 comm="chronyc" name="chronyc.147466.sock" dev="tmpfs" ino=603100 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1'] 2022-02-19T18:32:11.335 INFO:scrape:2 jobs: ['6695081', '6695074'] 2022-02-19T18:32:11.336 INFO:scrape:suites intersection: ['conf/{client', 'mds', 'mon', 'osd}', 'whitelist_health', 'whitelist_wrongly_marked_down}'] 2022-02-19T18:32:11.336 INFO:scrape:suites union: ['1-client', '1-ranks/2', '1-volume/{0-create', '2-allow_standby_replay/yes', '2-client', '2-upgrade', '3-compat_client/no}}', '3-inline/no', '3-upgrade-with-workload', '4-verify}', '4-verify}}', 'centos_8.stream_container_tools', 'centos_latest', 'clusters/1-mds-2-client-micro', 'conf/{client', 'mds', 'mon', 'osd}', 'overrides/{multimds/no', 'overrides/{pg-warn', 'pg-warn', 'roles', 'syntax', 'tasks/{0-from/pacific', 'tasks/{0-octopus', 'upgrade/cephfs/featureful_client/old_client/{bluestore-bitmap', 'upgrade/cephfs/mds_upgrade_sequence/{bluestore-bitmap', 'whitelist_health', 'whitelist_wrongly_marked_down}'] 2022-02-19T18:32:11.337 INFO:scrape: 2022-02-19T18:32:11.337 INFO:scrape:Failure: SELinux denials found on ubuntu@smithi142.front.sepia.ceph.com: ['type=AVC msg=audit(1645281558.897:6950): avc: denied { open } for pid=29739 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11735 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.733:7747): avc: denied { setattr } for pid=32897 comm="chronyc" name="chronyc.32897.sock" dev="tmpfs" ino=219816 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281558.895:6945): avc: denied { map } for pid=29739 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.901:6956): avc: denied { ioctl } for pid=29745 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 ioctlcmd=0x5401 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.728:7737): avc: denied { getattr } for pid=32894 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.727:7735): avc: denied { execute } for pid=32894 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.733:7746): avc: denied { add_name } for pid=32897 comm="chronyc" name="chronyc.32897.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645281968.733:7746): avc: denied { write } for pid=32897 comm="chronyc" name="chrony" dev="tmpfs" ino=22999 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645281804.890:7421): avc: denied { read open } for pid=31542 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.897:6950): avc: denied { read } for pid=29739 comm="11-dhclient" name="passwd" dev="sda1" ino=11735 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.909:6969): avc: denied { write } for pid=29752 comm="chronyc" name="chrony" dev="tmpfs" ino=22999 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645281558.907:6963): avc: denied { execute_no_trans } for pid=29752 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.231:7354): avc: denied { map } for pid=31413 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.733:7750): avc: denied { remove_name } for pid=32897 comm="chronyc" name="chronyc.32897.sock" dev="tmpfs" ino=219816 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645281804.895:7427): avc: denied { read } for pid=31549 comm="chrony-helper" name="dhclient" dev="sda1" ino=1965 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:dhcpc_state_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645281558.909:6969): avc: denied { add_name } for pid=29752 comm="chronyc" name="chronyc.29752.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645281968.733:7748): avc: denied { sendto } for pid=32897 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645281968.728:7741): avc: denied { getattr } for pid=32894 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11735 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.907:6963): avc: denied { map } for pid=29752 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.232:7359): avc: denied { read } for pid=31413 comm="11-dhclient" name="passwd" dev="sda1" ino=11735 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.889:7420): avc: denied { map } for pid=31539 comm="rm" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.900:6954): avc: denied { execute_no_trans } for pid=29745 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.889:7420): avc: denied { execute_no_trans } for pid=31539 comm="20-chrony-dhcp" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.728:7739): avc: denied { write } for pid=32894 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281804.237:7365): avc: denied { add_name } for pid=31416 comm="chronyc" name="chronyc.31416.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645281804.232:7359): avc: denied { open } for pid=31413 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11735 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.907:6963): avc: denied { execute } for pid=29752 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.896:6949): avc: denied { write } for pid=29739 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281804.237:7367): avc: denied { sendto } for pid=31416 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645281804.237:7365): avc: denied { dac_override } for pid=31416 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645281558.896:6946): avc: denied { open } for pid=29739 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.235:7362): avc: denied { execute_no_trans } for pid=31416 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.895:6945): avc: denied { execute } for pid=29739 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.733:7748): avc: denied { write } for pid=32897 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=169119 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281804.892:7424): avc: denied { open } for pid=31542 comm="chrony-helper" path="/run/chrony-helper/lock" dev="tmpfs" ino=24791 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.896:6946): avc: denied { read } for pid=29739 comm="11-dhclient" name="passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.733:7746): avc: denied { create } for pid=32897 comm="chronyc" name="chronyc.32897.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281804.895:7426): avc: denied { read } for pid=31549 comm="chrony-helper" name="chrony-helper" dev="tmpfs" ino=21840 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645281558.909:6967): avc: denied { create } for pid=29752 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645281804.892:7424): avc: denied { write } for pid=31542 comm="chrony-helper" name="lock" dev="tmpfs" ino=24791 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.238:7369): avc: denied { unlink } for pid=31416 comm="chronyc" name="chronyc.31416.sock" dev="tmpfs" ino=197590 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281968.733:7750): avc: denied { unlink } for pid=32897 comm="chronyc" name="chronyc.32897.sock" dev="tmpfs" ino=219816 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281968.733:7745): avc: denied { dac_read_search } for pid=32897 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645281558.899:6953): avc: denied { execute_no_trans } for pid=29743 comm="20-chrony-dhcp" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.902:6957): avc: denied { write } for pid=29745 comm="chrony-helper" name="lock" dev="tmpfs" ino=24791 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.237:7368): avc: denied { sendto } for pid=26398 comm="chronyd" path="/run/chrony/chronyc.31416.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645281558.896:6947): avc: denied { getattr } for pid=29739 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.733:7746): avc: denied { dac_override } for pid=32897 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645281804.232:7360): avc: denied { getattr } for pid=31413 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11735 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.890:7421): avc: denied { execute_no_trans } for pid=31542 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.909:6969): avc: denied { dac_override } for pid=29752 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645281558.909:6971): avc: denied { write } for pid=29752 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=169119 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281804.231:7354): avc: denied { execute_no_trans } for pid=31413 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.905:6960): avc: denied { read } for pid=29748 comm="chrony-helper" name="chrony-helper" dev="tmpfs" ino=21840 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645281968.727:7735): avc: denied { map } for pid=32894 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.728:7740): avc: denied { read } for pid=32894 comm="11-dhclient" name="passwd" dev="sda1" ino=11735 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.731:7743): avc: denied { read open } for pid=32897 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.909:6969): avc: denied { create } for pid=29752 comm="chronyc" name="chronyc.29752.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281558.909:6973): avc: denied { unlink } for pid=29752 comm="chronyc" name="chronyc.29752.sock" dev="tmpfs" ino=183883 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281804.891:7423): avc: denied { ioctl } for pid=31542 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 ioctlcmd=0x5401 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.909:6971): avc: denied { sendto } for pid=29752 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645281804.238:7369): avc: denied { remove_name } for pid=31416 comm="chronyc" name="chronyc.31416.sock" dev="tmpfs" ino=197590 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645281558.909:6973): avc: denied { remove_name } for pid=29752 comm="chronyc" name="chronyc.29752.sock" dev="tmpfs" ino=183883 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645281804.235:7362): avc: denied { execute } for pid=31416 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.237:7367): avc: denied { write } for pid=31416 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=169119 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281558.909:6972): avc: denied { sendto } for pid=26398 comm="chronyd" path="/run/chrony/chronyc.29752.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645281968.731:7743): avc: denied { execute } for pid=32897 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.895:6945): avc: denied { execute_no_trans } for pid=29739 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.909:6968): avc: denied { dac_read_search } for pid=29752 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645281558.896:6949): avc: denied { connectto } for pid=29739 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645281804.232:7357): avc: denied { map } for pid=31413 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.895:6945): avc: denied { execute } for pid=29739 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.900:6954): avc: denied { read open } for pid=29745 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.902:6957): avc: denied { open } for pid=29745 comm="chrony-helper" path="/run/chrony-helper/lock" dev="tmpfs" ino=24791 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.731:7743): avc: denied { execute_no_trans } for pid=32897 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.237:7363): avc: denied { create } for pid=31416 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645281968.728:7740): avc: denied { open } for pid=32894 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11735 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.897:6951): avc: denied { getattr } for pid=29739 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11735 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.903:6958): avc: denied { lock } for pid=29747 comm="flock" path="/run/chrony-helper/lock" dev="tmpfs" ino=24791 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.232:7358): avc: denied { write } for pid=31413 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281558.900:6954): avc: denied { execute } for pid=29745 comm="20-chrony-dhcp" name="chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.237:7365): avc: denied { create } for pid=31416 comm="chronyc" name="chronyc.31416.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281804.235:7362): avc: denied { map } for pid=31416 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.733:7744): avc: denied { create } for pid=32897 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645281804.231:7354): avc: denied { execute } for pid=31413 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.906:6962): avc: denied { execute } for pid=29750 comm="nm-dispatcher" name="20-chrony-onoffline" dev="sda1" ino=591 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.896:6948): avc: denied { map } for pid=29739 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.731:7743): avc: denied { map } for pid=32897 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.231:7354): avc: denied { execute } for pid=31413 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.733:7749): avc: denied { sendto } for pid=26398 comm="chronyd" path="/run/chrony/chronyc.32897.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645281804.232:7355): avc: denied { read } for pid=31413 comm="11-dhclient" name="passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.899:6953): avc: denied { map } for pid=29743 comm="rm" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.727:7735): avc: denied { execute } for pid=32894 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.887:7419): avc: denied { write } for pid=31532 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281804.235:7362): avc: denied { read open } for pid=31416 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.232:7358): avc: denied { connectto } for pid=31413 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645281968.728:7738): avc: denied { map } for pid=32894 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.891:7422): avc: denied { getattr } for pid=31542 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.232:7356): avc: denied { getattr } for pid=31413 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.232:7355): avc: denied { open } for pid=31413 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.893:7425): avc: denied { lock } for pid=31547 comm="flock" path="/run/chrony-helper/lock" dev="tmpfs" ino=24791 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.898:7428): avc: denied { create } for pid=31556 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645281804.232:7361): avc: denied { execute } for pid=31413 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.909:6970): avc: denied { setattr } for pid=29752 comm="chronyc" name="chronyc.29752.sock" dev="tmpfs" ino=183883 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281968.728:7736): avc: denied { open } for pid=32894 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.237:7366): avc: denied { setattr } for pid=31416 comm="chronyc" name="chronyc.31416.sock" dev="tmpfs" ino=197590 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281804.237:7365): avc: denied { write } for pid=31416 comm="chronyc" name="chrony" dev="tmpfs" ino=22999 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645281804.890:7421): avc: denied { execute } for pid=31542 comm="20-chrony-dhcp" name="chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.728:7742): avc: denied { execute } for pid=32894 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.901:6955): avc: denied { getattr } for pid=29745 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.727:7735): avc: denied { execute_no_trans } for pid=32894 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.897:6952): avc: denied { execute } for pid=29739 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.237:7364): avc: denied { dac_read_search } for pid=31416 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645281968.728:7739): avc: denied { connectto } for pid=32894 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645281558.906:6962): avc: denied { execute_no_trans } for pid=29750 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/20-chrony-onoffline" dev="sda1" ino=591 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.905:6961): avc: denied { read } for pid=29748 comm="chrony-helper" name="dhclient" dev="sda1" ino=1965 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:dhcpc_state_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645281968.728:7736): avc: denied { read } for pid=32894 comm="11-dhclient" name="passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.907:6963): avc: denied { read open } for pid=29752 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1'] 2022-02-19T18:32:11.338 INFO:scrape:1 jobs: ['6695156'] 2022-02-19T18:32:11.340 INFO:scrape:suites: ['1-client', '2-upgrade', '3-client-upgrade', '4-compat_client', '5-client-sanity}}', 'centos_latest', 'clusters/1-mds-2-client-micro', 'conf/{client', 'mds', 'mon', 'osd}', 'overrides/{multimds/yes', 'pg-warn', 'tasks/{0-octopus', 'upgrade/cephfs/featureful_client/upgraded_client/{bluestore-bitmap', 'whitelist_health', 'whitelist_wrongly_marked_down}'] 2022-02-19T18:32:11.340 INFO:scrape: 2022-02-19T18:32:11.340 INFO:scrape:Failure: SELinux denials found on ubuntu@smithi105.front.sepia.ceph.com: ['type=AVC msg=audit(1645280900.553:6953): avc: denied { open } for pid=29747 comm="chrony-helper" path="/run/chrony-helper/lock" dev="tmpfs" ino=23510 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280900.551:6950): avc: denied { execute_no_trans } for pid=29747 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281471.733:7314): avc: denied { write } for pid=31380 comm="chronyc" name="chrony" dev="tmpfs" ino=23745 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645280900.547:6941): avc: denied { execute } for pid=29743 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280900.548:6946): avc: denied { read } for pid=29743 comm="11-dhclient" name="passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281471.727:7308): avc: denied { open } for pid=31377 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281471.733:7314): avc: denied { dac_override } for pid=31380 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645281471.732:7312): avc: denied { create } for pid=31380 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645280900.558:6959): avc: denied { read open } for pid=29754 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281471.727:7308): avc: denied { read } for pid=31377 comm="11-dhclient" name="passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281471.727:7304): avc: denied { open } for pid=31377 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280900.547:6941): avc: denied { map } for pid=29743 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280900.548:6946): avc: denied { open } for pid=29743 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281471.726:7303): avc: denied { execute_no_trans } for pid=31377 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281471.733:7315): avc: denied { setattr } for pid=31380 comm="chronyc" name="chronyc.31380.sock" dev="tmpfs" ino=197136 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645280900.560:6965): avc: denied { dac_override } for pid=29754 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645281471.733:7316): avc: denied { sendto } for pid=31380 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645280900.548:6948): avc: denied { execute } for pid=29743 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280900.547:6943): avc: denied { getattr } for pid=29743 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280900.548:6945): avc: denied { connectto } for pid=29743 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645280900.556:6957): avc: denied { read } for pid=29750 comm="chrony-helper" name="dhclient" dev="sda1" ino=1965 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:dhcpc_state_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645280900.560:6967): avc: denied { sendto } for pid=29754 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645281471.733:7313): avc: denied { dac_read_search } for pid=31380 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645280900.558:6959): avc: denied { execute_no_trans } for pid=29754 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280900.560:6969): avc: denied { remove_name } for pid=29754 comm="chronyc" name="chronyc.29754.sock" dev="tmpfs" ino=184723 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645281471.728:7310): avc: denied { execute } for pid=31377 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280900.552:6952): avc: denied { ioctl } for pid=29747 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 ioctlcmd=0x5401 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281471.726:7303): avc: denied { execute } for pid=31377 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280900.547:6942): avc: denied { open } for pid=29743 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281471.727:7307): avc: denied { connectto } for pid=31377 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645280900.547:6942): avc: denied { read } for pid=29743 comm="11-dhclient" name="passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280900.548:6947): avc: denied { getattr } for pid=29743 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280900.560:6965): avc: denied { write } for pid=29754 comm="chronyc" name="chrony" dev="tmpfs" ino=23745 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645281471.733:7314): avc: denied { add_name } for pid=31380 comm="chronyc" name="chronyc.31380.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645280900.551:6950): avc: denied { execute } for pid=29747 comm="20-chrony-dhcp" name="chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280900.556:6956): avc: denied { read } for pid=29750 comm="chrony-helper" name="chrony-helper" dev="tmpfs" ino=27709 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645280900.560:6966): avc: denied { setattr } for pid=29754 comm="chronyc" name="chronyc.29754.sock" dev="tmpfs" ino=184723 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645280900.547:6941): avc: denied { execute_no_trans } for pid=29743 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281471.733:7317): avc: denied { sendto } for pid=26397 comm="chronyd" path="/run/chrony/chronyc.31380.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645280900.559:6963): avc: denied { create } for pid=29754 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645280900.558:6959): avc: denied { execute } for pid=29754 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280900.560:6965): avc: denied { create } for pid=29754 comm="chronyc" name="chronyc.29754.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645280900.550:6949): avc: denied { execute_no_trans } for pid=29745 comm="20-chrony-dhcp" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280900.560:6968): avc: denied { sendto } for pid=26397 comm="chronyd" path="/run/chrony/chronyc.29754.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645281471.726:7303): avc: denied { execute } for pid=31377 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280900.550:6949): avc: denied { map } for pid=29745 comm="rm" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281471.726:7303): avc: denied { map } for pid=31377 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281471.733:7316): avc: denied { write } for pid=31380 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=155239 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645280900.551:6950): avc: denied { read open } for pid=29747 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280900.547:6941): avc: denied { execute } for pid=29743 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280900.560:6969): avc: denied { unlink } for pid=29754 comm="chronyc" name="chronyc.29754.sock" dev="tmpfs" ino=184723 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645280900.547:6944): avc: denied { map } for pid=29743 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281471.731:7311): avc: denied { map } for pid=31380 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280900.560:6964): avc: denied { dac_read_search } for pid=29754 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645281471.733:7318): avc: denied { remove_name } for pid=31380 comm="chronyc" name="chronyc.31380.sock" dev="tmpfs" ino=197136 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645281471.731:7311): avc: denied { execute } for pid=31380 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281471.727:7304): avc: denied { read } for pid=31377 comm="11-dhclient" name="passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280900.560:6965): avc: denied { add_name } for pid=29754 comm="chronyc" name="chronyc.29754.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645281471.727:7307): avc: denied { write } for pid=31377 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645280900.560:6967): avc: denied { write } for pid=29754 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=155239 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281471.727:7306): avc: denied { map } for pid=31377 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280900.553:6953): avc: denied { write } for pid=29747 comm="chrony-helper" name="lock" dev="tmpfs" ino=23510 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281471.727:7309): avc: denied { getattr } for pid=31377 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281471.733:7318): avc: denied { unlink } for pid=31380 comm="chronyc" name="chronyc.31380.sock" dev="tmpfs" ino=197136 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645280900.554:6954): avc: denied { lock } for pid=29749 comm="flock" path="/run/chrony-helper/lock" dev="tmpfs" ino=23510 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280900.558:6959): avc: denied { map } for pid=29754 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280900.552:6951): avc: denied { getattr } for pid=29747 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281471.733:7314): avc: denied { create } for pid=31380 comm="chronyc" name="chronyc.31380.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281471.727:7305): avc: denied { getattr } for pid=31377 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281471.731:7311): avc: denied { read open } for pid=31380 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280900.548:6945): avc: denied { write } for pid=29743 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281471.731:7311): avc: denied { execute_no_trans } for pid=31380 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1'] 2022-02-19T18:32:11.341 INFO:scrape:2 jobs: ['6695149', '6695129'] 2022-02-19T18:32:11.342 INFO:scrape:suites intersection: ['conf/{client', 'mds', 'mon', 'osd}', 'whitelist_health', 'whitelist_wrongly_marked_down}'] 2022-02-19T18:32:11.342 INFO:scrape:suites union: ['1-client', '1-ranks/2', '1-volume/{0-create', '2-allow_standby_replay/no', '2-client', '2-upgrade', '3-compat_client/no}}', '3-inline/yes', '3-upgrade-with-workload', '4-verify}', '4-verify}}', 'centos_8.stream_container_tools', 'centos_latest', 'clusters/1-mds-2-client-micro', 'conf/{client', 'mds', 'mon', 'osd}', 'overrides/{multimds/yes', 'overrides/{pg-warn', 'pg-warn', 'roles', 'syntax', 'tasks/{0-from/pacific', 'tasks/{0-octopus', 'upgrade/cephfs/featureful_client/old_client/{bluestore-bitmap', 'upgrade/cephfs/mds_upgrade_sequence/{bluestore-bitmap', 'whitelist_health', 'whitelist_wrongly_marked_down}'] 2022-02-19T18:32:11.343 INFO:scrape: 2022-02-19T18:32:11.344 INFO:scrape:Failure: SELinux denials found on ubuntu@smithi087.front.sepia.ceph.com: ['type=AVC msg=audit(1645266282.300:6955): avc: denied { execute_no_trans } for pid=29751 comm="20-chrony-dhcp" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266282.298:6953): avc: denied { getattr } for pid=29747 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11734 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266654.934:7772): avc: denied { read open } for pid=33029 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266282.304:6959): avc: denied { write } for pid=29753 comm="chrony-helper" name="lock" dev="tmpfs" ino=27672 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266282.302:6958): avc: denied { ioctl } for pid=29753 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 ioctlcmd=0x5401 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266496.496:7376): avc: denied { getattr } for pid=31461 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11734 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266282.311:6973): avc: denied { write } for pid=29760 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=170345 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266282.311:6975): avc: denied { remove_name } for pid=29760 comm="chronyc" name="chronyc.29760.sock" dev="tmpfs" ino=186195 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645266496.501:7385): avc: denied { write } for pid=31464 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=170345 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266497.179:7449): avc: denied { open } for pid=31589 comm="chrony-helper" path="/run/chrony-helper/lock" dev="tmpfs" ino=27672 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266282.297:6948): avc: denied { read } for pid=29747 comm="11-dhclient" name="passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266282.297:6951): avc: denied { write } for pid=29747 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266497.174:7442): avc: denied { open } for pid=31579 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11734 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266497.176:7446): avc: denied { read open } for pid=31589 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266496.496:7374): avc: denied { write } for pid=31461 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266654.931:7770): avc: denied { getattr } for pid=33026 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11734 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266496.495:7372): avc: denied { getattr } for pid=31461 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266497.176:7446): avc: denied { execute } for pid=31589 comm="20-chrony-dhcp" name="chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266282.309:6965): avc: denied { execute } for pid=29760 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266496.499:7380): avc: denied { map } for pid=31464 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266496.501:7387): avc: denied { dac_override } for pid=31464 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645266497.172:7437): avc: denied { map } for pid=31579 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266496.495:7371): avc: denied { read } for pid=31461 comm="11-dhclient" name="passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266496.496:7375): avc: denied { open } for pid=31461 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11734 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266654.931:7771): avc: denied { execute } for pid=33026 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266497.176:7445): avc: denied { execute_no_trans } for pid=31586 comm="20-chrony-dhcp" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266282.296:6947): avc: denied { execute_no_trans } for pid=29747 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266496.499:7380): avc: denied { execute_no_trans } for pid=31464 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266654.930:7765): avc: denied { read } for pid=33026 comm="11-dhclient" name="passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266496.494:7368): avc: denied { execute_no_trans } for pid=31461 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266497.181:7452): avc: denied { read } for pid=31597 comm="chrony-helper" name="dhclient" dev="sda1" ino=1965 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:dhcpc_state_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645266282.304:6959): avc: denied { open } for pid=29753 comm="chrony-helper" path="/run/chrony-helper/lock" dev="tmpfs" ino=27672 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266496.501:7387): avc: denied { unlink } for pid=31464 comm="chronyc" name="chronyc.31464.sock" dev="tmpfs" ino=205675 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266282.301:6956): avc: denied { read open } for pid=29753 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266496.496:7377): avc: denied { execute } for pid=31461 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266497.185:7454): avc: denied { setattr } for pid=31604 comm="chronyc" name="chronyc.31604.sock" dev="tmpfs" ino=201536 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266282.297:6948): avc: denied { open } for pid=29747 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266496.494:7368): avc: denied { map } for pid=31461 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266496.501:7387): avc: denied { remove_name } for pid=31464 comm="chronyc" name="chronyc.31464.sock" dev="tmpfs" ino=205675 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645266497.174:7443): avc: denied { getattr } for pid=31579 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11734 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266282.310:6971): avc: denied { create } for pid=29760 comm="chronyc" name="chronyc.29760.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266496.501:7383): avc: denied { write } for pid=31464 comm="chronyc" name="chrony" dev="tmpfs" ino=22164 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645266282.301:6956): avc: denied { execute } for pid=29753 comm="20-chrony-dhcp" name="chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266496.501:7387): avc: denied { dac_read_search } for pid=31464 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645266282.296:6947): avc: denied { execute } for pid=29747 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266282.311:6974): avc: denied { sendto } for pid=26400 comm="chronyd" path="/run/chrony/chronyc.29760.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645266654.929:7764): avc: denied { map } for pid=33026 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266282.297:6949): avc: denied { getattr } for pid=29747 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266496.494:7368): avc: denied { execute } for pid=31461 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266282.310:6971): avc: denied { add_name } for pid=29760 comm="chronyc" name="chronyc.29760.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645266282.310:6969): avc: denied { create } for pid=29760 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645266282.297:6950): avc: denied { map } for pid=29747 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266497.185:7456): avc: denied { sendto } for pid=26400 comm="chronyd" path="/run/chrony/chronyc.31604.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645266654.936:7779): avc: denied { remove_name } for pid=33029 comm="chronyc" name="chronyc.33029.sock" dev="tmpfs" ino=216717 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645266654.929:7764): avc: denied { execute } for pid=33026 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266654.935:7773): avc: denied { create } for pid=33029 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645266496.494:7368): avc: denied { execute } for pid=31461 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266654.936:7778): avc: denied { sendto } for pid=26400 comm="chronyd" path="/run/chrony/chronyc.33029.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645266497.174:7442): avc: denied { read } for pid=31579 comm="11-dhclient" name="passwd" dev="sda1" ino=11734 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266282.302:6957): avc: denied { getattr } for pid=29753 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266654.936:7775): avc: denied { create } for pid=33029 comm="chronyc" name="chronyc.33029.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266282.309:6965): avc: denied { map } for pid=29760 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266497.176:7445): avc: denied { map } for pid=31586 comm="rm" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266496.501:7382): avc: denied { dac_read_search } for pid=31464 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645266496.501:7383): avc: denied { dac_override } for pid=31464 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645266282.311:6973): avc: denied { sendto } for pid=29760 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645266654.930:7768): avc: denied { write } for pid=33026 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266282.307:6963): avc: denied { read } for pid=29756 comm="chrony-helper" name="dhclient" dev="sda1" ino=1965 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:dhcpc_state_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645266497.176:7446): avc: denied { execute_no_trans } for pid=31589 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266282.309:6965): avc: denied { execute_no_trans } for pid=29760 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266654.930:7765): avc: denied { open } for pid=33026 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266654.931:7769): avc: denied { open } for pid=33026 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11734 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266282.310:6970): avc: denied { dac_read_search } for pid=29760 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645266497.185:7455): avc: denied { write } for pid=31604 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=170345 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266282.296:6947): avc: denied { map } for pid=29747 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266654.934:7772): avc: denied { execute_no_trans } for pid=33029 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266497.177:7448): avc: denied { ioctl } for pid=31589 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 ioctlcmd=0x5401 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266654.936:7779): avc: denied { unlink } for pid=33029 comm="chronyc" name="chronyc.33029.sock" dev="tmpfs" ino=216717 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266497.179:7449): avc: denied { write } for pid=31589 comm="chrony-helper" name="lock" dev="tmpfs" ino=27672 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266496.501:7384): avc: denied { setattr } for pid=31464 comm="chronyc" name="chronyc.31464.sock" dev="tmpfs" ino=205675 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266496.501:7385): avc: denied { sendto } for pid=31464 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645266496.495:7371): avc: denied { open } for pid=31461 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266497.173:7438): avc: denied { read } for pid=31579 comm="11-dhclient" name="passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266654.936:7777): avc: denied { sendto } for pid=33029 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645266654.936:7775): avc: denied { dac_override } for pid=33029 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645266282.307:6962): avc: denied { read } for pid=29756 comm="chrony-helper" name="chrony-helper" dev="tmpfs" ino=29866 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645266282.304:6960): avc: denied { lock } for pid=29755 comm="flock" path="/run/chrony-helper/lock" dev="tmpfs" ino=27672 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266496.501:7381): avc: denied { create } for pid=31464 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645266496.496:7375): avc: denied { read } for pid=31461 comm="11-dhclient" name="passwd" dev="sda1" ino=11734 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266496.501:7383): avc: denied { create } for pid=31464 comm="chronyc" name="chronyc.31464.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266282.310:6971): avc: denied { write } for pid=29760 comm="chronyc" name="chrony" dev="tmpfs" ino=22164 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645266497.173:7440): avc: denied { map } for pid=31579 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266282.297:6951): avc: denied { connectto } for pid=29747 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645266282.298:6952): avc: denied { read } for pid=29747 comm="11-dhclient" name="passwd" dev="sda1" ino=11734 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266654.930:7767): avc: denied { map } for pid=33026 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266497.179:7450): avc: denied { lock } for pid=31595 comm="flock" path="/run/chrony-helper/lock" dev="tmpfs" ino=27672 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266282.300:6955): avc: denied { map } for pid=29751 comm="rm" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266654.936:7775): avc: denied { add_name } for pid=33029 comm="chronyc" name="chronyc.33029.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645266497.173:7438): avc: denied { open } for pid=31579 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266497.181:7451): avc: denied { read } for pid=31597 comm="chrony-helper" name="chrony-helper" dev="tmpfs" ino=29866 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645266282.308:6964): avc: denied { write } for pid=29758 comm="20-chrony-onoff" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266497.173:7441): avc: denied { connectto } for pid=31579 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645266654.936:7774): avc: denied { dac_read_search } for pid=33029 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645266282.309:6965): avc: denied { read open } for pid=29760 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266497.172:7437): avc: denied { execute } for pid=31579 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266654.931:7769): avc: denied { read } for pid=33026 comm="11-dhclient" name="passwd" dev="sda1" ino=11734 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266496.496:7373): avc: denied { map } for pid=31461 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266654.936:7775): avc: denied { write } for pid=33029 comm="chronyc" name="chrony" dev="tmpfs" ino=22164 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645266282.310:6971): avc: denied { dac_override } for pid=29760 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645266496.499:7380): avc: denied { execute } for pid=31464 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266282.301:6956): avc: denied { execute_no_trans } for pid=29753 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266497.173:7439): avc: denied { getattr } for pid=31579 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266496.501:7386): avc: denied { sendto } for pid=26400 comm="chronyd" path="/run/chrony/chronyc.31464.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645266654.930:7766): avc: denied { getattr } for pid=33026 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266654.934:7772): avc: denied { execute } for pid=33029 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266654.929:7764): avc: denied { execute_no_trans } for pid=33026 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266496.501:7383): avc: denied { add_name } for pid=31464 comm="chronyc" name="chronyc.31464.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645266497.185:7453): avc: denied { create } for pid=31604 comm="chronyc" name="chronyc.31604.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266282.311:6972): avc: denied { setattr } for pid=29760 comm="chronyc" name="chronyc.29760.sock" dev="tmpfs" ino=186195 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266497.185:7457): avc: denied { unlink } for pid=31604 comm="chronyc" name="chronyc.31604.sock" dev="tmpfs" ino=201536 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266496.499:7380): avc: denied { read open } for pid=31464 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266497.174:7444): avc: denied { execute } for pid=31579 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266282.296:6947): avc: denied { execute } for pid=29747 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266496.496:7374): avc: denied { connectto } for pid=31461 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645266654.936:7776): avc: denied { setattr } for pid=33029 comm="chronyc" name="chronyc.33029.sock" dev="tmpfs" ino=216717 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266282.311:6975): avc: denied { unlink } for pid=29760 comm="chronyc" name="chronyc.29760.sock" dev="tmpfs" ino=186195 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266497.177:7447): avc: denied { getattr } for pid=31589 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266282.298:6954): avc: denied { execute } for pid=29747 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266282.298:6952): avc: denied { open } for pid=29747 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11734 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266654.936:7777): avc: denied { write } for pid=33029 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=170345 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266654.934:7772): avc: denied { map } for pid=33029 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266654.929:7764): avc: denied { execute } for pid=33026 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1'] 2022-02-19T18:32:11.344 INFO:scrape:1 jobs: ['6695086'] 2022-02-19T18:32:11.345 INFO:scrape:suites: ['1-client', '2-upgrade', '3-client-upgrade', '4-compat_client', '5-client-sanity}}', 'centos_latest', 'clusters/1-mds-2-client-micro', 'conf/{client', 'mds', 'mon', 'osd}', 'overrides/{multimds/no', 'pg-warn', 'tasks/{0-octopus', 'upgrade/cephfs/featureful_client/upgraded_client/{bluestore-bitmap', 'whitelist_health', 'whitelist_wrongly_marked_down}'] 2022-02-19T18:32:11.345 INFO:scrape: 2022-02-19T18:32:11.346 INFO:scrape:Failure: rgw multisite test failures 2022-02-19T18:32:11.346 INFO:scrape:4 jobs: ['6695099', '6695073', '6695147', '6695123'] 2022-02-19T18:32:11.347 INFO:scrape:suites intersection: ['frontend', 'overrides', 'realm', 'tasks', 'upgrade/octopus-x/rgw-multisite/{clusters'] 2022-02-19T18:32:11.347 INFO:scrape:suites union: ['frontend', 'overrides', 'realm', 'tasks', 'upgrade/octopus-x/rgw-multisite/{clusters', 'upgrade/primary}', 'upgrade/secondary}'] 2022-02-19T18:32:11.348 INFO:scrape: 2022-02-19T18:32:11.348 INFO:scrape:Failure: SELinux denials found on ubuntu@smithi072.front.sepia.ceph.com: ['type=AVC msg=audit(1645268759.376:6958): avc: denied { write } for pid=29729 comm="chrony-helper" name="lock" dev="tmpfs" ino=20942 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269109.836:7304): avc: denied { execute } for pid=31124 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269109.838:7305): avc: denied { create } for pid=31124 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645269109.839:7311): avc: denied { remove_name } for pid=31124 comm="chronyc" name="chronyc.31124.sock" dev="tmpfs" ino=202263 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645269109.836:7304): avc: denied { read open } for pid=31124 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268759.382:6964): avc: denied { execute_no_trans } for pid=29736 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268759.384:6972): avc: denied { sendto } for pid=29736 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645269109.838:7307): avc: denied { write } for pid=31124 comm="chronyc" name="chrony" dev="tmpfs" ino=25616 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645269109.839:7310): avc: denied { sendto } for pid=26380 comm="chronyd" path="/run/chrony/chronyc.31124.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645269109.838:7306): avc: denied { dac_read_search } for pid=31124 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645268759.384:6972): avc: denied { write } for pid=29736 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=171123 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645268759.380:6962): avc: denied { read } for pid=29732 comm="chrony-helper" name="dhclient" dev="sda1" ino=1965 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:dhcpc_state_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645268759.384:6974): avc: denied { remove_name } for pid=29736 comm="chronyc" name="chronyc.29736.sock" dev="tmpfs" ino=184832 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645268759.377:6959): avc: denied { lock } for pid=29731 comm="flock" path="/run/chrony-helper/lock" dev="tmpfs" ino=20942 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268759.370:6950): avc: denied { connectto } for pid=29723 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645268759.382:6964): avc: denied { execute } for pid=29736 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268759.375:6957): avc: denied { ioctl } for pid=29729 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 ioctlcmd=0x5401 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268759.371:6951): avc: denied { open } for pid=29723 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11735 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269109.838:7307): avc: denied { dac_override } for pid=31124 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645269109.832:7296): avc: denied { connectto } for pid=31121 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645269109.836:7304): avc: denied { map } for pid=31124 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268759.370:6947): avc: denied { open } for pid=29723 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268759.380:6961): avc: denied { read } for pid=29732 comm="chrony-helper" name="chrony-helper" dev="tmpfs" ino=24007 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645268759.384:6968): avc: denied { create } for pid=29736 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645268759.370:6950): avc: denied { write } for pid=29723 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645269109.838:7308): avc: denied { setattr } for pid=31124 comm="chronyc" name="chronyc.31124.sock" dev="tmpfs" ino=202263 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645269109.838:7307): avc: denied { create } for pid=31124 comm="chronyc" name="chronyc.31124.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645269109.833:7297): avc: denied { read } for pid=31121 comm="11-dhclient" name="passwd" dev="sda1" ino=11735 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269109.838:7309): avc: denied { sendto } for pid=31124 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645268759.369:6946): avc: denied { execute } for pid=29723 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269109.831:7292): avc: denied { execute } for pid=31121 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268759.369:6946): avc: denied { map } for pid=29723 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268759.382:6964): avc: denied { read open } for pid=29736 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268759.374:6955): avc: denied { read open } for pid=29729 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268759.376:6958): avc: denied { open } for pid=29729 comm="chrony-helper" path="/run/chrony-helper/lock" dev="tmpfs" ino=20942 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268759.373:6954): avc: denied { execute_no_trans } for pid=29727 comm="20-chrony-dhcp" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268759.370:6949): avc: denied { map } for pid=29723 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268759.384:6971): avc: denied { setattr } for pid=29736 comm="chronyc" name="chronyc.29736.sock" dev="tmpfs" ino=184832 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645269109.832:7295): avc: denied { map } for pid=31121 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268759.384:6970): avc: denied { write } for pid=29736 comm="chronyc" name="chrony" dev="tmpfs" ino=25616 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645269109.832:7293): avc: denied { read } for pid=31121 comm="11-dhclient" name="passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268759.384:6970): avc: denied { add_name } for pid=29736 comm="chronyc" name="chronyc.29736.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645269109.831:7292): avc: denied { execute_no_trans } for pid=31121 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268759.384:6973): avc: denied { sendto } for pid=26380 comm="chronyd" path="/run/chrony/chronyc.29736.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645269109.839:7311): avc: denied { unlink } for pid=31124 comm="chronyc" name="chronyc.31124.sock" dev="tmpfs" ino=202263 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645269109.838:7307): avc: denied { add_name } for pid=31124 comm="chronyc" name="chronyc.31124.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645269109.838:7309): avc: denied { write } for pid=31124 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=171123 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645269109.833:7298): avc: denied { getattr } for pid=31121 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11735 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268759.373:6954): avc: denied { map } for pid=29727 comm="rm" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268759.369:6946): avc: denied { execute } for pid=29723 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268759.384:6974): avc: denied { unlink } for pid=29736 comm="chronyc" name="chronyc.29736.sock" dev="tmpfs" ino=184832 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645269109.833:7299): avc: denied { execute } for pid=31121 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268759.384:6970): avc: denied { create } for pid=29736 comm="chronyc" name="chronyc.29736.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645269109.836:7304): avc: denied { execute_no_trans } for pid=31124 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269109.832:7296): avc: denied { write } for pid=31121 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645268759.371:6952): avc: denied { getattr } for pid=29723 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11735 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269109.833:7297): avc: denied { open } for pid=31121 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11735 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268759.384:6970): avc: denied { dac_override } for pid=29736 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645269109.831:7292): avc: denied { map } for pid=31121 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269109.832:7294): avc: denied { getattr } for pid=31121 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268759.371:6953): avc: denied { execute } for pid=29723 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268759.370:6947): avc: denied { read } for pid=29723 comm="11-dhclient" name="passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268759.382:6964): avc: denied { map } for pid=29736 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269109.832:7293): avc: denied { open } for pid=31121 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268759.371:6951): avc: denied { read } for pid=29723 comm="11-dhclient" name="passwd" dev="sda1" ino=11735 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268759.375:6956): avc: denied { getattr } for pid=29729 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268759.369:6946): avc: denied { execute_no_trans } for pid=29723 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268759.374:6955): avc: denied { execute_no_trans } for pid=29729 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268759.370:6948): avc: denied { getattr } for pid=29723 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268759.374:6955): avc: denied { execute } for pid=29729 comm="20-chrony-dhcp" name="chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268759.384:6969): avc: denied { dac_read_search } for pid=29736 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645269109.831:7292): avc: denied { execute } for pid=31121 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1'] 2022-02-19T18:32:11.349 INFO:scrape:1 jobs: ['6695094'] 2022-02-19T18:32:11.349 INFO:scrape:suites: ['1-client', '2-upgrade', '3-compat_client/pacific}}', 'centos_latest', 'clusters/1-mds-2-client-micro', 'conf/{client', 'mds', 'mon', 'osd}', 'overrides/{multimds/yes', 'pg-warn', 'tasks/{0-octopus', 'upgrade/cephfs/featureful_client/old_client/{bluestore-bitmap', 'whitelist_health', 'whitelist_wrongly_marked_down}'] 2022-02-19T18:32:11.350 INFO:scrape: 2022-02-19T18:32:11.351 INFO:scrape:Failure: SELinux denials found on ubuntu@smithi073.front.sepia.ceph.com: ['type=AVC msg=audit(1645266502.163:10655): avc: denied { execute_no_trans } for pid=150051 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266502.163:10655): avc: denied { map } for pid=150051 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265691.513:7692): avc: denied { create } for pid=88664 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645266502.165:10660): avc: denied { write } for pid=150051 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=164669 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645265691.501:7678): avc: denied { map } for pid=88652 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=40341 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265691.509:7689): avc: denied { read } for pid=88661 comm="chrony-helper" name="chrony-helper" dev="tmpfs" ino=29712 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645265691.500:7675): avc: denied { map } for pid=88652 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265691.505:7686): avc: denied { ioctl } for pid=88658 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 ioctlcmd=0x5401 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265691.513:7698): avc: denied { remove_name } for pid=88664 comm="chronyc" name="chronyc.88664.sock" dev="tmpfs" ino=378752 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645265691.511:7691): avc: denied { read open } for pid=88664 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266502.160:10652): avc: denied { read } for pid=150048 comm="11-dhclient" name="passwd" dev="sda1" ino=40343 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265691.513:7698): avc: denied { unlink } for pid=88664 comm="chronyc" name="chronyc.88664.sock" dev="tmpfs" ino=378752 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266502.158:10647): avc: denied { execute } for pid=150048 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265691.513:7696): avc: denied { write } for pid=88664 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=164669 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266502.165:10657): avc: denied { dac_read_search } for pid=150051 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645265691.513:7697): avc: denied { sendto } for pid=26339 comm="chronyd" path="/run/chrony/chronyc.88664.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645266502.165:10656): avc: denied { create } for pid=150051 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645266502.158:10647): avc: denied { execute } for pid=150048 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266502.165:10661): avc: denied { sendto } for pid=26339 comm="chronyd" path="/run/chrony/chronyc.150051.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645266502.160:10652): avc: denied { open } for pid=150048 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=40343 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266502.158:10647): avc: denied { execute_no_trans } for pid=150048 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265691.504:7684): avc: denied { execute } for pid=88658 comm="20-chrony-dhcp" name="chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266502.163:10655): avc: denied { read open } for pid=150051 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265691.513:7695): avc: denied { setattr } for pid=88664 comm="chronyc" name="chronyc.88664.sock" dev="tmpfs" ino=378752 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645265691.507:7687): avc: denied { open } for pid=88658 comm="chrony-helper" path="/run/chrony-helper/lock" dev="tmpfs" ino=22868 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265691.511:7691): avc: denied { execute } for pid=88664 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265691.507:7688): avc: denied { lock } for pid=88660 comm="flock" path="/run/chrony-helper/lock" dev="tmpfs" ino=22868 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265691.507:7687): avc: denied { write } for pid=88658 comm="chrony-helper" name="lock" dev="tmpfs" ino=22868 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265691.513:7693): avc: denied { dac_read_search } for pid=88664 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645265691.513:7694): avc: denied { dac_override } for pid=88664 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645266502.165:10660): avc: denied { sendto } for pid=150051 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645265691.501:7681): avc: denied { getattr } for pid=88652 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=40343 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266502.165:10662): avc: denied { unlink } for pid=150051 comm="chronyc" name="chronyc.150051.sock" dev="tmpfs" ino=617638 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645265691.500:7675): avc: denied { execute } for pid=88652 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265691.500:7675): avc: denied { execute } for pid=88652 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266502.160:10653): avc: denied { getattr } for pid=150048 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=40343 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265691.501:7679): avc: denied { write } for pid=88652 comm="11-dhclient" name="nss" dev="sda1" ino=2050 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645265691.511:7691): avc: denied { execute_no_trans } for pid=88664 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266502.165:10658): avc: denied { dac_override } for pid=150051 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645265691.513:7694): avc: denied { create } for pid=88664 comm="chronyc" name="chronyc.88664.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645265691.513:7694): avc: denied { write } for pid=88664 comm="chronyc" name="chrony" dev="tmpfs" ino=19191 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645265691.501:7680): avc: denied { read } for pid=88652 comm="11-dhclient" name="passwd" dev="sda1" ino=40343 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265691.504:7684): avc: denied { execute_no_trans } for pid=88658 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266502.165:10662): avc: denied { remove_name } for pid=150051 comm="chronyc" name="chronyc.150051.sock" dev="tmpfs" ino=617638 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645266502.163:10655): avc: denied { execute } for pid=150051 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266502.159:10650): avc: denied { map } for pid=150048 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=40341 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265691.501:7677): avc: denied { getattr } for pid=88652 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=40341 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266502.159:10648): avc: denied { read } for pid=150048 comm="11-dhclient" name="passwd" dev="sda1" ino=40341 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266502.165:10659): avc: denied { setattr } for pid=150051 comm="chronyc" name="chronyc.150051.sock" dev="tmpfs" ino=617638 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266502.158:10647): avc: denied { map } for pid=150048 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265691.501:7682): avc: denied { execute } for pid=88652 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266502.159:10649): avc: denied { getattr } for pid=150048 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=40341 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266502.159:10651): avc: denied { write } for pid=150048 comm="11-dhclient" name="nss" dev="sda1" ino=2050 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266502.165:10658): avc: denied { write } for pid=150051 comm="chronyc" name="chrony" dev="tmpfs" ino=19191 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645265691.501:7680): avc: denied { open } for pid=88652 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=40343 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266502.160:10654): avc: denied { execute } for pid=150048 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266502.165:10658): avc: denied { create } for pid=150051 comm="chronyc" name="chronyc.150051.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266502.159:10648): avc: denied { open } for pid=150048 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=40341 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265691.503:7683): avc: denied { execute_no_trans } for pid=88656 comm="20-chrony-dhcp" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265691.511:7691): avc: denied { map } for pid=88664 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265691.501:7676): avc: denied { read } for pid=88652 comm="11-dhclient" name="passwd" dev="sda1" ino=40341 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266502.165:10658): avc: denied { add_name } for pid=150051 comm="chronyc" name="chronyc.150051.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645265691.501:7679): avc: denied { connectto } for pid=88652 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645265691.509:7690): avc: denied { read } for pid=88661 comm="chrony-helper" name="dhclient" dev="sda1" ino=1965 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:dhcpc_state_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645265691.500:7675): avc: denied { execute_no_trans } for pid=88652 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265691.505:7685): avc: denied { getattr } for pid=88658 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265691.501:7676): avc: denied { open } for pid=88652 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=40341 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265691.504:7684): avc: denied { read open } for pid=88658 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266502.159:10651): avc: denied { connectto } for pid=150048 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645265691.513:7694): avc: denied { add_name } for pid=88664 comm="chronyc" name="chronyc.88664.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645265691.503:7683): avc: denied { map } for pid=88656 comm="rm" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265691.513:7696): avc: denied { sendto } for pid=88664 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1'] 2022-02-19T18:32:11.351 INFO:scrape:1 jobs: ['6695070'] 2022-02-19T18:32:11.352 INFO:scrape:suites: ['1-ranks/1', '1-volume/{0-create', '2-allow_standby_replay/yes', '2-client', '3-inline/yes', '3-upgrade-with-workload', '4-verify}', '4-verify}}', 'centos_8.stream_container_tools', 'conf/{client', 'mds', 'mon', 'osd}', 'overrides/{pg-warn', 'roles', 'syntax', 'tasks/{0-from/v16.2.4', 'upgrade/cephfs/mds_upgrade_sequence/{bluestore-bitmap', 'whitelist_health', 'whitelist_wrongly_marked_down}'] 2022-02-19T18:32:11.353 INFO:scrape: 2022-02-19T18:32:11.353 INFO:scrape:Failure: {'smithi029.front.sepia.ceph.com': {'_ansible_no_log': False, 'attempts': 24, 'changed': False, 'invocation': {'module_args': {'allow_unauthenticated': False, 'autoclean': False, 'autoremove': False, 'cache_valid_time': 0, 'deb': None, 'default_release': None, 'dpkg_options': 'force-confdef,force-confold', 'force': False, 'force_apt_get': False, 'install_recommends': None, 'only_upgrade': False, 'package': None, 'policy_rc_d': None, 'purge': False, 'state': 'present', 'update_cache': True, 'upgrade': None}}, 'msg': 'Failed to update apt cache: '}} 2022-02-19T18:32:11.353 INFO:scrape:1 jobs: ['6695142'] 2022-02-19T18:32:11.354 INFO:scrape:suites: ['0-start', '1-tasks', 'mon_election/classic', 'rados_api', 'rados_loadgenbig', 'rbd_import_export', 'test_rbd_api}}', 'upgrade-sequence', 'upgrade/octopus-x/parallel/{0-distro/ubuntu_20.04', 'workload/{ec-rados-default'] 2022-02-19T18:32:11.354 INFO:scrape: 2022-02-19T18:32:11.355 INFO:scrape:Failure: SELinux denials found on ubuntu@smithi033.front.sepia.ceph.com: ['type=AVC msg=audit(1645278850.344:7697): avc: denied { read } for pid=88836 comm="chrony-helper" name="dhclient" dev="sda1" ino=1965 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:dhcpc_state_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645279698.506:10833): avc: denied { add_name } for pid=151071 comm="chronyc" name="chronyc.151071.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645278850.338:7690): avc: denied { execute_no_trans } for pid=88828 comm="20-chrony-dhcp" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278850.342:7695): avc: denied { lock } for pid=88835 comm="flock" path="/run/chrony-helper/lock" dev="tmpfs" ino=26011 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279698.504:10830): avc: denied { execute_no_trans } for pid=151071 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278850.335:7687): avc: denied { read } for pid=88821 comm="11-dhclient" name="passwd" dev="sda1" ino=40345 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278850.346:7698): avc: denied { execute_no_trans } for pid=88839 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279698.500:10822): avc: denied { execute } for pid=151068 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278850.348:7703): avc: denied { create } for pid=88839 comm="chronyc" name="chronyc.88839.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645278850.346:7698): avc: denied { read open } for pid=88839 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279698.501:10827): avc: denied { read } for pid=151068 comm="11-dhclient" name="passwd" dev="sda1" ino=40345 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279698.507:10837): avc: denied { remove_name } for pid=151071 comm="chronyc" name="chronyc.151071.sock" dev="tmpfs" ino=620930 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645279698.501:10827): avc: denied { open } for pid=151068 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=40345 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279698.504:10830): avc: denied { execute } for pid=151071 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278850.335:7684): avc: denied { getattr } for pid=88821 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=40343 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278850.334:7682): avc: denied { execute } for pid=88821 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279698.506:10833): avc: denied { create } for pid=151071 comm="chronyc" name="chronyc.151071.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645278850.340:7693): avc: denied { ioctl } for pid=88831 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 ioctlcmd=0x5401 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278850.344:7696): avc: denied { read } for pid=88836 comm="chrony-helper" name="chrony-helper" dev="tmpfs" ino=22920 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645278850.334:7682): avc: denied { execute_no_trans } for pid=88821 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279698.501:10829): avc: denied { execute } for pid=151068 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278850.335:7683): avc: denied { read } for pid=88821 comm="11-dhclient" name="passwd" dev="sda1" ino=40343 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278850.346:7698): avc: denied { map } for pid=88839 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279698.506:10833): avc: denied { dac_override } for pid=151071 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645278850.335:7686): avc: denied { connectto } for pid=88821 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645278850.336:7689): avc: denied { execute } for pid=88821 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278850.336:7688): avc: denied { getattr } for pid=88821 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=40345 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278850.339:7691): avc: denied { execute_no_trans } for pid=88831 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278850.348:7703): avc: denied { write } for pid=88839 comm="chronyc" name="chrony" dev="tmpfs" ino=21955 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645278850.334:7682): avc: denied { map } for pid=88821 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279698.506:10831): avc: denied { create } for pid=151071 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645278850.334:7682): avc: denied { execute } for pid=88821 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278850.335:7686): avc: denied { write } for pid=88821 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645279698.504:10830): avc: denied { map } for pid=151071 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278850.349:7708): avc: denied { unlink } for pid=88839 comm="chronyc" name="chronyc.88839.sock" dev="tmpfs" ino=384612 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645279698.506:10834): avc: denied { setattr } for pid=151071 comm="chronyc" name="chronyc.151071.sock" dev="tmpfs" ino=620930 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645279698.501:10826): avc: denied { connectto } for pid=151068 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645278850.348:7703): avc: denied { add_name } for pid=88839 comm="chronyc" name="chronyc.88839.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645278850.348:7705): avc: denied { sendto } for pid=88839 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645278850.341:7694): avc: denied { open } for pid=88831 comm="chrony-helper" path="/run/chrony-helper/lock" dev="tmpfs" ino=26011 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279698.507:10836): avc: denied { sendto } for pid=26349 comm="chronyd" path="/run/chrony/chronyc.151071.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645278850.335:7683): avc: denied { open } for pid=88821 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=40343 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279698.501:10823): avc: denied { open } for pid=151068 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=40343 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278850.348:7702): avc: denied { dac_read_search } for pid=88839 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645278850.348:7705): avc: denied { write } for pid=88839 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=166610 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645278850.340:7692): avc: denied { getattr } for pid=88831 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279698.506:10835): avc: denied { write } for pid=151071 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=166610 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645279698.501:10826): avc: denied { write } for pid=151068 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645279698.500:10822): avc: denied { execute } for pid=151068 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279698.506:10835): avc: denied { sendto } for pid=151071 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645278850.339:7691): avc: denied { read open } for pid=88831 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279698.501:10825): avc: denied { map } for pid=151068 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=40343 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278850.348:7701): avc: denied { create } for pid=88839 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645279698.506:10833): avc: denied { write } for pid=151071 comm="chronyc" name="chrony" dev="tmpfs" ino=21955 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645279698.501:10824): avc: denied { getattr } for pid=151068 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=40343 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278850.339:7691): avc: denied { execute } for pid=88831 comm="20-chrony-dhcp" name="chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279698.501:10828): avc: denied { getattr } for pid=151068 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=40345 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279698.501:10823): avc: denied { read } for pid=151068 comm="11-dhclient" name="passwd" dev="sda1" ino=40343 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279698.507:10837): avc: denied { unlink } for pid=151071 comm="chronyc" name="chronyc.151071.sock" dev="tmpfs" ino=620930 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645278850.335:7687): avc: denied { open } for pid=88821 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=40345 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279698.504:10830): avc: denied { read open } for pid=151071 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279698.506:10832): avc: denied { dac_read_search } for pid=151071 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645278850.338:7690): avc: denied { map } for pid=88828 comm="rm" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278850.341:7694): avc: denied { write } for pid=88831 comm="chrony-helper" name="lock" dev="tmpfs" ino=26011 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278850.348:7703): avc: denied { dac_override } for pid=88839 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645279698.500:10822): avc: denied { map } for pid=151068 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279698.500:10822): avc: denied { execute_no_trans } for pid=151068 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278850.335:7685): avc: denied { map } for pid=88821 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=40343 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278850.348:7704): avc: denied { setattr } for pid=88839 comm="chronyc" name="chronyc.88839.sock" dev="tmpfs" ino=384612 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645278850.349:7708): avc: denied { remove_name } for pid=88839 comm="chronyc" name="chronyc.88839.sock" dev="tmpfs" ino=384612 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645278850.346:7698): avc: denied { execute } for pid=88839 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278850.349:7707): avc: denied { sendto } for pid=26349 comm="chronyd" path="/run/chrony/chronyc.88839.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1'] 2022-02-19T18:32:11.356 INFO:scrape:1 jobs: ['6695137'] 2022-02-19T18:32:11.356 INFO:scrape:suites: ['1-ranks/2', '1-volume/{0-create', '2-allow_standby_replay/no', '2-client', '3-inline/no', '3-upgrade-with-workload', '4-verify}', '4-verify}}', 'centos_8.stream_container_tools', 'conf/{client', 'mds', 'mon', 'osd}', 'overrides/{pg-warn', 'roles', 'syntax', 'tasks/{0-from/v16.2.4', 'upgrade/cephfs/mds_upgrade_sequence/{bluestore-bitmap', 'whitelist_health', 'whitelist_wrongly_marked_down}'] 2022-02-19T18:32:11.357 INFO:scrape: 2022-02-19T18:32:11.357 INFO:scrape:Failure: SELinux denials found on ubuntu@smithi121.front.sepia.ceph.com: ['type=AVC msg=audit(1645277936.035:7361): avc: denied { create } for pid=31385 comm="chronyc" name="chronyc.31385.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645277734.850:6968): avc: denied { dac_override } for pid=29744 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645277936.029:7350): avc: denied { execute } for pid=31382 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277936.030:7351): avc: denied { read } for pid=31382 comm="11-dhclient" name="passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277936.030:7355): avc: denied { open } for pid=31382 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277734.850:6972): avc: denied { unlink } for pid=29744 comm="chronyc" name="chronyc.29744.sock" dev="tmpfs" ino=187926 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645278099.332:7738): avc: denied { open } for pid=32882 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278099.338:7747): avc: denied { sendto } for pid=26390 comm="chronyd" path="/run/chrony/chronyc.32885.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645278099.337:7742): avc: denied { create } for pid=32885 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645278099.338:7746): avc: denied { sendto } for pid=32885 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645277936.675:7417): avc: denied { execute_no_trans } for pid=31510 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278099.332:7734): avc: denied { open } for pid=32882 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277936.030:7354): avc: denied { connectto } for pid=31382 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645277734.848:6964): avc: denied { map } for pid=29744 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277936.035:7361): avc: denied { add_name } for pid=31385 comm="chronyc" name="chronyc.31385.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645277936.676:7419): avc: denied { ioctl } for pid=31510 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 ioctlcmd=0x5401 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277734.850:6969): avc: denied { setattr } for pid=29744 comm="chronyc" name="chronyc.29744.sock" dev="tmpfs" ino=187926 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645278099.331:7733): avc: denied { execute } for pid=32882 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277734.841:6953): avc: denied { execute } for pid=29737 comm="20-chrony-dhcp" name="chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277936.675:7417): avc: denied { read open } for pid=31510 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277734.850:6968): avc: denied { create } for pid=29744 comm="chronyc" name="chronyc.29744.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645277734.850:6967): avc: denied { dac_read_search } for pid=29744 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645278099.338:7748): avc: denied { remove_name } for pid=32885 comm="chronyc" name="chronyc.32885.sock" dev="tmpfs" ino=220507 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645278099.332:7739): avc: denied { getattr } for pid=32882 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277734.837:6944): avc: denied { execute_no_trans } for pid=29733 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277734.840:6952): avc: denied { execute_no_trans } for pid=29735 comm="20-chrony-dhcp" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277936.680:7423): avc: denied { read } for pid=31517 comm="chrony-helper" name="dhclient" dev="sda1" ino=1965 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:dhcpc_state_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645278099.331:7733): avc: denied { execute } for pid=32882 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277936.036:7364): avc: denied { sendto } for pid=26390 comm="chronyd" path="/run/chrony/chronyc.31385.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645277734.850:6970): avc: denied { write } for pid=29744 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=170140 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645277936.029:7350): avc: denied { execute_no_trans } for pid=31382 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277936.683:7424): avc: denied { add_name } for pid=31525 comm="chronyc" name="chronyc.31525.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645277936.036:7365): avc: denied { remove_name } for pid=31385 comm="chronyc" name="chronyc.31385.sock" dev="tmpfs" ino=200461 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645278099.332:7740): avc: denied { execute } for pid=32882 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277734.850:6968): avc: denied { write } for pid=29744 comm="chronyc" name="chrony" dev="tmpfs" ino=22394 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645277734.837:6946): avc: denied { getattr } for pid=29733 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277734.847:6960): avc: denied { read } for pid=29740 comm="chrony-helper" name="dhclient" dev="sda1" ino=1965 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:dhcpc_state_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645278099.332:7737): avc: denied { connectto } for pid=32882 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645277936.035:7360): avc: denied { dac_read_search } for pid=31385 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645277936.034:7358): avc: denied { map } for pid=31385 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278099.331:7733): avc: denied { execute_no_trans } for pid=32882 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277936.034:7358): avc: denied { read open } for pid=31385 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277936.683:7424): avc: denied { write } for pid=31525 comm="chronyc" name="chrony" dev="tmpfs" ino=22394 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645277936.030:7354): avc: denied { write } for pid=31382 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645278099.331:7733): avc: denied { map } for pid=32882 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277734.843:6956): avc: denied { write } for pid=29737 comm="chrony-helper" name="lock" dev="tmpfs" ino=23227 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277936.030:7351): avc: denied { open } for pid=31382 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277936.671:7415): avc: denied { execute } for pid=31501 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277936.684:7426): avc: denied { remove_name } for pid=31525 comm="chronyc" name="chronyc.31525.sock" dev="tmpfs" ino=200559 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645278099.338:7745): avc: denied { setattr } for pid=32885 comm="chronyc" name="chronyc.32885.sock" dev="tmpfs" ino=220507 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645277936.030:7353): avc: denied { map } for pid=31382 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277936.035:7359): avc: denied { create } for pid=31385 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645277936.029:7350): avc: denied { execute } for pid=31382 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277936.035:7361): avc: denied { dac_override } for pid=31385 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645277936.677:7420): avc: denied { open } for pid=31510 comm="chrony-helper" path="/run/chrony-helper/lock" dev="tmpfs" ino=23227 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277734.848:6964): avc: denied { execute } for pid=29744 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277936.031:7356): avc: denied { getattr } for pid=31382 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278099.338:7748): avc: denied { unlink } for pid=32885 comm="chronyc" name="chronyc.32885.sock" dev="tmpfs" ino=220507 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645277734.850:6971): avc: denied { sendto } for pid=26390 comm="chronyd" path="/run/chrony/chronyc.29744.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645277734.837:6944): avc: denied { map } for pid=29733 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277936.036:7362): avc: denied { setattr } for pid=31385 comm="chronyc" name="chronyc.31385.sock" dev="tmpfs" ino=200461 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645277936.035:7361): avc: denied { write } for pid=31385 comm="chronyc" name="chrony" dev="tmpfs" ino=22394 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645278099.332:7738): avc: denied { read } for pid=32882 comm="11-dhclient" name="passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277936.036:7365): avc: denied { unlink } for pid=31385 comm="chronyc" name="chronyc.31385.sock" dev="tmpfs" ino=200461 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645277734.844:6957): avc: denied { lock } for pid=29739 comm="flock" path="/run/chrony-helper/lock" dev="tmpfs" ino=23227 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277734.850:6970): avc: denied { sendto } for pid=29744 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645277734.837:6944): avc: denied { execute } for pid=29733 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277734.837:6945): avc: denied { read } for pid=29733 comm="11-dhclient" name="passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277936.030:7355): avc: denied { read } for pid=31382 comm="11-dhclient" name="passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277936.674:7416): avc: denied { execute_no_trans } for pid=31507 comm="20-chrony-dhcp" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277734.838:6948): avc: denied { write } for pid=29733 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645278099.338:7744): avc: denied { write } for pid=32885 comm="chronyc" name="chrony" dev="tmpfs" ino=22394 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645278099.336:7741): avc: denied { map } for pid=32885 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278099.332:7734): avc: denied { read } for pid=32882 comm="11-dhclient" name="passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278099.336:7741): avc: denied { execute } for pid=32885 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277936.030:7352): avc: denied { getattr } for pid=31382 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277734.843:6956): avc: denied { open } for pid=29737 comm="chrony-helper" path="/run/chrony-helper/lock" dev="tmpfs" ino=23227 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278099.338:7744): avc: denied { dac_override } for pid=32885 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645277734.850:6968): avc: denied { add_name } for pid=29744 comm="chronyc" name="chronyc.29744.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645277936.034:7358): avc: denied { execute } for pid=31385 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277734.838:6949): avc: denied { open } for pid=29733 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277936.675:7417): avc: denied { execute } for pid=31510 comm="20-chrony-dhcp" name="chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277734.842:6954): avc: denied { getattr } for pid=29737 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277936.684:7425): avc: denied { sendto } for pid=26390 comm="chronyd" path="/run/chrony/chronyc.31525.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645277936.036:7363): avc: denied { write } for pid=31385 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=170140 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645277936.680:7422): avc: denied { read } for pid=31517 comm="chrony-helper" name="chrony-helper" dev="tmpfs" ino=25563 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645277936.034:7358): avc: denied { execute_no_trans } for pid=31385 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277734.841:6953): avc: denied { execute_no_trans } for pid=29737 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278099.336:7741): avc: denied { read open } for pid=32885 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277734.838:6950): avc: denied { getattr } for pid=29733 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277936.678:7421): avc: denied { lock } for pid=31515 comm="flock" path="/run/chrony-helper/lock" dev="tmpfs" ino=23227 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277734.841:6953): avc: denied { read open } for pid=29737 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277936.031:7357): avc: denied { execute } for pid=31382 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277936.671:7415): avc: denied { execute_no_trans } for pid=31501 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277734.848:6964): avc: denied { execute_no_trans } for pid=29744 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277936.036:7363): avc: denied { sendto } for pid=31385 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645278099.338:7744): avc: denied { add_name } for pid=32885 comm="chronyc" name="chronyc.32885.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645278099.338:7746): avc: denied { write } for pid=32885 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=170140 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645277734.850:6966): avc: denied { create } for pid=29744 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645277734.837:6945): avc: denied { open } for pid=29733 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277734.842:6955): avc: denied { ioctl } for pid=29737 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 ioctlcmd=0x5401 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278099.338:7743): avc: denied { dac_read_search } for pid=32885 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645278099.332:7737): avc: denied { write } for pid=32882 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645277734.848:6964): avc: denied { read open } for pid=29744 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278099.336:7741): avc: denied { execute_no_trans } for pid=32885 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277936.674:7416): avc: denied { map } for pid=31507 comm="rm" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277734.838:6951): avc: denied { execute } for pid=29733 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277936.676:7418): avc: denied { getattr } for pid=31510 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278099.332:7736): avc: denied { map } for pid=32882 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278099.338:7744): avc: denied { create } for pid=32885 comm="chronyc" name="chronyc.32885.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645277734.850:6972): avc: denied { remove_name } for pid=29744 comm="chronyc" name="chronyc.29744.sock" dev="tmpfs" ino=187926 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645277734.837:6944): avc: denied { execute } for pid=29733 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277734.846:6959): avc: denied { read } for pid=29740 comm="chrony-helper" name="chrony-helper" dev="tmpfs" ino=25563 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645277734.837:6947): avc: denied { map } for pid=29733 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277734.838:6949): avc: denied { read } for pid=29733 comm="11-dhclient" name="passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278099.332:7735): avc: denied { getattr } for pid=32882 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277936.029:7350): avc: denied { map } for pid=31382 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277734.838:6948): avc: denied { connectto } for pid=29733 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645277936.677:7420): avc: denied { write } for pid=31510 comm="chrony-helper" name="lock" dev="tmpfs" ino=23227 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277734.840:6952): avc: denied { map } for pid=29735 comm="rm" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1'] 2022-02-19T18:32:11.358 INFO:scrape:1 jobs: ['6695133'] 2022-02-19T18:32:11.358 INFO:scrape:suites: ['1-client', '2-upgrade', '3-client-upgrade', '4-compat_client', '5-client-sanity}}', 'centos_latest', 'clusters/1-mds-2-client-micro', 'conf/{client', 'mds', 'mon', 'osd}', 'overrides/{multimds/no', 'pg-warn', 'tasks/{0-octopus', 'upgrade/cephfs/featureful_client/upgraded_client/{bluestore-bitmap', 'whitelist_health', 'whitelist_wrongly_marked_down}'] 2022-02-19T18:32:11.359 INFO:scrape: 2022-02-19T18:32:11.359 INFO:scrape:Failure: SELinux denials found on ubuntu@smithi156.front.sepia.ceph.com: ['type=AVC msg=audit(1645274955.070:6945): avc: denied { execute_no_trans } for pid=29708 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275349.169:7746): avc: denied { map } for pid=32851 comm="20-chrony-onoff" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275184.749:7367): avc: denied { sendto } for pid=31363 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645275184.744:7355): avc: denied { getattr } for pid=31360 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645274955.076:6957): avc: denied { open } for pid=29714 comm="chrony-helper" path="/run/chrony-helper/lock" dev="tmpfs" ino=26668 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275185.386:7424): avc: denied { write } for pid=31489 comm="chrony-helper" name="lock" dev="tmpfs" ino=26668 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275349.166:7739): avc: denied { read } for pid=32849 comm="11-dhclient" name="passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275185.383:7420): avc: denied { map } for pid=31486 comm="rm" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275185.384:7423): avc: denied { ioctl } for pid=31489 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 ioctlcmd=0x5401 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645274955.070:6947): avc: denied { getattr } for pid=29708 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645274955.073:6953): avc: denied { execute_no_trans } for pid=29712 comm="20-chrony-dhcp" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275349.172:7750): avc: denied { dac_override } for pid=32852 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645274955.083:6964): avc: denied { dac_read_search } for pid=29720 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645275184.749:7366): avc: denied { setattr } for pid=31363 comm="chronyc" name="chronyc.31363.sock" dev="tmpfs" ino=202475 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645274955.071:6950): avc: denied { read } for pid=29708 comm="11-dhclient" name="passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275349.166:7735): avc: denied { open } for pid=32849 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645274955.083:6969): avc: denied { remove_name } for pid=29720 comm="chronyc" name="chronyc.29720.sock" dev="tmpfs" ino=187189 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645275184.750:7369): avc: denied { remove_name } for pid=31363 comm="chronyc" name="chronyc.31363.sock" dev="tmpfs" ino=202475 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645274955.081:6962): avc: denied { execute } for pid=29720 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645274955.071:6951): avc: denied { getattr } for pid=29708 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645274955.070:6948): avc: denied { map } for pid=29708 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275184.743:7353): avc: denied { execute_no_trans } for pid=31360 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275184.743:7354): avc: denied { read } for pid=31360 comm="11-dhclient" name="passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275349.165:7734): avc: denied { execute } for pid=32849 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645274955.074:6954): avc: denied { execute_no_trans } for pid=29714 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645274955.070:6949): avc: denied { write } for pid=29708 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645275349.167:7741): avc: denied { execute } for pid=32849 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275184.744:7357): avc: denied { connectto } for pid=31360 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645275349.166:7738): avc: denied { connectto } for pid=32849 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645274955.075:6956): avc: denied { ioctl } for pid=29714 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 ioctlcmd=0x5401 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275184.749:7368): avc: denied { sendto } for pid=26364 comm="chronyd" path="/run/chrony/chronyc.31363.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645275184.747:7362): avc: denied { execute } for pid=31363 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275184.747:7362): avc: denied { read open } for pid=31363 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275185.384:7421): avc: denied { read open } for pid=31489 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275349.166:7738): avc: denied { write } for pid=32849 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645275349.170:7747): avc: denied { execute_no_trans } for pid=32852 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645274955.082:6963): avc: denied { create } for pid=29720 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645275184.745:7361): avc: denied { write } for pid=31361 comm="20-chrony-dhcp" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645275349.169:7745): avc: denied { getattr } for pid=32851 comm="20-chrony-onoff" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275349.166:7739): avc: denied { open } for pid=32849 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275185.386:7424): avc: denied { open } for pid=31489 comm="chrony-helper" path="/run/chrony-helper/lock" dev="tmpfs" ino=26668 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275349.172:7754): avc: denied { unlink } for pid=32852 comm="chronyc" name="chronyc.32852.sock" dev="tmpfs" ino=220306 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645275184.743:7354): avc: denied { open } for pid=31360 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275184.749:7367): avc: denied { write } for pid=31363 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=166573 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645274955.070:6945): avc: denied { execute } for pid=29708 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275184.744:7360): avc: denied { execute } for pid=31360 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275184.744:7358): avc: denied { open } for pid=31360 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275349.166:7737): avc: denied { map } for pid=32849 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275349.170:7747): avc: denied { map } for pid=32852 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275184.743:7353): avc: denied { execute } for pid=31360 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645274955.071:6950): avc: denied { open } for pid=29708 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645274955.079:6959): avc: denied { read } for pid=29717 comm="chrony-helper" name="chrony-helper" dev="tmpfs" ino=24422 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645274955.076:6957): avc: denied { write } for pid=29714 comm="chrony-helper" name="lock" dev="tmpfs" ino=26668 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645274955.070:6945): avc: denied { map } for pid=29708 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275349.165:7734): avc: denied { execute_no_trans } for pid=32849 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645274955.077:6958): avc: denied { lock } for pid=29716 comm="flock" path="/run/chrony-helper/lock" dev="tmpfs" ino=26668 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275349.172:7751): avc: denied { setattr } for pid=32852 comm="chronyc" name="chronyc.32852.sock" dev="tmpfs" ino=220306 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645274955.083:6965): avc: denied { write } for pid=29720 comm="chronyc" name="chrony" dev="tmpfs" ino=24007 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645275349.172:7750): avc: denied { write } for pid=32852 comm="chronyc" name="chrony" dev="tmpfs" ino=24007 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645275184.749:7365): avc: denied { create } for pid=31363 comm="chronyc" name="chronyc.31363.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645275185.389:7426): avc: denied { read } for pid=31496 comm="chrony-helper" name="chrony-helper" dev="tmpfs" ino=24422 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645274955.083:6965): avc: denied { create } for pid=29720 comm="chronyc" name="chronyc.29720.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645274955.083:6969): avc: denied { unlink } for pid=29720 comm="chronyc" name="chronyc.29720.sock" dev="tmpfs" ino=187189 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645274955.074:6954): avc: denied { read open } for pid=29714 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275349.170:7747): avc: denied { execute } for pid=32852 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275184.749:7364): avc: denied { dac_read_search } for pid=31363 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645274955.081:6962): avc: denied { map } for pid=29720 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275184.749:7365): avc: denied { write } for pid=31363 comm="chronyc" name="chrony" dev="tmpfs" ino=24007 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645274955.075:6955): avc: denied { getattr } for pid=29714 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275184.749:7365): avc: denied { dac_override } for pid=31363 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645274955.083:6968): avc: denied { sendto } for pid=26364 comm="chronyd" path="/run/chrony/chronyc.29720.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645275184.749:7365): avc: denied { add_name } for pid=31363 comm="chronyc" name="chronyc.31363.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645274955.079:6960): avc: denied { read } for pid=29717 comm="chrony-helper" name="dhclient" dev="sda1" ino=1965 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:dhcpc_state_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645275185.383:7420): avc: denied { execute_no_trans } for pid=31486 comm="20-chrony-dhcp" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275185.380:7419): avc: denied { execute_no_trans } for pid=31479 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645274955.083:6966): avc: denied { setattr } for pid=29720 comm="chronyc" name="chronyc.29720.sock" dev="tmpfs" ino=187189 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645275349.172:7754): avc: denied { remove_name } for pid=32852 comm="chronyc" name="chronyc.32852.sock" dev="tmpfs" ino=220306 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645275185.389:7427): avc: denied { read } for pid=31496 comm="chrony-helper" name="dhclient" dev="sda1" ino=1965 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:dhcpc_state_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645274955.083:6967): avc: denied { write } for pid=29720 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=166573 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645274955.070:6945): avc: denied { execute } for pid=29708 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645274955.070:6946): avc: denied { open } for pid=29708 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275349.170:7747): avc: denied { read open } for pid=32852 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275349.165:7734): avc: denied { map } for pid=32849 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275349.166:7740): avc: denied { getattr } for pid=32849 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275184.749:7363): avc: denied { create } for pid=31363 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645275185.386:7425): avc: denied { lock } for pid=31494 comm="flock" path="/run/chrony-helper/lock" dev="tmpfs" ino=26668 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275349.172:7749): avc: denied { dac_read_search } for pid=32852 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645275349.166:7735): avc: denied { read } for pid=32849 comm="11-dhclient" name="passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645274955.070:6949): avc: denied { connectto } for pid=29708 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645275184.747:7362): avc: denied { map } for pid=31363 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645274955.083:6967): avc: denied { sendto } for pid=29720 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645275185.380:7419): avc: denied { execute } for pid=31479 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645274955.083:6965): avc: denied { add_name } for pid=29720 comm="chronyc" name="chronyc.29720.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645275184.743:7353): avc: denied { map } for pid=31360 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275184.744:7357): avc: denied { write } for pid=31360 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645275349.172:7753): avc: denied { sendto } for pid=26364 comm="chronyd" path="/run/chrony/chronyc.32852.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645275184.744:7358): avc: denied { read } for pid=31360 comm="11-dhclient" name="passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275184.747:7362): avc: denied { execute_no_trans } for pid=31363 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275184.750:7369): avc: denied { unlink } for pid=31363 comm="chronyc" name="chronyc.31363.sock" dev="tmpfs" ino=202475 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645275349.172:7750): avc: denied { create } for pid=32852 comm="chronyc" name="chronyc.32852.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645274955.074:6954): avc: denied { execute } for pid=29714 comm="20-chrony-dhcp" name="chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645274955.070:6946): avc: denied { read } for pid=29708 comm="11-dhclient" name="passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645274955.073:6953): avc: denied { map } for pid=29712 comm="rm" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275185.384:7421): avc: denied { execute_no_trans } for pid=31489 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275349.166:7736): avc: denied { getattr } for pid=32849 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645274955.081:6962): avc: denied { read open } for pid=29720 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275349.172:7752): avc: denied { sendto } for pid=32852 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645275185.392:7428): avc: denied { create } for pid=31505 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645275349.172:7750): avc: denied { add_name } for pid=32852 comm="chronyc" name="chronyc.32852.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645275349.165:7734): avc: denied { execute } for pid=32849 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275185.384:7421): avc: denied { execute } for pid=31489 comm="20-chrony-dhcp" name="chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275185.384:7422): avc: denied { getattr } for pid=31489 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645274955.081:6962): avc: denied { execute_no_trans } for pid=29720 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275349.169:7744): avc: denied { open } for pid=32851 comm="20-chrony-onoff" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275349.171:7748): avc: denied { create } for pid=32852 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645275184.743:7353): avc: denied { execute } for pid=31360 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275349.172:7752): avc: denied { write } for pid=32852 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=166573 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645275349.169:7744): avc: denied { read } for pid=32851 comm="20-chrony-onoff" name="passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275184.744:7356): avc: denied { map } for pid=31360 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275184.744:7359): avc: denied { getattr } for pid=31360 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645274955.071:6952): avc: denied { execute } for pid=29708 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645274955.083:6965): avc: denied { dac_override } for pid=29720 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1'] 2022-02-19T18:32:11.361 INFO:scrape:1 jobs: ['6695105'] 2022-02-19T18:32:11.361 INFO:scrape:suites: ['1-client', '2-upgrade', '3-client-upgrade', '4-compat_client', '5-client-sanity}}', 'centos_latest', 'clusters/1-mds-2-client-micro', 'conf/{client', 'mds', 'mon', 'osd}', 'overrides/{multimds/yes', 'pg-warn', 'tasks/{0-octopus', 'upgrade/cephfs/featureful_client/upgraded_client/{bluestore-bitmap', 'whitelist_health', 'whitelist_wrongly_marked_down}'] 2022-02-19T18:32:11.362 INFO:scrape: 2022-02-19T18:32:11.362 INFO:scrape:Failure: SELinux denials found on ubuntu@smithi115.front.sepia.ceph.com: ['type=AVC msg=audit(1645268869.175:6961): avc: denied { read } for pid=29766 comm="chrony-helper" name="chrony-helper" dev="tmpfs" ino=24133 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645269487.758:7305): avc: denied { execute_no_trans } for pid=31400 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269487.764:7314): avc: denied { create } for pid=31403 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645268869.177:6965): avc: denied { map } for pid=29770 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268869.166:6951): avc: denied { open } for pid=29757 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11735 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268869.177:6965): avc: denied { execute } for pid=29770 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268869.179:6969): avc: denied { dac_read_search } for pid=29770 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645269487.759:7306): avc: denied { open } for pid=31400 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268869.172:6958): avc: denied { write } for pid=29763 comm="chrony-helper" name="lock" dev="tmpfs" ino=22377 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268869.170:6955): avc: denied { execute_no_trans } for pid=29763 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268869.178:6968): avc: denied { create } for pid=29770 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645268869.179:6970): avc: denied { dac_override } for pid=29770 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645268869.179:6974): avc: denied { remove_name } for pid=29770 comm="chronyc" name="chronyc.29770.sock" dev="tmpfs" ino=189542 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645269487.764:7317): avc: denied { setattr } for pid=31403 comm="chronyc" name="chronyc.31403.sock" dev="tmpfs" ino=202119 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645269487.764:7316): avc: denied { write } for pid=31403 comm="chronyc" name="chrony" dev="tmpfs" ino=17246 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645269487.764:7316): avc: denied { add_name } for pid=31403 comm="chronyc" name="chronyc.31403.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645269487.762:7313): avc: denied { execute_no_trans } for pid=31403 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269487.759:7311): avc: denied { getattr } for pid=31400 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11735 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269487.759:7307): avc: denied { getattr } for pid=31400 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269487.764:7316): avc: denied { dac_override } for pid=31403 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645269487.765:7320): avc: denied { remove_name } for pid=31403 comm="chronyc" name="chronyc.31403.sock" dev="tmpfs" ino=202119 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645268869.169:6954): avc: denied { execute_no_trans } for pid=29761 comm="20-chrony-dhcp" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268869.166:6950): avc: denied { write } for pid=29757 comm="11-dhclient" name="nss" dev="sda1" ino=2050 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645269487.759:7306): avc: denied { read } for pid=31400 comm="11-dhclient" name="passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268869.179:6972): avc: denied { sendto } for pid=29770 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645268869.179:6973): avc: denied { sendto } for pid=26409 comm="chronyd" path="/run/chrony/chronyc.29770.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645269487.759:7308): avc: denied { map } for pid=31400 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269487.758:7305): avc: denied { map } for pid=31400 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268869.172:6958): avc: denied { open } for pid=29763 comm="chrony-helper" path="/run/chrony-helper/lock" dev="tmpfs" ino=22377 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269487.765:7320): avc: denied { unlink } for pid=31403 comm="chronyc" name="chronyc.31403.sock" dev="tmpfs" ino=202119 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645268869.179:6972): avc: denied { write } for pid=29770 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=168312 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645268869.171:6956): avc: denied { getattr } for pid=29763 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268869.167:6953): avc: denied { execute } for pid=29757 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269487.762:7313): avc: denied { execute } for pid=31403 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269487.762:7313): avc: denied { read open } for pid=31403 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269487.758:7305): avc: denied { execute } for pid=31400 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268869.166:6948): avc: denied { getattr } for pid=29757 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269487.758:7305): avc: denied { execute } for pid=31400 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268869.166:6951): avc: denied { read } for pid=29757 comm="11-dhclient" name="passwd" dev="sda1" ino=11735 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268869.166:6949): avc: denied { map } for pid=29757 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268869.169:6954): avc: denied { map } for pid=29761 comm="rm" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268869.179:6970): avc: denied { write } for pid=29770 comm="chronyc" name="chrony" dev="tmpfs" ino=17246 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645268869.179:6974): avc: denied { unlink } for pid=29770 comm="chronyc" name="chronyc.29770.sock" dev="tmpfs" ino=189542 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645268869.175:6962): avc: denied { read } for pid=29766 comm="chrony-helper" name="dhclient" dev="sda1" ino=1965 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:dhcpc_state_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645269487.764:7316): avc: denied { create } for pid=31403 comm="chronyc" name="chronyc.31403.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645269487.764:7319): avc: denied { sendto } for pid=26409 comm="chronyd" path="/run/chrony/chronyc.31403.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645268869.177:6965): avc: denied { read open } for pid=29770 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269487.764:7315): avc: denied { dac_read_search } for pid=31403 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645268869.165:6946): avc: denied { execute } for pid=29757 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268869.166:6947): avc: denied { open } for pid=29757 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269487.759:7312): avc: denied { execute } for pid=31400 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268869.172:6959): avc: denied { lock } for pid=29765 comm="flock" path="/run/chrony-helper/lock" dev="tmpfs" ino=22377 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268869.171:6957): avc: denied { ioctl } for pid=29763 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 ioctlcmd=0x5401 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269487.764:7318): avc: denied { write } for pid=31403 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=168312 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645268869.177:6965): avc: denied { execute_no_trans } for pid=29770 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268869.166:6950): avc: denied { connectto } for pid=29757 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645268869.177:6965): avc: denied { execute } for pid=29770 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269487.759:7309): avc: denied { write } for pid=31400 comm="11-dhclient" name="nss" dev="sda1" ino=2050 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645268869.170:6955): avc: denied { read open } for pid=29763 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268869.179:6970): avc: denied { add_name } for pid=29770 comm="chronyc" name="chronyc.29770.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645268869.179:6971): avc: denied { setattr } for pid=29770 comm="chronyc" name="chronyc.29770.sock" dev="tmpfs" ino=189542 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645268869.166:6952): avc: denied { getattr } for pid=29757 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11735 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268869.170:6955): avc: denied { execute } for pid=29763 comm="20-chrony-dhcp" name="chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268869.166:6947): avc: denied { read } for pid=29757 comm="11-dhclient" name="passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268869.165:6946): avc: denied { map } for pid=29757 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269487.759:7309): avc: denied { connectto } for pid=31400 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645269487.764:7318): avc: denied { sendto } for pid=31403 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645269487.759:7310): avc: denied { open } for pid=31400 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11735 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268869.165:6946): avc: denied { execute } for pid=29757 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268869.179:6970): avc: denied { create } for pid=29770 comm="chronyc" name="chronyc.29770.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645269487.762:7313): avc: denied { map } for pid=31403 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268869.165:6946): avc: denied { execute_no_trans } for pid=29757 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269487.759:7310): avc: denied { read } for pid=31400 comm="11-dhclient" name="passwd" dev="sda1" ino=11735 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1'] 2022-02-19T18:32:11.363 INFO:scrape:1 jobs: ['6695097'] 2022-02-19T18:32:11.363 INFO:scrape:suites: ['1-client', '2-upgrade', '3-compat_client/no}}', 'centos_latest', 'clusters/1-mds-2-client-micro', 'conf/{client', 'mds', 'mon', 'osd}', 'overrides/{multimds/yes', 'pg-warn', 'tasks/{0-octopus', 'upgrade/cephfs/featureful_client/old_client/{bluestore-bitmap', 'whitelist_health', 'whitelist_wrongly_marked_down}'] 2022-02-19T18:32:11.364 INFO:scrape: 2022-02-19T18:32:11.364 INFO:scrape:Failure: SELinux denials found on ubuntu@smithi039.front.sepia.ceph.com: ['type=AVC msg=audit(1645268818.808:7685): avc: denied { connectto } for pid=88931 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645268818.807:7681): avc: denied { execute_no_trans } for pid=88931 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268818.822:7700): avc: denied { dac_override } for pid=88953 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645268818.808:7688): avc: denied { execute } for pid=88931 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269633.443:10549): avc: denied { map } for pid=149711 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=40341 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269633.443:10552): avc: denied { getattr } for pid=149711 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=40343 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268818.822:7702): avc: denied { sendto } for pid=88953 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645269633.449:10558): avc: denied { setattr } for pid=149714 comm="chronyc" name="chronyc.149714.sock" dev="tmpfs" ino=610194 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645268818.811:7689): avc: denied { map } for pid=88938 comm="rm" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268818.807:7681): avc: denied { execute } for pid=88931 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268818.808:7685): avc: denied { write } for pid=88931 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645269633.443:10550): avc: denied { connectto } for pid=149711 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645269633.442:10546): avc: denied { execute_no_trans } for pid=149711 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268818.808:7683): avc: denied { getattr } for pid=88931 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=40341 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268818.822:7702): avc: denied { write } for pid=88953 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=166252 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645269633.449:10557): avc: denied { dac_override } for pid=149714 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645268818.817:7696): avc: denied { read } for pid=88947 comm="chrony-helper" name="dhclient" dev="sda1" ino=1965 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:dhcpc_state_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645269633.447:10554): avc: denied { read open } for pid=149714 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268818.814:7693): avc: denied { write } for pid=88941 comm="chrony-helper" name="lock" dev="tmpfs" ino=23879 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269633.443:10550): avc: denied { write } for pid=149711 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645269633.447:10554): avc: denied { map } for pid=149714 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268818.823:7704): avc: denied { remove_name } for pid=88953 comm="chronyc" name="chronyc.88953.sock" dev="tmpfs" ino=384365 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645268818.822:7700): avc: denied { write } for pid=88953 comm="chronyc" name="chrony" dev="tmpfs" ino=22709 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645269633.442:10546): avc: denied { execute } for pid=149711 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269633.447:10554): avc: denied { execute } for pid=149714 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269633.443:10548): avc: denied { getattr } for pid=149711 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=40341 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268818.823:7704): avc: denied { unlink } for pid=88953 comm="chronyc" name="chronyc.88953.sock" dev="tmpfs" ino=384365 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645268818.808:7684): avc: denied { map } for pid=88931 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=40341 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269633.447:10554): avc: denied { execute_no_trans } for pid=149714 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268818.812:7690): avc: denied { execute } for pid=88941 comm="20-chrony-dhcp" name="chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269633.449:10561): avc: denied { remove_name } for pid=149714 comm="chronyc" name="chronyc.149714.sock" dev="tmpfs" ino=610194 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645268818.812:7690): avc: denied { read open } for pid=88941 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268818.822:7700): avc: denied { add_name } for pid=88953 comm="chronyc" name="chronyc.88953.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645269633.449:10560): avc: denied { sendto } for pid=26442 comm="chronyd" path="/run/chrony/chronyc.149714.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645268818.812:7690): avc: denied { execute_no_trans } for pid=88941 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268818.813:7692): avc: denied { ioctl } for pid=88941 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 ioctlcmd=0x5401 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268818.819:7697): avc: denied { read open } for pid=88953 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269633.449:10557): avc: denied { write } for pid=149714 comm="chronyc" name="chrony" dev="tmpfs" ino=22709 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645268818.823:7703): avc: denied { sendto } for pid=26442 comm="chronyd" path="/run/chrony/chronyc.88953.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645269633.449:10561): avc: denied { unlink } for pid=149714 comm="chronyc" name="chronyc.149714.sock" dev="tmpfs" ino=610194 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645268818.814:7693): avc: denied { open } for pid=88941 comm="chrony-helper" path="/run/chrony-helper/lock" dev="tmpfs" ino=23879 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269633.442:10546): avc: denied { execute } for pid=149711 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268818.808:7686): avc: denied { open } for pid=88931 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=40343 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269633.448:10555): avc: denied { create } for pid=149714 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645268818.819:7697): avc: denied { map } for pid=88953 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268818.822:7699): avc: denied { dac_read_search } for pid=88953 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645269633.449:10559): avc: denied { write } for pid=149714 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=166252 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645268818.817:7695): avc: denied { read } for pid=88947 comm="chrony-helper" name="chrony-helper" dev="tmpfs" ino=21960 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645268818.815:7694): avc: denied { lock } for pid=88946 comm="flock" path="/run/chrony-helper/lock" dev="tmpfs" ino=23879 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269633.442:10546): avc: denied { map } for pid=149711 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268818.813:7691): avc: denied { getattr } for pid=88941 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268818.822:7700): avc: denied { create } for pid=88953 comm="chronyc" name="chronyc.88953.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645269633.449:10556): avc: denied { dac_read_search } for pid=149714 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645268818.807:7681): avc: denied { map } for pid=88931 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268818.822:7698): avc: denied { create } for pid=88953 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645268818.808:7687): avc: denied { getattr } for pid=88931 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=40343 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268818.807:7682): avc: denied { open } for pid=88931 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=40341 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269633.443:10547): avc: denied { open } for pid=149711 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=40341 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269633.449:10557): avc: denied { add_name } for pid=149714 comm="chronyc" name="chronyc.149714.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645268818.808:7686): avc: denied { read } for pid=88931 comm="11-dhclient" name="passwd" dev="sda1" ino=40343 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268818.819:7697): avc: denied { execute } for pid=88953 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269633.449:10559): avc: denied { sendto } for pid=149714 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645269633.443:10551): avc: denied { open } for pid=149711 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=40343 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268818.807:7682): avc: denied { read } for pid=88931 comm="11-dhclient" name="passwd" dev="sda1" ino=40341 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268818.819:7697): avc: denied { execute_no_trans } for pid=88953 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269633.443:10553): avc: denied { execute } for pid=149711 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269633.443:10551): avc: denied { read } for pid=149711 comm="11-dhclient" name="passwd" dev="sda1" ino=40343 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268818.811:7689): avc: denied { execute_no_trans } for pid=88938 comm="20-chrony-dhcp" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269633.443:10547): avc: denied { read } for pid=149711 comm="11-dhclient" name="passwd" dev="sda1" ino=40341 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269633.449:10557): avc: denied { create } for pid=149714 comm="chronyc" name="chronyc.149714.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645268818.822:7701): avc: denied { setattr } for pid=88953 comm="chronyc" name="chronyc.88953.sock" dev="tmpfs" ino=384365 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645268818.807:7681): avc: denied { execute } for pid=88931 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1'] 2022-02-19T18:32:11.365 INFO:scrape:1 jobs: ['6695090'] 2022-02-19T18:32:11.365 INFO:scrape:suites: ['1-ranks/1', '1-volume/{0-create', '2-allow_standby_replay/no', '2-client', '3-inline/yes', '3-upgrade-with-workload', '4-verify}', '4-verify}}', 'centos_8.stream_container_tools', 'conf/{client', 'mds', 'mon', 'osd}', 'overrides/{pg-warn', 'roles', 'syntax', 'tasks/{0-from/v16.2.4', 'upgrade/cephfs/mds_upgrade_sequence/{bluestore-bitmap', 'whitelist_health', 'whitelist_wrongly_marked_down}'] 2022-02-19T18:32:11.366 INFO:scrape: 2022-02-19T18:32:11.377 INFO:teuthology.results:Sending results to ceph-qa@ceph.io: Test Run: yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi ================================================================= info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/ logs: http://qa-proxy.ceph.com/teuthology/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/ failed: 38 dead: 1 running: 0 waiting: 0 queued: 0 passed: 57 Fail ================================================================= [6695067] upgrade/cephfs/featureful_client/old_client/{bluestore-bitmap centos_latest clusters/1-mds-2-client-micro conf/{client mds mon osd} overrides/{multimds/no pg-warn whitelist_health whitelist_wrongly_marked_down} tasks/{0-octopus 1-client 2-upgrade 3-compat_client/pacific}} ----------------------------------------------------------------- time: 00:21:10 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695067/ log: http://qa-proxy.ceph.com/teuthology/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695067/ SELinux denials found on ubuntu@smithi155.front.sepia.ceph.com: ['type=AVC msg=audit(1645265405.734:6970): avc: denied { setattr } for pid=29714 comm="chronyc" name="chronyc.29714.sock" dev="tmpfs" ino=187506 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645265405.721:6949): avc: denied { getattr } for pid=29701 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265748.281:7299): avc: denied { execute } for pid=31079 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265405.722:6952): avc: denied { open } for pid=29701 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11734 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265405.721:6948): avc: denied { open } for pid=29701 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265748.286:7305): avc: denied { sendto } for pid=31082 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645265405.732:6964): avc: denied { read open } for pid=29714 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265405.725:6956): avc: denied { read open } for pid=29707 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265405.721:6951): avc: denied { write } for pid=29701 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645265405.720:6947): avc: denied { map } for pid=29701 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265748.281:7297): avc: denied { open } for pid=31079 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11734 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265405.734:6974): avc: denied { unlink } for pid=29714 comm="chronyc" name="chronyc.29714.sock" dev="tmpfs" ino=187506 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645265405.725:6956): avc: denied { execute_no_trans } for pid=29707 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265748.281:7298): avc: denied { getattr } for pid=31079 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11734 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265748.286:7303): avc: denied { add_name } for pid=31082 comm="chronyc" name="chronyc.31082.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645265748.280:7294): avc: denied { getattr } for pid=31079 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265405.734:6969): avc: denied { write } for pid=29714 comm="chronyc" name="chrony" dev="tmpfs" ino=21891 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645265405.720:6947): avc: denied { execute } for pid=29701 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265405.727:6959): avc: denied { write } for pid=29707 comm="chrony-helper" name="lock" dev="tmpfs" ino=23955 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265405.734:6969): avc: denied { add_name } for pid=29714 comm="chronyc" name="chronyc.29714.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645265405.734:6972): avc: denied { write } for pid=29714 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=168313 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645265748.286:7303): avc: denied { write } for pid=31082 comm="chronyc" name="chrony" dev="tmpfs" ino=21891 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645265748.279:7292): avc: denied { map } for pid=31079 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265748.286:7303): avc: denied { create } for pid=31082 comm="chronyc" name="chronyc.31082.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645265405.732:6964): avc: denied { execute } for pid=29714 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265405.720:6947): avc: denied { execute_no_trans } for pid=29701 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265748.284:7300): avc: denied { read open } for pid=31082 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265405.734:6973): avc: denied { sendto } for pid=26353 comm="chronyd" path="/run/chrony/chronyc.29714.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645265405.732:6964): avc: denied { map } for pid=29714 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265405.721:6948): avc: denied { read } for pid=29701 comm="11-dhclient" name="passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265405.720:6947): avc: denied { execute } for pid=29701 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265405.734:6974): avc: denied { remove_name } for pid=29714 comm="chronyc" name="chronyc.29714.sock" dev="tmpfs" ino=187506 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645265405.734:6969): avc: denied { dac_override } for pid=29714 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645265405.721:6950): avc: denied { map } for pid=29701 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265748.286:7302): avc: denied { dac_read_search } for pid=31082 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645265405.726:6957): avc: denied { getattr } for pid=29707 comm="chrony-helper" path="/usr/libexec/chrony- helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265748.279:7292): avc: denied { execute_no_trans } for pid=31079 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265405.726:6958): avc: denied { ioctl } for pid=29707 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 ioctlcmd=0x5401 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265405.734:6967): avc: denied { create } for pid=29714 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645265748.284:7300): avc: denied { execute } for pid=31082 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265405.721:6951): avc: denied { connectto } for pid=29701 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645265405.732:6964): avc: denied { execute_no_trans } for pid=29714 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265405.728:6960): avc: denied { lock } for pid=29709 comm="flock" path="/run/chrony-helper/lock" dev="tmpfs" ino=23955 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265748.280:7296): avc: denied { write } for pid=31079 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645265405.734:6972): avc: denied { sendto } for pid=29714 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645265748.286:7307): avc: denied { remove_name } for pid=31082 comm="chronyc" name="chronyc.31082.sock" dev="tmpfs" ino=190334 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645265405.730:6962): avc: denied { read } for pid=29710 comm="chrony-helper" name="chrony-helper" dev="tmpfs" ino=21499 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645265748.286:7305): avc: denied { write } for pid=31082 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=168313 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645265405.722:6952): avc: denied { read } for pid=29701 comm="11-dhclient" name="passwd" dev="sda1" ino=11734 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265748.280:7293): avc: denied { read } for pid=31079 comm="11-dhclient" name="passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265748.286:7307): avc: denied { unlink } for pid=31082 comm="chronyc" name="chronyc.31082.sock" dev="tmpfs" ino=190334 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645265748.286:7306): avc: denied { sendto } for pid=26353 comm="chronyd" path="/run/chrony/chronyc.31082.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645265405.722:6954): avc: denied { execute } for pid=29701 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265748.284:7300): avc: denied { map } for pid=31082 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265748.280:7295): avc: denied { map } for pid=31079 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265748.286:7304): avc: denied { setattr } for pid=31082 comm="chronyc" name="chronyc.31082.sock" dev="tmpfs" ino=190334 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645265405.722:6953): avc: denied { getattr } for pid=29701 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11734 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265405.734:6968): avc: denied { dac_read_search } for pid=29714 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645265405.724:6955): avc: denied { execute_no_trans } for pid=29705 comm="20-chrony-dhcp" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265405.727:6959): avc: denied { open } for pid=29707 comm="chrony-helper" path="/run/chrony-helper/lock" dev="tmpfs" ino=23955 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265405.725:6956): avc: denied { execute } for pid=29707 comm="20-chrony-dhcp" name="chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265748.280:7293): avc: denied { open } for pid=31079 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265748.284:7300): avc: denied { execute_no_trans } for pid=31082 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265748.280:7296): avc: denied { connectto } for pid=31079 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645265748.279:7292): avc: denied { execute } for pid=31079 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265748.281:7297): avc: denied { read } for pid=31079 comm="11-dhclient" name="passwd" dev="sda1" ino=11734 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265405.724:6955): avc: denied { map } for pid=29705 comm="rm" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265748.286:7301): avc: denied { create } for pid=31082 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645265748.279:7292): avc: denied { execute } for pid=31079 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265405.730:6963): avc: denied { read } for pid=29710 comm="chrony-helper" name="dhclient" dev="sda1" ino=1965 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:dhcpc_state_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645265748.286:7303): avc: denied { dac_override } for pid=31082 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645265405.734:6969): avc: denied { create } for pid=29714 comm="chronyc" name="chronyc.29714.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1'] [6695070] upgrade/cephfs/mds_upgrade_sequence/{bluestore-bitmap centos_8.stream_container_tools conf/{client mds mon osd} overrides/{pg-warn syntax whitelist_health whitelist_wrongly_marked_down} roles tasks/{0-from/v16.2.4 1-volume/{0-create 1-ranks/1 2-allow_standby_replay/yes 3-inline/yes 4-verify} 2-client 3-upgrade-with-workload 4-verify}} ----------------------------------------------------------------- time: 00:29:59 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695070/ log: http://qa-proxy.ceph.com/teuthology/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695070/ SELinux denials found on ubuntu@smithi073.front.sepia.ceph.com: ['type=AVC msg=audit(1645266502.163:10655): avc: denied { execute_no_trans } for pid=150051 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266502.163:10655): avc: denied { map } for pid=150051 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265691.513:7692): avc: denied { create } for pid=88664 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645266502.165:10660): avc: denied { write } for pid=150051 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=164669 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645265691.501:7678): avc: denied { map } for pid=88652 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=40341 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265691.509:7689): avc: denied { read } for pid=88661 comm="chrony-helper" name="chrony-helper" dev="tmpfs" ino=29712 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645265691.500:7675): avc: denied { map } for pid=88652 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265691.505:7686): avc: denied { ioctl } for pid=88658 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 ioctlcmd=0x5401 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265691.513:7698): avc: denied { remove_name } for pid=88664 comm="chronyc" name="chronyc.88664.sock" dev="tmpfs" ino=378752 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645265691.511:7691): avc: denied { read open } for pid=88664 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266502.160:10652): avc: denied { read } for pid=150048 comm="11-dhclient" name="passwd" dev="sda1" ino=40343 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265691.513:7698): avc: denied { unlink } for pid=88664 comm="chronyc" name="chronyc.88664.sock" dev="tmpfs" ino=378752 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266502.158:10647): avc: denied { execute } for pid=150048 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265691.513:7696): avc: denied { write } for pid=88664 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=164669 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266502.165:10657): avc: denied { dac_read_search } for pid=150051 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645265691.513:7697): avc: denied { sendto } for pid=26339 comm="chronyd" path="/run/chrony/chronyc.88664.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645266502.165:10656): avc: denied { create } for pid=150051 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645266502.158:10647): avc: denied { execute } for pid=150048 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266502.165:10661): avc: denied { sendto } for pid=26339 comm="chronyd" path="/run/chrony/chronyc.150051.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645266502.160:10652): avc: denied { open } for pid=150048 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=40343 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266502.158:10647): avc: denied { execute_no_trans } for pid=150048 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265691.504:7684): avc: denied { execute } for pid=88658 comm="20-chrony-dhcp" name="chrony- helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266502.163:10655): avc: denied { read open } for pid=150051 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265691.513:7695): avc: denied { setattr } for pid=88664 comm="chronyc" name="chronyc.88664.sock" dev="tmpfs" ino=378752 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645265691.507:7687): avc: denied { open } for pid=88658 comm="chrony-helper" path="/run/chrony-helper/lock" dev="tmpfs" ino=22868 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265691.511:7691): avc: denied { execute } for pid=88664 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265691.507:7688): avc: denied { lock } for pid=88660 comm="flock" path="/run/chrony-helper/lock" dev="tmpfs" ino=22868 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265691.507:7687): avc: denied { write } for pid=88658 comm="chrony-helper" name="lock" dev="tmpfs" ino=22868 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265691.513:7693): avc: denied { dac_read_search } for pid=88664 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645265691.513:7694): avc: denied { dac_override } for pid=88664 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645266502.165:10660): avc: denied { sendto } for pid=150051 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645265691.501:7681): avc: denied { getattr } for pid=88652 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=40343 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266502.165:10662): avc: denied { unlink } for pid=150051 comm="chronyc" name="chronyc.150051.sock" dev="tmpfs" ino=617638 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645265691.500:7675): avc: denied { execute } for pid=88652 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265691.500:7675): avc: denied { execute } for pid=88652 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266502.160:10653): avc: denied { getattr } for pid=150048 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=40343 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265691.501:7679): avc: denied { write } for pid=88652 comm="11-dhclient" name="nss" dev="sda1" ino=2050 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645265691.511:7691): avc: denied { execute_no_trans } for pid=88664 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266502.165:10658): avc: denied { dac_override } for pid=150051 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645265691.513:7694): avc: denied { create } for pid=88664 comm="chronyc" name="chronyc.88664.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645265691.513:7694): avc: denied { write } for pid=88664 comm="chronyc" name="chrony" dev="tmpfs" ino=19191 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645265691.501:7680): avc: denied { read } for pid=88652 comm="11-dhclient" name="passwd" dev="sda1" ino=40343 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265691.504:7684): avc: denied { execute_no_trans } for pid=88658 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266502.165:10662): avc: denied { remove_name } for pid=150051 comm="chronyc" name="chronyc.150051.sock" dev="tmpfs" ino=617638 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645266502.163:10655): avc: denied { execute } for pid=150051 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266502.159:10650): avc: denied { map } for pid=150048 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=40341 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265691.501:7677): avc: denied { getattr } for pid=88652 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=40341 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266502.159:10648): avc: denied { read } for pid=150048 comm="11-dhclient" name="passwd" dev="sda1" ino=40341 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266502.165:10659): avc: denied { setattr } for pid=150051 comm="chronyc" name="chronyc.150051.sock" dev="tmpfs" ino=617638 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266502.158:10647): avc: denied { map } for pid=150048 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265691.501:7682): avc: denied { execute } for pid=88652 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266502.159:10649): avc: denied { getattr } for pid=150048 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=40341 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266502.159:10651): avc: denied { write } for pid=150048 comm="11-dhclient" name="nss" dev="sda1" ino=2050 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266502.165:10658): avc: denied { write } for pid=150051 comm="chronyc" name="chrony" dev="tmpfs" ino=19191 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645265691.501:7680): avc: denied { open } for pid=88652 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=40343 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266502.160:10654): avc: denied { execute } for pid=150048 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266502.165:10658): avc: denied { create } for pid=150051 comm="chronyc" name="chronyc.150051.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266502.159:10648): avc: denied { open } for pid=150048 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=40341 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265691.503:7683): avc: denied { execute_no_trans } for pid=88656 comm="20-chrony-dhcp" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265691.511:7691): avc: denied { map } for pid=88664 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265691.501:7676): avc: denied { read } for pid=88652 comm="11-dhclient" name="passwd" dev="sda1" ino=40341 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266502.165:10658): avc: denied { add_name } for pid=150051 comm="chronyc" name="chronyc.150051.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645265691.501:7679): avc: denied { connectto } for pid=88652 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645265691.509:7690): avc: denied { read } for pid=88661 comm="chrony-helper" name="dhclient" dev="sda1" ino=1965 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:dhcpc_state_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645265691.500:7675): avc: denied { execute_no_trans } for pid=88652 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265691.505:7685): avc: denied { getattr } for pid=88658 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265691.501:7676): avc: denied { open } for pid=88652 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=40341 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265691.504:7684): avc: denied { read open } for pid=88658 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266502.159:10651): avc: denied { connectto } for pid=150048 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645265691.513:7694): avc: denied { add_name } for pid=88664 comm="chronyc" name="chronyc.88664.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645265691.503:7683): avc: denied { map } for pid=88656 comm="rm" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265691.513:7696): avc: denied { sendto } for pid=88664 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1'] [6695073] upgrade/octopus-x/rgw-multisite/{clusters frontend overrides realm tasks upgrade/primary} ----------------------------------------------------------------- time: 03:05:19 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695073/ log: http://qa-proxy.ceph.com/teuthology/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695073/ sentry: https://sentry.ceph.com/organizations/ceph/?query=728adc248916454c9fdb7cb2a4197e26 rgw multisite test failures [6695074] upgrade/cephfs/featureful_client/old_client/{bluestore-bitmap centos_latest clusters/1-mds-2-client-micro conf/{client mds mon osd} overrides/{multimds/no pg-warn whitelist_health whitelist_wrongly_marked_down} tasks/{0-octopus 1-client 2-upgrade 3-compat_client/no}} ----------------------------------------------------------------- time: 00:25:49 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695074/ log: http://qa-proxy.ceph.com/teuthology/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695074/ SELinux denials found on ubuntu@smithi167.front.sepia.ceph.com: ['type=AVC msg=audit(1645265738.539:6957): avc: denied { map } for pid=29763 comm="rm" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265738.536:6948): avc: denied { open } for pid=29759 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265738.540:6958): avc: denied { read open } for pid=29765 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265738.541:6959): avc: denied { getattr } for pid=29765 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266337.397:7322): avc: denied { create } for pid=31397 comm="chronyc" name="chronyc.31397.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645265738.535:6947): avc: denied { execute_no_trans } for pid=29759 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266337.397:7322): avc: denied { dac_override } for pid=31397 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645266337.397:7325): avc: denied { sendto } for pid=26418 comm="chronyd" path="/run/chrony/chronyc.31397.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645265738.550:6974): avc: denied { remove_name } for pid=29771 comm="chronyc" name="chronyc.29771.sock" dev="tmpfs" ino=178106 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645265738.548:6966): avc: denied { execute } for pid=29771 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266337.390:7311): avc: denied { execute } for pid=31394 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266337.395:7319): avc: denied { execute_no_trans } for pid=31397 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265738.536:6949): avc: denied { getattr } for pid=29759 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266337.391:7312): avc: denied { read } for pid=31394 comm="11-dhclient" name="passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265738.550:6972): avc: denied { sendto } for pid=29771 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645266337.397:7323): avc: denied { setattr } for pid=31397 comm="chronyc" name="chronyc.31397.sock" dev="tmpfs" ino=204058 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645265738.550:6971): avc: denied { setattr } for pid=29771 comm="chronyc" name="chronyc.29771.sock" dev="tmpfs" ino=178106 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266337.391:7314): avc: denied { map } for pid=31394 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265738.548:6966): avc: denied { map } for pid=29771 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266337.391:7313): avc: denied { getattr } for pid=31394 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265738.546:6964): avc: denied { read } for pid=29768 comm="chrony-helper" name="dhclient" dev="sda1" ino=1965 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:dhcpc_state_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645265738.535:6947): avc: denied { execute } for pid=29759 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266337.391:7316): avc: denied { open } for pid=31394 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11734 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265738.543:6961): avc: denied { write } for pid=29765 comm="chrony-helper" name="lock" dev="tmpfs" ino=25890 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265738.535:6947): avc: denied { map } for pid=29759 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265738.550:6973): avc: denied { sendto } for pid=26418 comm="chronyd" path="/run/chrony/chronyc.29771.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645266337.390:7311): avc: denied { map } for pid=31394 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265738.550:6969): avc: denied { dac_read_search } for pid=29771 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645266337.391:7316): avc: denied { read } for pid=31394 comm="11-dhclient" name="passwd" dev="sda1" ino=11734 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266337.391:7318): avc: denied { execute } for pid=31394 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265738.550:6970): avc: denied { dac_override } for pid=29771 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645266337.391:7317): avc: denied { getattr } for pid=31394 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11734 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266337.395:7319): avc: denied { read open } for pid=31397 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266337.396:7321): avc: denied { dac_read_search } for pid=31397 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645265738.536:6951): avc: denied { connectto } for pid=29759 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645266337.396:7320): avc: denied { create } for pid=31397 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645265738.539:6956): avc: denied { execute } for pid=29762 comm="20-chrony-dhcp" name="rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265738.544:6962): avc: denied { lock } for pid=29767 comm="flock" path="/run/chrony-helper/lock" dev="tmpfs" ino=25890 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266337.391:7315): avc: denied { write } for pid=31394 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645265738.536:6950): avc: denied { map } for pid=29759 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265738.550:6970): avc: denied { add_name } for pid=29771 comm="chronyc" name="chronyc.29771.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645265738.550:6968): avc: denied { create } for pid=29771 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645265738.536:6948): avc: denied { read } for pid=29759 comm="11-dhclient" name="passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266337.390:7311): avc: denied { execute } for pid=31394 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265738.539:6957): avc: denied { execute_no_trans } for pid=29763 comm="20-chrony-dhcp" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265738.535:6947): avc: denied { execute } for pid=29759 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265738.550:6970): avc: denied { create } for pid=29771 comm="chronyc" name="chronyc.29771.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645265738.548:6966): avc: denied { execute_no_trans } for pid=29771 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265738.548:6966): avc: denied { read open } for pid=29771 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265738.546:6963): avc: denied { read } for pid=29768 comm="chrony-helper" name="chrony-helper" dev="tmpfs" ino=22011 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645266337.391:7312): avc: denied { open } for pid=31394 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266337.397:7324): avc: denied { sendto } for pid=31397 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645265738.550:6974): avc: denied { unlink } for pid=29771 comm="chronyc" name="chronyc.29771.sock" dev="tmpfs" ino=178106 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266337.395:7319): avc: denied { map } for pid=31397 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265738.537:6952): avc: denied { open } for pid=29759 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11734 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265738.537:6953): avc: denied { getattr } for pid=29759 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11734 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265738.537:6954): avc: denied { execute } for pid=29759 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265738.540:6958): avc: denied { execute_no_trans } for pid=29765 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266337.395:7319): avc: denied { execute } for pid=31397 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265738.536:6951): avc: denied { write } for pid=29759 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266337.397:7322): avc: denied { write } for pid=31397 comm="chronyc" name="chrony" dev="tmpfs" ino=21484 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645265738.538:6955): avc: denied { map } for pid=29762 comm="20-chrony-dhcp" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266337.397:7326): avc: denied { unlink } for pid=31397 comm="chronyc" name="chronyc.31397.sock" dev="tmpfs" ino=204058 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645265738.543:6961): avc: denied { open } for pid=29765 comm="chrony-helper" path="/run/chrony-helper/lock" dev="tmpfs" ino=25890 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265738.537:6952): avc: denied { read } for pid=29759 comm="11-dhclient" name="passwd" dev="sda1" ino=11734 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266337.397:7322): avc: denied { add_name } for pid=31397 comm="chronyc" name="chronyc.31397.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645265738.550:6970): avc: denied { write } for pid=29771 comm="chronyc" name="chrony" dev="tmpfs" ino=21484 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645265738.541:6960): avc: denied { ioctl } for pid=29765 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 ioctlcmd=0x5401 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645265738.538:6955): avc: denied { execute } for pid=29762 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266337.397:7324): avc: denied { write } for pid=31397 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=164746 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266337.391:7315): avc: denied { connectto } for pid=31394 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645265738.550:6972): avc: denied { write } for pid=29771 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=164746 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266337.390:7311): avc: denied { execute_no_trans } for pid=31394 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266337.397:7326): avc: denied { remove_name } for pid=31397 comm="chronyc" name="chronyc.31397.sock" dev="tmpfs" ino=204058 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645265738.540:6958): avc: denied { execute } for pid=29765 comm="20-chrony-dhcp" name="chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1'] [6695076] upgrade/octopus-x/stress-split-no-cephadm/{0-cluster/{openstack start} 1-ceph-install/octopus 1.1-pg-log-overrides/normal_pg_log 2-partial-upgrade/firsthalf 3-thrash/default 4-workload/{radosbench rbd-cls rbd-import-export rbd_api readwrite rgw_ragweed_prepare snaps-few-objects} 5-finish-upgrade 6-quincy 8-final-workload/{rbd-python snaps-many-objects} mon_election/classic objectstore/bluestore-hybrid thrashosds-health ubuntu_20.04} ----------------------------------------------------------------- time: 03:21:06 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695076/ log: http://qa-proxy.ceph.com/teuthology/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695076/ sentry: https://sentry.ceph.com/organizations/ceph/?query=ddf7b62f9ff34ee9bff8b1b8bd924dfc Command failed on smithi169 with status 2: 'cd /home/ubuntu/cephtest/ragweed && ./bootstrap' [6695081] upgrade/cephfs/mds_upgrade_sequence/{bluestore-bitmap centos_8.stream_container_tools conf/{client mds mon osd} overrides/{pg-warn syntax whitelist_health whitelist_wrongly_marked_down} roles tasks/{0-from/pacific 1-volume/{0-create 1-ranks/2 2-allow_standby_replay/yes 3-inline/no 4-verify} 2-client 3-upgrade-with-workload 4-verify}} ----------------------------------------------------------------- time: 00:27:01 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695081/ log: http://qa-proxy.ceph.com/teuthology/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695081/ SELinux denials found on ubuntu@smithi141.front.sepia.ceph.com: ['type=AVC msg=audit(1645266212.621:7677): avc: denied { sendto } for pid=26415 comm="chronyd" path="/run/chrony/chronyc.88994.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645266212.608:7659): avc: denied { getattr } for pid=88972 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=39864 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266212.611:7663): avc: denied { read open } for pid=88983 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266212.620:7672): avc: denied { create } for pid=88994 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645266212.617:7670): avc: denied { execute } for pid=88993 comm="nm-dispatcher" name="20-chrony-onoffline" dev="sda1" ino=591 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266887.103:10682): avc: denied { create } for pid=147466 comm="chronyc" name="chronyc.147466.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266212.607:7653): avc: denied { map } for pid=88972 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266212.608:7658): avc: denied { read } for pid=88972 comm="11-dhclient" name="passwd" dev="sda1" ino=39864 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266887.103:10685): avc: denied { sendto } for pid=26415 comm="chronyd" path="/run/chrony/chronyc.147466.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645266212.607:7653): avc: denied { execute_no_trans } for pid=88972 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266212.608:7657): avc: denied { write } for pid=88972 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266212.621:7678): avc: denied { remove_name } for pid=88994 comm="chronyc" name="chronyc.88994.sock" dev="tmpfs" ino=384592 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645266887.103:10681): avc: denied { dac_read_search } for pid=147466 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645266887.097:10671): avc: denied { execute_no_trans } for pid=147463 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266887.103:10682): avc: denied { write } for pid=147466 comm="chronyc" name="chrony" dev="tmpfs" ino=20747 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645266212.607:7653): avc: denied { execute } for pid=88972 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266212.607:7653): avc: denied { execute } for pid=88972 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266212.608:7654): avc: denied { open } for pid=88972 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=39862 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266212.608:7657): avc: denied { connectto } for pid=88972 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645266887.097:10671): avc: denied { execute } for pid=147463 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266212.608:7655): avc: denied { getattr } for pid=88972 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=39862 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266212.611:7663): avc: denied { execute } for pid=88983 comm="20-chrony-dhcp" name="chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266212.614:7666): avc: denied { write } for pid=88983 comm="chrony-helper" name="lock" dev="tmpfs" ino=25738 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266212.621:7675): avc: denied { setattr } for pid=88994 comm="chronyc" name="chronyc.88994.sock" dev="tmpfs" ino=384592 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266887.098:10677): avc: denied { getattr } for pid=147463 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=39864 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266887.097:10672): avc: denied { read } for pid=147463 comm="11-dhclient" name="passwd" dev="sda1" ino=39862 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266212.610:7661): avc: denied { write } for pid=88977 comm="20-chrony-dhcp" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266212.618:7671): avc: denied { map } for pid=88994 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266212.618:7671): avc: denied { read open } for pid=88994 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266887.101:10679): avc: denied { execute } for pid=147466 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266212.610:7662): avc: denied { execute_no_trans } for pid=88980 comm="20-chrony-dhcp" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266212.614:7666): avc: denied { open } for pid=88983 comm="chrony-helper" path="/run/chrony-helper/lock" dev="tmpfs" ino=25738 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266887.103:10684): avc: denied { sendto } for pid=147466 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645266887.097:10671): avc: denied { execute } for pid=147463 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266212.621:7676): avc: denied { sendto } for pid=88994 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645266887.097:10675): avc: denied { write } for pid=147463 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266212.621:7678): avc: denied { unlink } for pid=88994 comm="chronyc" name="chronyc.88994.sock" dev="tmpfs" ino=384592 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266212.612:7664): avc: denied { getattr } for pid=88983 comm="chrony-helper" path="/usr/libexec/chrony- helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266887.097:10675): avc: denied { connectto } for pid=147463 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645266887.098:10676): avc: denied { open } for pid=147463 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=39864 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266212.614:7667): avc: denied { lock } for pid=88990 comm="flock" path="/run/chrony-helper/lock" dev="tmpfs" ino=25738 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266887.101:10679): avc: denied { execute_no_trans } for pid=147466 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266212.612:7665): avc: denied { ioctl } for pid=88983 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 ioctlcmd=0x5401 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266212.618:7671): avc: denied { execute_no_trans } for pid=88994 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266212.608:7654): avc: denied { read } for pid=88972 comm="11-dhclient" name="passwd" dev="sda1" ino=39862 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266887.098:10676): avc: denied { read } for pid=147463 comm="11-dhclient" name="passwd" dev="sda1" ino=39864 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266212.620:7673): avc: denied { dac_read_search } for pid=88994 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645266887.103:10686): avc: denied { remove_name } for pid=147466 comm="chronyc" name="chronyc.147466.sock" dev="tmpfs" ino=603100 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645266212.621:7674): avc: denied { add_name } for pid=88994 comm="chronyc" name="chronyc.88994.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645266212.610:7662): avc: denied { map } for pid=88980 comm="rm" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266887.101:10679): avc: denied { map } for pid=147466 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266887.097:10672): avc: denied { open } for pid=147463 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=39862 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266212.608:7658): avc: denied { open } for pid=88972 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=39864 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266212.617:7668): avc: denied { read } for pid=88991 comm="chrony-helper" name="chrony-helper" dev="tmpfs" ino=20246 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645266212.618:7671): avc: denied { execute } for pid=88994 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266212.617:7670): avc: denied { execute_no_trans } for pid=88993 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/20-chrony-onoffline" dev="sda1" ino=591 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266887.103:10682): avc: denied { add_name } for pid=147466 comm="chronyc" name="chronyc.147466.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645266887.097:10671): avc: denied { map } for pid=147463 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266212.608:7656): avc: denied { map } for pid=88972 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=39862 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266887.097:10674): avc: denied { map } for pid=147463 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=39862 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266212.621:7674): avc: denied { dac_override } for pid=88994 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645266887.103:10682): avc: denied { dac_override } for pid=147466 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645266212.621:7674): avc: denied { create } for pid=88994 comm="chronyc" name="chronyc.88994.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266887.103:10686): avc: denied { unlink } for pid=147466 comm="chronyc" name="chronyc.147466.sock" dev="tmpfs" ino=603100 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266887.097:10673): avc: denied { getattr } for pid=147463 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=39862 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266212.621:7676): avc: denied { write } for pid=88994 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=170200 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266212.617:7669): avc: denied { read } for pid=88991 comm="chrony-helper" name="dhclient" dev="sda1" ino=1965 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:dhcpc_state_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645266212.611:7663): avc: denied { execute_no_trans } for pid=88983 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266212.609:7660): avc: denied { execute } for pid=88972 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266887.103:10680): avc: denied { create } for pid=147466 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645266212.621:7674): avc: denied { write } for pid=88994 comm="chronyc" name="chrony" dev="tmpfs" ino=20747 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645266887.103:10684): avc: denied { write } for pid=147466 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=170200 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266887.101:10679): avc: denied { read open } for pid=147466 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266887.098:10678): avc: denied { execute } for pid=147463 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266887.103:10683): avc: denied { setattr } for pid=147466 comm="chronyc" name="chronyc.147466.sock" dev="tmpfs" ino=603100 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1'] [6695086] upgrade/cephfs/featureful_client/upgraded_client/{bluestore-bitmap centos_latest clusters/1-mds-2-client-micro conf/{client mds mon osd} overrides/{multimds/no pg-warn whitelist_health whitelist_wrongly_marked_down} tasks/{0-octopus 1-client 2-upgrade 3-client-upgrade 4-compat_client 5-client-sanity}} ----------------------------------------------------------------- time: 00:18:00 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695086/ log: http://qa-proxy.ceph.com/teuthology/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695086/ SELinux denials found on ubuntu@smithi087.front.sepia.ceph.com: ['type=AVC msg=audit(1645266282.300:6955): avc: denied { execute_no_trans } for pid=29751 comm="20-chrony-dhcp" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266282.298:6953): avc: denied { getattr } for pid=29747 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11734 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266654.934:7772): avc: denied { read open } for pid=33029 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266282.304:6959): avc: denied { write } for pid=29753 comm="chrony-helper" name="lock" dev="tmpfs" ino=27672 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266282.302:6958): avc: denied { ioctl } for pid=29753 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 ioctlcmd=0x5401 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266496.496:7376): avc: denied { getattr } for pid=31461 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11734 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266282.311:6973): avc: denied { write } for pid=29760 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=170345 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266282.311:6975): avc: denied { remove_name } for pid=29760 comm="chronyc" name="chronyc.29760.sock" dev="tmpfs" ino=186195 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645266496.501:7385): avc: denied { write } for pid=31464 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=170345 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266497.179:7449): avc: denied { open } for pid=31589 comm="chrony-helper" path="/run/chrony-helper/lock" dev="tmpfs" ino=27672 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266282.297:6948): avc: denied { read } for pid=29747 comm="11-dhclient" name="passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266282.297:6951): avc: denied { write } for pid=29747 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266497.174:7442): avc: denied { open } for pid=31579 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11734 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266497.176:7446): avc: denied { read open } for pid=31589 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266496.496:7374): avc: denied { write } for pid=31461 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266654.931:7770): avc: denied { getattr } for pid=33026 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11734 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266496.495:7372): avc: denied { getattr } for pid=31461 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266497.176:7446): avc: denied { execute } for pid=31589 comm="20-chrony-dhcp" name="chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266282.309:6965): avc: denied { execute } for pid=29760 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266496.499:7380): avc: denied { map } for pid=31464 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266496.501:7387): avc: denied { dac_override } for pid=31464 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645266497.172:7437): avc: denied { map } for pid=31579 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266496.495:7371): avc: denied { read } for pid=31461 comm="11-dhclient" name="passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266496.496:7375): avc: denied { open } for pid=31461 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11734 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266654.931:7771): avc: denied { execute } for pid=33026 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266497.176:7445): avc: denied { execute_no_trans } for pid=31586 comm="20-chrony-dhcp" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266282.296:6947): avc: denied { execute_no_trans } for pid=29747 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266496.499:7380): avc: denied { execute_no_trans } for pid=31464 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266654.930:7765): avc: denied { read } for pid=33026 comm="11-dhclient" name="passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266496.494:7368): avc: denied { execute_no_trans } for pid=31461 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266497.181:7452): avc: denied { read } for pid=31597 comm="chrony-helper" name="dhclient" dev="sda1" ino=1965 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:dhcpc_state_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645266282.304:6959): avc: denied { open } for pid=29753 comm="chrony-helper" path="/run/chrony-helper/lock" dev="tmpfs" ino=27672 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266496.501:7387): avc: denied { unlink } for pid=31464 comm="chronyc" name="chronyc.31464.sock" dev="tmpfs" ino=205675 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266282.301:6956): avc: denied { read open } for pid=29753 comm="20-chrony-dhcp" path="/usr/libexec/chrony- helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266496.496:7377): avc: denied { execute } for pid=31461 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266497.185:7454): avc: denied { setattr } for pid=31604 comm="chronyc" name="chronyc.31604.sock" dev="tmpfs" ino=201536 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266282.297:6948): avc: denied { open } for pid=29747 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266496.494:7368): avc: denied { map } for pid=31461 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266496.501:7387): avc: denied { remove_name } for pid=31464 comm="chronyc" name="chronyc.31464.sock" dev="tmpfs" ino=205675 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645266497.174:7443): avc: denied { getattr } for pid=31579 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11734 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266282.310:6971): avc: denied { create } for pid=29760 comm="chronyc" name="chronyc.29760.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266496.501:7383): avc: denied { write } for pid=31464 comm="chronyc" name="chrony" dev="tmpfs" ino=22164 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645266282.301:6956): avc: denied { execute } for pid=29753 comm="20-chrony-dhcp" name="chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266496.501:7387): avc: denied { dac_read_search } for pid=31464 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645266282.296:6947): avc: denied { execute } for pid=29747 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266282.311:6974): avc: denied { sendto } for pid=26400 comm="chronyd" path="/run/chrony/chronyc.29760.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645266654.929:7764): avc: denied { map } for pid=33026 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266282.297:6949): avc: denied { getattr } for pid=29747 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266496.494:7368): avc: denied { execute } for pid=31461 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266282.310:6971): avc: denied { add_name } for pid=29760 comm="chronyc" name="chronyc.29760.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645266282.310:6969): avc: denied { create } for pid=29760 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645266282.297:6950): avc: denied { map } for pid=29747 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266497.185:7456): avc: denied { sendto } for pid=26400 comm="chronyd" path="/run/chrony/chronyc.31604.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645266654.936:7779): avc: denied { remove_name } for pid=33029 comm="chronyc" name="chronyc.33029.sock" dev="tmpfs" ino=216717 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645266654.929:7764): avc: denied { execute } for pid=33026 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266654.935:7773): avc: denied { create } for pid=33029 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645266496.494:7368): avc: denied { execute } for pid=31461 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266654.936:7778): avc: denied { sendto } for pid=26400 comm="chronyd" path="/run/chrony/chronyc.33029.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645266497.174:7442): avc: denied { read } for pid=31579 comm="11-dhclient" name="passwd" dev="sda1" ino=11734 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266282.302:6957): avc: denied { getattr } for pid=29753 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266654.936:7775): avc: denied { create } for pid=33029 comm="chronyc" name="chronyc.33029.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266282.309:6965): avc: denied { map } for pid=29760 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266497.176:7445): avc: denied { map } for pid=31586 comm="rm" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266496.501:7382): avc: denied { dac_read_search } for pid=31464 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645266496.501:7383): avc: denied { dac_override } for pid=31464 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645266282.311:6973): avc: denied { sendto } for pid=29760 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645266654.930:7768): avc: denied { write } for pid=33026 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266282.307:6963): avc: denied { read } for pid=29756 comm="chrony-helper" name="dhclient" dev="sda1" ino=1965 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:dhcpc_state_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645266497.176:7446): avc: denied { execute_no_trans } for pid=31589 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266282.309:6965): avc: denied { execute_no_trans } for pid=29760 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266654.930:7765): avc: denied { open } for pid=33026 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266654.931:7769): avc: denied { open } for pid=33026 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11734 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266282.310:6970): avc: denied { dac_read_search } for pid=29760 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645266497.185:7455): avc: denied { write } for pid=31604 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=170345 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266282.296:6947): avc: denied { map } for pid=29747 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266654.934:7772): avc: denied { execute_no_trans } for pid=33029 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266497.177:7448): avc: denied { ioctl } for pid=31589 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 ioctlcmd=0x5401 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266654.936:7779): avc: denied { unlink } for pid=33029 comm="chronyc" name="chronyc.33029.sock" dev="tmpfs" ino=216717 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266497.179:7449): avc: denied { write } for pid=31589 comm="chrony-helper" name="lock" dev="tmpfs" ino=27672 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266496.501:7384): avc: denied { setattr } for pid=31464 comm="chronyc" name="chronyc.31464.sock" dev="tmpfs" ino=205675 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266496.501:7385): avc: denied { sendto } for pid=31464 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645266496.495:7371): avc: denied { open } for pid=31461 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266497.173:7438): avc: denied { read } for pid=31579 comm="11-dhclient" name="passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266654.936:7777): avc: denied { sendto } for pid=33029 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645266654.936:7775): avc: denied { dac_override } for pid=33029 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645266282.307:6962): avc: denied { read } for pid=29756 comm="chrony-helper" name="chrony-helper" dev="tmpfs" ino=29866 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645266282.304:6960): avc: denied { lock } for pid=29755 comm="flock" path="/run/chrony-helper/lock" dev="tmpfs" ino=27672 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266496.501:7381): avc: denied { create } for pid=31464 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645266496.496:7375): avc: denied { read } for pid=31461 comm="11-dhclient" name="passwd" dev="sda1" ino=11734 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266496.501:7383): avc: denied { create } for pid=31464 comm="chronyc" name="chronyc.31464.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266282.310:6971): avc: denied { write } for pid=29760 comm="chronyc" name="chrony" dev="tmpfs" ino=22164 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645266497.173:7440): avc: denied { map } for pid=31579 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266282.297:6951): avc: denied { connectto } for pid=29747 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645266282.298:6952): avc: denied { read } for pid=29747 comm="11-dhclient" name="passwd" dev="sda1" ino=11734 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266654.930:7767): avc: denied { map } for pid=33026 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266497.179:7450): avc: denied { lock } for pid=31595 comm="flock" path="/run/chrony-helper/lock" dev="tmpfs" ino=27672 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266282.300:6955): avc: denied { map } for pid=29751 comm="rm" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266654.936:7775): avc: denied { add_name } for pid=33029 comm="chronyc" name="chronyc.33029.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645266497.173:7438): avc: denied { open } for pid=31579 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266497.181:7451): avc: denied { read } for pid=31597 comm="chrony-helper" name="chrony-helper" dev="tmpfs" ino=29866 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645266282.308:6964): avc: denied { write } for pid=29758 comm="20-chrony-onoff" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266497.173:7441): avc: denied { connectto } for pid=31579 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645266654.936:7774): avc: denied { dac_read_search } for pid=33029 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645266282.309:6965): avc: denied { read open } for pid=29760 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266497.172:7437): avc: denied { execute } for pid=31579 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266654.931:7769): avc: denied { read } for pid=33026 comm="11-dhclient" name="passwd" dev="sda1" ino=11734 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266496.496:7373): avc: denied { map } for pid=31461 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266654.936:7775): avc: denied { write } for pid=33029 comm="chronyc" name="chrony" dev="tmpfs" ino=22164 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645266282.310:6971): avc: denied { dac_override } for pid=29760 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645266496.499:7380): avc: denied { execute } for pid=31464 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266282.301:6956): avc: denied { execute_no_trans } for pid=29753 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266497.173:7439): avc: denied { getattr } for pid=31579 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266496.501:7386): avc: denied { sendto } for pid=26400 comm="chronyd" path="/run/chrony/chronyc.31464.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645266654.930:7766): avc: denied { getattr } for pid=33026 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266654.934:7772): avc: denied { execute } for pid=33029 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266654.929:7764): avc: denied { execute_no_trans } for pid=33026 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266496.501:7383): avc: denied { add_name } for pid=31464 comm="chronyc" name="chronyc.31464.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645266497.185:7453): avc: denied { create } for pid=31604 comm="chronyc" name="chronyc.31604.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266282.311:6972): avc: denied { setattr } for pid=29760 comm="chronyc" name="chronyc.29760.sock" dev="tmpfs" ino=186195 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266497.185:7457): avc: denied { unlink } for pid=31604 comm="chronyc" name="chronyc.31604.sock" dev="tmpfs" ino=201536 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266496.499:7380): avc: denied { read open } for pid=31464 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266497.174:7444): avc: denied { execute } for pid=31579 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266282.296:6947): avc: denied { execute } for pid=29747 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266496.496:7374): avc: denied { connectto } for pid=31461 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645266654.936:7776): avc: denied { setattr } for pid=33029 comm="chronyc" name="chronyc.33029.sock" dev="tmpfs" ino=216717 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266282.311:6975): avc: denied { unlink } for pid=29760 comm="chronyc" name="chronyc.29760.sock" dev="tmpfs" ino=186195 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266497.177:7447): avc: denied { getattr } for pid=31589 comm="chrony-helper" path="/usr/libexec/chrony- helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266282.298:6954): avc: denied { execute } for pid=29747 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266282.298:6952): avc: denied { open } for pid=29747 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11734 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266654.936:7777): avc: denied { write } for pid=33029 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=170345 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645266654.934:7772): avc: denied { map } for pid=33029 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645266654.929:7764): avc: denied { execute } for pid=33026 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1'] [6695087] upgrade/octopus-x/stress-split-no-cephadm/{0-cluster/{openstack start} 1-ceph-install/octopus 1.1-pg-log-overrides/short_pg_log 2-partial-upgrade/firsthalf 3-thrash/default 4-workload/{radosbench rbd-cls rbd-import-export rbd_api readwrite rgw_ragweed_prepare snaps-few-objects} 5-finish-upgrade 6-quincy 8-final-workload/{rbd-python snaps-many-objects} mon_election/connectivity objectstore/filestore-xfs thrashosds-health ubuntu_20.04} ----------------------------------------------------------------- time: 01:43:08 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695087/ log: http://qa-proxy.ceph.com/teuthology/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695087/ sentry: https://sentry.ceph.com/organizations/ceph/?query=e4a2e0df074140318219414255f34831 Command failed on smithi196 with status 2: 'cd /home/ubuntu/cephtest/ragweed && ./bootstrap' [6695089] upgrade/octopus-x/stress-split/{0-distro/centos_8.stream_container_tools 0-roles 1-start 2-first-half-tasks/rbd-cls 3-stress-tasks/{radosbench rbd-cls rbd-import-export rbd_api readwrite snaps-few-objects} 4-second-half-tasks/radosbench mon_election/classic} ----------------------------------------------------------------- time: 01:32:04 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695089/ log: http://qa-proxy.ceph.com/teuthology/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695089/ sentry: https://sentry.ceph.com/organizations/ceph/?query=be4b7a26c46d42fdbba37f51051d69f0 No module named 'tasks.rados' [6695090] upgrade/cephfs/mds_upgrade_sequence/{bluestore-bitmap centos_8.stream_container_tools conf/{client mds mon osd} overrides/{pg-warn syntax whitelist_health whitelist_wrongly_marked_down} roles tasks/{0-from/v16.2.4 1-volume/{0-create 1-ranks/1 2-allow_standby_replay/no 3-inline/yes 4-verify} 2-client 3-upgrade-with-workload 4-verify}} ----------------------------------------------------------------- time: 00:30:14 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695090/ log: http://qa-proxy.ceph.com/teuthology/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695090/ SELinux denials found on ubuntu@smithi039.front.sepia.ceph.com: ['type=AVC msg=audit(1645268818.808:7685): avc: denied { connectto } for pid=88931 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645268818.807:7681): avc: denied { execute_no_trans } for pid=88931 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268818.822:7700): avc: denied { dac_override } for pid=88953 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645268818.808:7688): avc: denied { execute } for pid=88931 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269633.443:10549): avc: denied { map } for pid=149711 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=40341 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269633.443:10552): avc: denied { getattr } for pid=149711 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=40343 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268818.822:7702): avc: denied { sendto } for pid=88953 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645269633.449:10558): avc: denied { setattr } for pid=149714 comm="chronyc" name="chronyc.149714.sock" dev="tmpfs" ino=610194 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645268818.811:7689): avc: denied { map } for pid=88938 comm="rm" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268818.807:7681): avc: denied { execute } for pid=88931 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268818.808:7685): avc: denied { write } for pid=88931 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645269633.443:10550): avc: denied { connectto } for pid=149711 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645269633.442:10546): avc: denied { execute_no_trans } for pid=149711 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268818.808:7683): avc: denied { getattr } for pid=88931 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=40341 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268818.822:7702): avc: denied { write } for pid=88953 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=166252 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645269633.449:10557): avc: denied { dac_override } for pid=149714 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645268818.817:7696): avc: denied { read } for pid=88947 comm="chrony-helper" name="dhclient" dev="sda1" ino=1965 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:dhcpc_state_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645269633.447:10554): avc: denied { read open } for pid=149714 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268818.814:7693): avc: denied { write } for pid=88941 comm="chrony-helper" name="lock" dev="tmpfs" ino=23879 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269633.443:10550): avc: denied { write } for pid=149711 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645269633.447:10554): avc: denied { map } for pid=149714 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268818.823:7704): avc: denied { remove_name } for pid=88953 comm="chronyc" name="chronyc.88953.sock" dev="tmpfs" ino=384365 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645268818.822:7700): avc: denied { write } for pid=88953 comm="chronyc" name="chrony" dev="tmpfs" ino=22709 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645269633.442:10546): avc: denied { execute } for pid=149711 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269633.447:10554): avc: denied { execute } for pid=149714 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269633.443:10548): avc: denied { getattr } for pid=149711 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=40341 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268818.823:7704): avc: denied { unlink } for pid=88953 comm="chronyc" name="chronyc.88953.sock" dev="tmpfs" ino=384365 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645268818.808:7684): avc: denied { map } for pid=88931 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=40341 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269633.447:10554): avc: denied { execute_no_trans } for pid=149714 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268818.812:7690): avc: denied { execute } for pid=88941 comm="20-chrony-dhcp" name="chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269633.449:10561): avc: denied { remove_name } for pid=149714 comm="chronyc" name="chronyc.149714.sock" dev="tmpfs" ino=610194 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645268818.812:7690): avc: denied { read open } for pid=88941 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268818.822:7700): avc: denied { add_name } for pid=88953 comm="chronyc" name="chronyc.88953.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645269633.449:10560): avc: denied { sendto } for pid=26442 comm="chronyd" path="/run/chrony/chronyc.149714.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645268818.812:7690): avc: denied { execute_no_trans } for pid=88941 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268818.813:7692): avc: denied { ioctl } for pid=88941 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 ioctlcmd=0x5401 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268818.819:7697): avc: denied { read open } for pid=88953 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269633.449:10557): avc: denied { write } for pid=149714 comm="chronyc" name="chrony" dev="tmpfs" ino=22709 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645268818.823:7703): avc: denied { sendto } for pid=26442 comm="chronyd" path="/run/chrony/chronyc.88953.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645269633.449:10561): avc: denied { unlink } for pid=149714 comm="chronyc" name="chronyc.149714.sock" dev="tmpfs" ino=610194 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645268818.814:7693): avc: denied { open } for pid=88941 comm="chrony-helper" path="/run/chrony-helper/lock" dev="tmpfs" ino=23879 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269633.442:10546): avc: denied { execute } for pid=149711 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268818.808:7686): avc: denied { open } for pid=88931 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=40343 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269633.448:10555): avc: denied { create } for pid=149714 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645268818.819:7697): avc: denied { map } for pid=88953 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268818.822:7699): avc: denied { dac_read_search } for pid=88953 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645269633.449:10559): avc: denied { write } for pid=149714 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=166252 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645268818.817:7695): avc: denied { read } for pid=88947 comm="chrony-helper" name="chrony-helper" dev="tmpfs" ino=21960 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645268818.815:7694): avc: denied { lock } for pid=88946 comm="flock" path="/run/chrony-helper/lock" dev="tmpfs" ino=23879 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269633.442:10546): avc: denied { map } for pid=149711 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268818.813:7691): avc: denied { getattr } for pid=88941 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268818.822:7700): avc: denied { create } for pid=88953 comm="chronyc" name="chronyc.88953.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645269633.449:10556): avc: denied { dac_read_search } for pid=149714 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645268818.807:7681): avc: denied { map } for pid=88931 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268818.822:7698): avc: denied { create } for pid=88953 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645268818.808:7687): avc: denied { getattr } for pid=88931 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=40343 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268818.807:7682): avc: denied { open } for pid=88931 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=40341 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269633.443:10547): avc: denied { open } for pid=149711 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=40341 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269633.449:10557): avc: denied { add_name } for pid=149714 comm="chronyc" name="chronyc.149714.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645268818.808:7686): avc: denied { read } for pid=88931 comm="11-dhclient" name="passwd" dev="sda1" ino=40343 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268818.819:7697): avc: denied { execute } for pid=88953 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269633.449:10559): avc: denied { sendto } for pid=149714 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645269633.443:10551): avc: denied { open } for pid=149711 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=40343 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268818.807:7682): avc: denied { read } for pid=88931 comm="11-dhclient" name="passwd" dev="sda1" ino=40341 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268818.819:7697): avc: denied { execute_no_trans } for pid=88953 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269633.443:10553): avc: denied { execute } for pid=149711 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269633.443:10551): avc: denied { read } for pid=149711 comm="11-dhclient" name="passwd" dev="sda1" ino=40343 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268818.811:7689): avc: denied { execute_no_trans } for pid=88938 comm="20-chrony-dhcp" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269633.443:10547): avc: denied { read } for pid=149711 comm="11-dhclient" name="passwd" dev="sda1" ino=40341 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269633.449:10557): avc: denied { create } for pid=149714 comm="chronyc" name="chronyc.149714.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645268818.822:7701): avc: denied { setattr } for pid=88953 comm="chronyc" name="chronyc.88953.sock" dev="tmpfs" ino=384365 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645268818.807:7681): avc: denied { execute } for pid=88931 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1'] [6695092] upgrade/pacific-x/stress-split/{0-distro/centos_8.stream_container_tools_crun 0-roles 1-start 2-first-half-tasks/rbd-import-export 3-stress-tasks/{radosbench rbd-cls rbd-import-export rbd_api readwrite snaps-few-objects} 4-second-half-tasks/rbd-import-export mon_election/connectivity} ----------------------------------------------------------------- time: 01:23:09 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695092/ log: http://qa-proxy.ceph.com/teuthology/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695092/ sentry: https://sentry.ceph.com/organizations/ceph/?query=47e5ece7b1d7401b8b83d675bdfe87b3 No module named 'tasks.rados' [6695094] upgrade/cephfs/featureful_client/old_client/{bluestore-bitmap centos_latest clusters/1-mds-2-client-micro conf/{client mds mon osd} overrides/{multimds/yes pg-warn whitelist_health whitelist_wrongly_marked_down} tasks/{0-octopus 1-client 2-upgrade 3-compat_client/pacific}} ----------------------------------------------------------------- time: 00:21:46 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695094/ log: http://qa-proxy.ceph.com/teuthology/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695094/ SELinux denials found on ubuntu@smithi072.front.sepia.ceph.com: ['type=AVC msg=audit(1645268759.376:6958): avc: denied { write } for pid=29729 comm="chrony-helper" name="lock" dev="tmpfs" ino=20942 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269109.836:7304): avc: denied { execute } for pid=31124 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269109.838:7305): avc: denied { create } for pid=31124 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645269109.839:7311): avc: denied { remove_name } for pid=31124 comm="chronyc" name="chronyc.31124.sock" dev="tmpfs" ino=202263 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645269109.836:7304): avc: denied { read open } for pid=31124 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268759.382:6964): avc: denied { execute_no_trans } for pid=29736 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268759.384:6972): avc: denied { sendto } for pid=29736 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645269109.838:7307): avc: denied { write } for pid=31124 comm="chronyc" name="chrony" dev="tmpfs" ino=25616 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645269109.839:7310): avc: denied { sendto } for pid=26380 comm="chronyd" path="/run/chrony/chronyc.31124.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645269109.838:7306): avc: denied { dac_read_search } for pid=31124 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645268759.384:6972): avc: denied { write } for pid=29736 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=171123 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645268759.380:6962): avc: denied { read } for pid=29732 comm="chrony-helper" name="dhclient" dev="sda1" ino=1965 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:dhcpc_state_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645268759.384:6974): avc: denied { remove_name } for pid=29736 comm="chronyc" name="chronyc.29736.sock" dev="tmpfs" ino=184832 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645268759.377:6959): avc: denied { lock } for pid=29731 comm="flock" path="/run/chrony-helper/lock" dev="tmpfs" ino=20942 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268759.370:6950): avc: denied { connectto } for pid=29723 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645268759.382:6964): avc: denied { execute } for pid=29736 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268759.375:6957): avc: denied { ioctl } for pid=29729 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 ioctlcmd=0x5401 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268759.371:6951): avc: denied { open } for pid=29723 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11735 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269109.838:7307): avc: denied { dac_override } for pid=31124 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645269109.832:7296): avc: denied { connectto } for pid=31121 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645269109.836:7304): avc: denied { map } for pid=31124 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268759.370:6947): avc: denied { open } for pid=29723 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268759.380:6961): avc: denied { read } for pid=29732 comm="chrony-helper" name="chrony-helper" dev="tmpfs" ino=24007 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645268759.384:6968): avc: denied { create } for pid=29736 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645268759.370:6950): avc: denied { write } for pid=29723 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645269109.838:7308): avc: denied { setattr } for pid=31124 comm="chronyc" name="chronyc.31124.sock" dev="tmpfs" ino=202263 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645269109.838:7307): avc: denied { create } for pid=31124 comm="chronyc" name="chronyc.31124.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645269109.833:7297): avc: denied { read } for pid=31121 comm="11-dhclient" name="passwd" dev="sda1" ino=11735 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269109.838:7309): avc: denied { sendto } for pid=31124 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645268759.369:6946): avc: denied { execute } for pid=29723 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269109.831:7292): avc: denied { execute } for pid=31121 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268759.369:6946): avc: denied { map } for pid=29723 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268759.382:6964): avc: denied { read open } for pid=29736 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268759.374:6955): avc: denied { read open } for pid=29729 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268759.376:6958): avc: denied { open } for pid=29729 comm="chrony-helper" path="/run/chrony-helper/lock" dev="tmpfs" ino=20942 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268759.373:6954): avc: denied { execute_no_trans } for pid=29727 comm="20-chrony-dhcp" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268759.370:6949): avc: denied { map } for pid=29723 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268759.384:6971): avc: denied { setattr } for pid=29736 comm="chronyc" name="chronyc.29736.sock" dev="tmpfs" ino=184832 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645269109.832:7295): avc: denied { map } for pid=31121 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268759.384:6970): avc: denied { write } for pid=29736 comm="chronyc" name="chrony" dev="tmpfs" ino=25616 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645269109.832:7293): avc: denied { read } for pid=31121 comm="11-dhclient" name="passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268759.384:6970): avc: denied { add_name } for pid=29736 comm="chronyc" name="chronyc.29736.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645269109.831:7292): avc: denied { execute_no_trans } for pid=31121 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268759.384:6973): avc: denied { sendto } for pid=26380 comm="chronyd" path="/run/chrony/chronyc.29736.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645269109.839:7311): avc: denied { unlink } for pid=31124 comm="chronyc" name="chronyc.31124.sock" dev="tmpfs" ino=202263 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645269109.838:7307): avc: denied { add_name } for pid=31124 comm="chronyc" name="chronyc.31124.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645269109.838:7309): avc: denied { write } for pid=31124 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=171123 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645269109.833:7298): avc: denied { getattr } for pid=31121 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11735 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268759.373:6954): avc: denied { map } for pid=29727 comm="rm" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268759.369:6946): avc: denied { execute } for pid=29723 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268759.384:6974): avc: denied { unlink } for pid=29736 comm="chronyc" name="chronyc.29736.sock" dev="tmpfs" ino=184832 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645269109.833:7299): avc: denied { execute } for pid=31121 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268759.384:6970): avc: denied { create } for pid=29736 comm="chronyc" name="chronyc.29736.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645269109.836:7304): avc: denied { execute_no_trans } for pid=31124 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269109.832:7296): avc: denied { write } for pid=31121 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645268759.371:6952): avc: denied { getattr } for pid=29723 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11735 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269109.833:7297): avc: denied { open } for pid=31121 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11735 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268759.384:6970): avc: denied { dac_override } for pid=29736 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645269109.831:7292): avc: denied { map } for pid=31121 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269109.832:7294): avc: denied { getattr } for pid=31121 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268759.371:6953): avc: denied { execute } for pid=29723 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268759.370:6947): avc: denied { read } for pid=29723 comm="11-dhclient" name="passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268759.382:6964): avc: denied { map } for pid=29736 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269109.832:7293): avc: denied { open } for pid=31121 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268759.371:6951): avc: denied { read } for pid=29723 comm="11-dhclient" name="passwd" dev="sda1" ino=11735 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268759.375:6956): avc: denied { getattr } for pid=29729 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268759.369:6946): avc: denied { execute_no_trans } for pid=29723 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268759.374:6955): avc: denied { execute_no_trans } for pid=29729 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268759.370:6948): avc: denied { getattr } for pid=29723 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268759.374:6955): avc: denied { execute } for pid=29729 comm="20-chrony-dhcp" name="chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268759.384:6969): avc: denied { dac_read_search } for pid=29736 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645269109.831:7292): avc: denied { execute } for pid=31121 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1'] [6695095] upgrade/octopus-x/stress-split/{0-distro/centos_8.stream_container_tools_crun 0-roles 1-start 2-first-half-tasks/rbd-import-export 3-stress-tasks/{radosbench rbd-cls rbd-import-export rbd_api readwrite snaps-few-objects} 4-second-half-tasks/rbd-import-export mon_election/connectivity} ----------------------------------------------------------------- time: 01:33:48 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695095/ log: http://qa-proxy.ceph.com/teuthology/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695095/ sentry: https://sentry.ceph.com/organizations/ceph/?query=8efd0af199924377a7960d5e1e8ffb08 No module named 'tasks.rados' [6695097] upgrade/cephfs/featureful_client/old_client/{bluestore-bitmap centos_latest clusters/1-mds-2-client-micro conf/{client mds mon osd} overrides/{multimds/yes pg-warn whitelist_health whitelist_wrongly_marked_down} tasks/{0-octopus 1-client 2-upgrade 3-compat_client/no}} ----------------------------------------------------------------- time: 00:26:20 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695097/ log: http://qa-proxy.ceph.com/teuthology/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695097/ SELinux denials found on ubuntu@smithi115.front.sepia.ceph.com: ['type=AVC msg=audit(1645268869.175:6961): avc: denied { read } for pid=29766 comm="chrony-helper" name="chrony-helper" dev="tmpfs" ino=24133 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645269487.758:7305): avc: denied { execute_no_trans } for pid=31400 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269487.764:7314): avc: denied { create } for pid=31403 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645268869.177:6965): avc: denied { map } for pid=29770 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268869.166:6951): avc: denied { open } for pid=29757 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11735 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268869.177:6965): avc: denied { execute } for pid=29770 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268869.179:6969): avc: denied { dac_read_search } for pid=29770 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645269487.759:7306): avc: denied { open } for pid=31400 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268869.172:6958): avc: denied { write } for pid=29763 comm="chrony-helper" name="lock" dev="tmpfs" ino=22377 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268869.170:6955): avc: denied { execute_no_trans } for pid=29763 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268869.178:6968): avc: denied { create } for pid=29770 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645268869.179:6970): avc: denied { dac_override } for pid=29770 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645268869.179:6974): avc: denied { remove_name } for pid=29770 comm="chronyc" name="chronyc.29770.sock" dev="tmpfs" ino=189542 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645269487.764:7317): avc: denied { setattr } for pid=31403 comm="chronyc" name="chronyc.31403.sock" dev="tmpfs" ino=202119 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645269487.764:7316): avc: denied { write } for pid=31403 comm="chronyc" name="chrony" dev="tmpfs" ino=17246 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645269487.764:7316): avc: denied { add_name } for pid=31403 comm="chronyc" name="chronyc.31403.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645269487.762:7313): avc: denied { execute_no_trans } for pid=31403 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269487.759:7311): avc: denied { getattr } for pid=31400 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11735 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269487.759:7307): avc: denied { getattr } for pid=31400 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269487.764:7316): avc: denied { dac_override } for pid=31403 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645269487.765:7320): avc: denied { remove_name } for pid=31403 comm="chronyc" name="chronyc.31403.sock" dev="tmpfs" ino=202119 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645268869.169:6954): avc: denied { execute_no_trans } for pid=29761 comm="20-chrony-dhcp" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268869.166:6950): avc: denied { write } for pid=29757 comm="11-dhclient" name="nss" dev="sda1" ino=2050 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645269487.759:7306): avc: denied { read } for pid=31400 comm="11-dhclient" name="passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268869.179:6972): avc: denied { sendto } for pid=29770 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645268869.179:6973): avc: denied { sendto } for pid=26409 comm="chronyd" path="/run/chrony/chronyc.29770.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645269487.759:7308): avc: denied { map } for pid=31400 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269487.758:7305): avc: denied { map } for pid=31400 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268869.172:6958): avc: denied { open } for pid=29763 comm="chrony-helper" path="/run/chrony-helper/lock" dev="tmpfs" ino=22377 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269487.765:7320): avc: denied { unlink } for pid=31403 comm="chronyc" name="chronyc.31403.sock" dev="tmpfs" ino=202119 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645268869.179:6972): avc: denied { write } for pid=29770 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=168312 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645268869.171:6956): avc: denied { getattr } for pid=29763 comm="chrony-helper" path="/usr/libexec/chrony- helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268869.167:6953): avc: denied { execute } for pid=29757 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269487.762:7313): avc: denied { execute } for pid=31403 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269487.762:7313): avc: denied { read open } for pid=31403 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269487.758:7305): avc: denied { execute } for pid=31400 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268869.166:6948): avc: denied { getattr } for pid=29757 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269487.758:7305): avc: denied { execute } for pid=31400 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268869.166:6951): avc: denied { read } for pid=29757 comm="11-dhclient" name="passwd" dev="sda1" ino=11735 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268869.166:6949): avc: denied { map } for pid=29757 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268869.169:6954): avc: denied { map } for pid=29761 comm="rm" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268869.179:6970): avc: denied { write } for pid=29770 comm="chronyc" name="chrony" dev="tmpfs" ino=17246 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645268869.179:6974): avc: denied { unlink } for pid=29770 comm="chronyc" name="chronyc.29770.sock" dev="tmpfs" ino=189542 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645268869.175:6962): avc: denied { read } for pid=29766 comm="chrony-helper" name="dhclient" dev="sda1" ino=1965 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:dhcpc_state_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645269487.764:7316): avc: denied { create } for pid=31403 comm="chronyc" name="chronyc.31403.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645269487.764:7319): avc: denied { sendto } for pid=26409 comm="chronyd" path="/run/chrony/chronyc.31403.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645268869.177:6965): avc: denied { read open } for pid=29770 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269487.764:7315): avc: denied { dac_read_search } for pid=31403 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645268869.165:6946): avc: denied { execute } for pid=29757 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268869.166:6947): avc: denied { open } for pid=29757 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269487.759:7312): avc: denied { execute } for pid=31400 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268869.172:6959): avc: denied { lock } for pid=29765 comm="flock" path="/run/chrony-helper/lock" dev="tmpfs" ino=22377 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268869.171:6957): avc: denied { ioctl } for pid=29763 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 ioctlcmd=0x5401 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269487.764:7318): avc: denied { write } for pid=31403 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=168312 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645268869.177:6965): avc: denied { execute_no_trans } for pid=29770 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268869.166:6950): avc: denied { connectto } for pid=29757 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645268869.177:6965): avc: denied { execute } for pid=29770 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269487.759:7309): avc: denied { write } for pid=31400 comm="11-dhclient" name="nss" dev="sda1" ino=2050 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645268869.170:6955): avc: denied { read open } for pid=29763 comm="20-chrony-dhcp" path="/usr/libexec/chrony- helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268869.179:6970): avc: denied { add_name } for pid=29770 comm="chronyc" name="chronyc.29770.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645268869.179:6971): avc: denied { setattr } for pid=29770 comm="chronyc" name="chronyc.29770.sock" dev="tmpfs" ino=189542 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645268869.166:6952): avc: denied { getattr } for pid=29757 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11735 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268869.170:6955): avc: denied { execute } for pid=29763 comm="20-chrony-dhcp" name="chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268869.166:6947): avc: denied { read } for pid=29757 comm="11-dhclient" name="passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268869.165:6946): avc: denied { map } for pid=29757 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269487.759:7309): avc: denied { connectto } for pid=31400 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645269487.764:7318): avc: denied { sendto } for pid=31403 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645269487.759:7310): avc: denied { open } for pid=31400 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11735 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268869.165:6946): avc: denied { execute } for pid=29757 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268869.179:6970): avc: denied { create } for pid=29770 comm="chronyc" name="chronyc.29770.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645269487.762:7313): avc: denied { map } for pid=31403 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645268869.165:6946): avc: denied { execute_no_trans } for pid=29757 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645269487.759:7310): avc: denied { read } for pid=31400 comm="11-dhclient" name="passwd" dev="sda1" ino=11735 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1'] [6695099] upgrade/octopus-x/rgw-multisite/{clusters frontend overrides realm tasks upgrade/secondary} ----------------------------------------------------------------- time: 03:08:11 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695099/ log: http://qa-proxy.ceph.com/teuthology/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695099/ sentry: https://sentry.ceph.com/organizations/ceph/?query=430428429f8541688505c49e4269ba38 rgw multisite test failures [6695101] upgrade/cephfs/mds_upgrade_sequence/{bluestore-bitmap centos_8.stream_container_tools conf/{client mds mon osd} overrides/{pg-warn syntax whitelist_health whitelist_wrongly_marked_down} roles tasks/{0-from/v16.2.4 1-volume/{0-create 1-ranks/1 2-allow_standby_replay/no 3-inline/no 4-verify} 2-client 3-upgrade-with-workload 4-verify}} ----------------------------------------------------------------- time: 00:31:41 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695101/ log: http://qa-proxy.ceph.com/teuthology/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695101/ SELinux denials found on ubuntu@smithi023.front.sepia.ceph.com: ['type=AVC msg=audit(1645275934.751:10559): avc: denied { create } for pid=150214 comm="chronyc" name="chronyc.150214.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645275061.990:7684): avc: denied { open } for pid=88962 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=40342 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275061.994:7692): avc: denied { execute_no_trans } for pid=88973 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275934.751:10558): avc: denied { dac_read_search } for pid=150214 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645275934.746:10553): avc: denied { getattr } for pid=150211 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=40344 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275934.744:10545): avc: denied { map } for pid=150211 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275934.746:10552): avc: denied { open } for pid=150211 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=40344 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275062.003:7702): avc: denied { write } for pid=88982 comm="chronyc" name="chrony" dev="tmpfs" ino=24594 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645275062.003:7702): avc: denied { dac_override } for pid=88982 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645275061.993:7691): avc: denied { execute_no_trans } for pid=88969 comm="20-chrony-dhcp" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275934.749:10556): avc: denied { execute_no_trans } for pid=150214 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275934.744:10545): avc: denied { execute } for pid=150211 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275061.990:7683): avc: denied { execute } for pid=88962 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275934.745:10551): avc: denied { write } for pid=150211 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645275061.991:7688): avc: denied { read } for pid=88962 comm="11-dhclient" name="passwd" dev="sda1" ino=40344 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275934.751:10559): avc: denied { dac_override } for pid=150214 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645275934.745:10551): avc: denied { connectto } for pid=150211 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645275062.003:7703): avc: denied { setattr } for pid=88982 comm="chronyc" name="chronyc.88982.sock" dev="tmpfs" ino=380793 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645275061.996:7695): avc: denied { open } for pid=88973 comm="chrony-helper" path="/run/chrony-helper/lock" dev="tmpfs" ino=29019 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275062.003:7701): avc: denied { dac_read_search } for pid=88982 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645275061.991:7687): avc: denied { write } for pid=88962 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645275934.751:10561): avc: denied { write } for pid=150214 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=168353 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645275934.751:10557): avc: denied { create } for pid=150214 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645275934.751:10562): avc: denied { sendto } for pid=26384 comm="chronyd" path="/run/chrony/chronyc.150214.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645275934.745:10548): avc: denied { open } for pid=150211 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=40342 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275061.999:7698): avc: denied { read } for pid=88979 comm="chrony-helper" name="dhclient" dev="sda1" ino=1965 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:dhcpc_state_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645275062.003:7702): avc: denied { create } for pid=88982 comm="chronyc" name="chronyc.88982.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645275062.001:7699): avc: denied { execute } for pid=88982 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275062.003:7700): avc: denied { create } for pid=88982 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645275934.751:10560): avc: denied { setattr } for pid=150214 comm="chronyc" name="chronyc.150214.sock" dev="tmpfs" ino=616680 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645275934.745:10549): avc: denied { getattr } for pid=150211 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=40342 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275934.744:10545): avc: denied { execute_no_trans } for pid=150211 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275934.751:10563): avc: denied { unlink } for pid=150214 comm="chronyc" name="chronyc.150214.sock" dev="tmpfs" ino=616680 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645275061.996:7695): avc: denied { write } for pid=88973 comm="chrony-helper" name="lock" dev="tmpfs" ino=29019 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275061.991:7688): avc: denied { open } for pid=88962 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=40344 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275061.993:7691): avc: denied { map } for pid=88969 comm="rm" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275062.003:7706): avc: denied { unlink } for pid=88982 comm="chronyc" name="chronyc.88982.sock" dev="tmpfs" ino=380793 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645275061.991:7690): avc: denied { execute } for pid=88962 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275061.990:7686): avc: denied { map } for pid=88962 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=40342 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275062.003:7704): avc: denied { write } for pid=88982 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=168353 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645275934.749:10556): avc: denied { execute } for pid=150214 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275061.997:7696): avc: denied { lock } for pid=88978 comm="flock" path="/run/chrony-helper/lock" dev="tmpfs" ino=29019 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275062.003:7705): avc: denied { sendto } for pid=26384 comm="chronyd" path="/run/chrony/chronyc.88982.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645275061.990:7685): avc: denied { getattr } for pid=88962 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=40342 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275062.001:7699): avc: denied { map } for pid=88982 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275061.991:7689): avc: denied { getattr } for pid=88962 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=40344 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275061.999:7697): avc: denied { read } for pid=88979 comm="chrony-helper" name="chrony-helper" dev="tmpfs" ino=26719 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645275062.003:7702): avc: denied { add_name } for pid=88982 comm="chronyc" name="chronyc.88982.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645275934.745:10550): avc: denied { map } for pid=150211 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=40342 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275061.995:7693): avc: denied { getattr } for pid=88973 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275062.001:7699): avc: denied { read open } for pid=88982 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275934.751:10559): avc: denied { write } for pid=150214 comm="chronyc" name="chrony" dev="tmpfs" ino=24594 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645275934.744:10545): avc: denied { execute } for pid=150211 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275934.749:10556): avc: denied { read open } for pid=150214 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275061.990:7684): avc: denied { read } for pid=88962 comm="11-dhclient" name="passwd" dev="sda1" ino=40342 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275934.746:10554): avc: denied { execute } for pid=150211 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275934.751:10561): avc: denied { sendto } for pid=150214 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645275061.994:7692): avc: denied { execute } for pid=88973 comm="20-chrony-dhcp" name="chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275934.749:10556): avc: denied { map } for pid=150214 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275062.003:7706): avc: denied { remove_name } for pid=88982 comm="chronyc" name="chronyc.88982.sock" dev="tmpfs" ino=380793 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645275062.001:7699): avc: denied { execute_no_trans } for pid=88982 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275061.990:7683): avc: denied { map } for pid=88962 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275934.751:10563): avc: denied { remove_name } for pid=150214 comm="chronyc" name="chronyc.150214.sock" dev="tmpfs" ino=616680 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645275061.995:7694): avc: denied { ioctl } for pid=88973 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 ioctlcmd=0x5401 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275062.003:7704): avc: denied { sendto } for pid=88982 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645275061.990:7683): avc: denied { execute_no_trans } for pid=88962 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275061.994:7692): avc: denied { read open } for pid=88973 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275934.745:10548): avc: denied { read } for pid=150211 comm="11-dhclient" name="passwd" dev="sda1" ino=40342 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275934.746:10552): avc: denied { read } for pid=150211 comm="11-dhclient" name="passwd" dev="sda1" ino=40344 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275061.990:7683): avc: denied { execute } for pid=88962 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275061.991:7687): avc: denied { connectto } for pid=88962 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645275934.751:10559): avc: denied { add_name } for pid=150214 comm="chronyc" name="chronyc.150214.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1'] [6695102] upgrade/octopus-x/stress-split-no-cephadm/{0-cluster/{openstack start} 1-ceph-install/octopus 1.1-pg-log-overrides/normal_pg_log 2-partial-upgrade/firsthalf 3-thrash/default 4-workload/{radosbench rbd-cls rbd-import-export rbd_api readwrite rgw_ragweed_prepare snaps-few-objects} 5-finish-upgrade 6-quincy 8-final-workload/{rbd-python snaps-many-objects} mon_election/connectivity objectstore/bluestore-hybrid thrashosds-health ubuntu_20.04} ----------------------------------------------------------------- time: 03:16:26 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695102/ log: http://qa-proxy.ceph.com/teuthology/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695102/ sentry: https://sentry.ceph.com/organizations/ceph/?query=7b5959d9d90846c7bb7c181abf965e6d Command failed on smithi171 with status 2: 'cd /home/ubuntu/cephtest/ragweed && ./bootstrap' [6695105] upgrade/cephfs/featureful_client/upgraded_client/{bluestore-bitmap centos_latest clusters/1-mds-2-client-micro conf/{client mds mon osd} overrides/{multimds/yes pg-warn whitelist_health whitelist_wrongly_marked_down} tasks/{0-octopus 1-client 2-upgrade 3-client-upgrade 4-compat_client 5-client-sanity}} ----------------------------------------------------------------- time: 00:17:46 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695105/ log: http://qa-proxy.ceph.com/teuthology/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695105/ SELinux denials found on ubuntu@smithi156.front.sepia.ceph.com: ['type=AVC msg=audit(1645274955.070:6945): avc: denied { execute_no_trans } for pid=29708 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275349.169:7746): avc: denied { map } for pid=32851 comm="20-chrony-onoff" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275184.749:7367): avc: denied { sendto } for pid=31363 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645275184.744:7355): avc: denied { getattr } for pid=31360 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645274955.076:6957): avc: denied { open } for pid=29714 comm="chrony-helper" path="/run/chrony-helper/lock" dev="tmpfs" ino=26668 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275185.386:7424): avc: denied { write } for pid=31489 comm="chrony-helper" name="lock" dev="tmpfs" ino=26668 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275349.166:7739): avc: denied { read } for pid=32849 comm="11-dhclient" name="passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275185.383:7420): avc: denied { map } for pid=31486 comm="rm" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275185.384:7423): avc: denied { ioctl } for pid=31489 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 ioctlcmd=0x5401 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645274955.070:6947): avc: denied { getattr } for pid=29708 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645274955.073:6953): avc: denied { execute_no_trans } for pid=29712 comm="20-chrony-dhcp" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275349.172:7750): avc: denied { dac_override } for pid=32852 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645274955.083:6964): avc: denied { dac_read_search } for pid=29720 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645275184.749:7366): avc: denied { setattr } for pid=31363 comm="chronyc" name="chronyc.31363.sock" dev="tmpfs" ino=202475 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645274955.071:6950): avc: denied { read } for pid=29708 comm="11-dhclient" name="passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275349.166:7735): avc: denied { open } for pid=32849 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645274955.083:6969): avc: denied { remove_name } for pid=29720 comm="chronyc" name="chronyc.29720.sock" dev="tmpfs" ino=187189 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645275184.750:7369): avc: denied { remove_name } for pid=31363 comm="chronyc" name="chronyc.31363.sock" dev="tmpfs" ino=202475 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645274955.081:6962): avc: denied { execute } for pid=29720 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645274955.071:6951): avc: denied { getattr } for pid=29708 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645274955.070:6948): avc: denied { map } for pid=29708 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275184.743:7353): avc: denied { execute_no_trans } for pid=31360 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275184.743:7354): avc: denied { read } for pid=31360 comm="11-dhclient" name="passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275349.165:7734): avc: denied { execute } for pid=32849 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645274955.074:6954): avc: denied { execute_no_trans } for pid=29714 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645274955.070:6949): avc: denied { write } for pid=29708 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645275349.167:7741): avc: denied { execute } for pid=32849 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275184.744:7357): avc: denied { connectto } for pid=31360 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645275349.166:7738): avc: denied { connectto } for pid=32849 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645274955.075:6956): avc: denied { ioctl } for pid=29714 comm="chrony-helper" path="/usr/libexec/chrony- helper" dev="sda1" ino=20468 ioctlcmd=0x5401 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275184.749:7368): avc: denied { sendto } for pid=26364 comm="chronyd" path="/run/chrony/chronyc.31363.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645275184.747:7362): avc: denied { execute } for pid=31363 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275184.747:7362): avc: denied { read open } for pid=31363 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275185.384:7421): avc: denied { read open } for pid=31489 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275349.166:7738): avc: denied { write } for pid=32849 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645275349.170:7747): avc: denied { execute_no_trans } for pid=32852 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645274955.082:6963): avc: denied { create } for pid=29720 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645275184.745:7361): avc: denied { write } for pid=31361 comm="20-chrony-dhcp" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645275349.169:7745): avc: denied { getattr } for pid=32851 comm="20-chrony-onoff" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275349.166:7739): avc: denied { open } for pid=32849 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275185.386:7424): avc: denied { open } for pid=31489 comm="chrony-helper" path="/run/chrony-helper/lock" dev="tmpfs" ino=26668 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275349.172:7754): avc: denied { unlink } for pid=32852 comm="chronyc" name="chronyc.32852.sock" dev="tmpfs" ino=220306 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645275184.743:7354): avc: denied { open } for pid=31360 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275184.749:7367): avc: denied { write } for pid=31363 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=166573 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645274955.070:6945): avc: denied { execute } for pid=29708 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275184.744:7360): avc: denied { execute } for pid=31360 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275184.744:7358): avc: denied { open } for pid=31360 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275349.166:7737): avc: denied { map } for pid=32849 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275349.170:7747): avc: denied { map } for pid=32852 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275184.743:7353): avc: denied { execute } for pid=31360 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645274955.071:6950): avc: denied { open } for pid=29708 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645274955.079:6959): avc: denied { read } for pid=29717 comm="chrony-helper" name="chrony-helper" dev="tmpfs" ino=24422 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645274955.076:6957): avc: denied { write } for pid=29714 comm="chrony-helper" name="lock" dev="tmpfs" ino=26668 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645274955.070:6945): avc: denied { map } for pid=29708 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275349.165:7734): avc: denied { execute_no_trans } for pid=32849 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645274955.077:6958): avc: denied { lock } for pid=29716 comm="flock" path="/run/chrony-helper/lock" dev="tmpfs" ino=26668 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275349.172:7751): avc: denied { setattr } for pid=32852 comm="chronyc" name="chronyc.32852.sock" dev="tmpfs" ino=220306 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645274955.083:6965): avc: denied { write } for pid=29720 comm="chronyc" name="chrony" dev="tmpfs" ino=24007 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645275349.172:7750): avc: denied { write } for pid=32852 comm="chronyc" name="chrony" dev="tmpfs" ino=24007 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645275184.749:7365): avc: denied { create } for pid=31363 comm="chronyc" name="chronyc.31363.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645275185.389:7426): avc: denied { read } for pid=31496 comm="chrony-helper" name="chrony-helper" dev="tmpfs" ino=24422 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645274955.083:6965): avc: denied { create } for pid=29720 comm="chronyc" name="chronyc.29720.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645274955.083:6969): avc: denied { unlink } for pid=29720 comm="chronyc" name="chronyc.29720.sock" dev="tmpfs" ino=187189 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645274955.074:6954): avc: denied { read open } for pid=29714 comm="20-chrony-dhcp" path="/usr/libexec/chrony- helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275349.170:7747): avc: denied { execute } for pid=32852 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275184.749:7364): avc: denied { dac_read_search } for pid=31363 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645274955.081:6962): avc: denied { map } for pid=29720 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275184.749:7365): avc: denied { write } for pid=31363 comm="chronyc" name="chrony" dev="tmpfs" ino=24007 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645274955.075:6955): avc: denied { getattr } for pid=29714 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275184.749:7365): avc: denied { dac_override } for pid=31363 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645274955.083:6968): avc: denied { sendto } for pid=26364 comm="chronyd" path="/run/chrony/chronyc.29720.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645275184.749:7365): avc: denied { add_name } for pid=31363 comm="chronyc" name="chronyc.31363.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645274955.079:6960): avc: denied { read } for pid=29717 comm="chrony-helper" name="dhclient" dev="sda1" ino=1965 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:dhcpc_state_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645275185.383:7420): avc: denied { execute_no_trans } for pid=31486 comm="20-chrony-dhcp" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275185.380:7419): avc: denied { execute_no_trans } for pid=31479 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645274955.083:6966): avc: denied { setattr } for pid=29720 comm="chronyc" name="chronyc.29720.sock" dev="tmpfs" ino=187189 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645275349.172:7754): avc: denied { remove_name } for pid=32852 comm="chronyc" name="chronyc.32852.sock" dev="tmpfs" ino=220306 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645275185.389:7427): avc: denied { read } for pid=31496 comm="chrony-helper" name="dhclient" dev="sda1" ino=1965 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:dhcpc_state_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645274955.083:6967): avc: denied { write } for pid=29720 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=166573 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645274955.070:6945): avc: denied { execute } for pid=29708 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645274955.070:6946): avc: denied { open } for pid=29708 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275349.170:7747): avc: denied { read open } for pid=32852 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275349.165:7734): avc: denied { map } for pid=32849 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275349.166:7740): avc: denied { getattr } for pid=32849 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275184.749:7363): avc: denied { create } for pid=31363 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645275185.386:7425): avc: denied { lock } for pid=31494 comm="flock" path="/run/chrony-helper/lock" dev="tmpfs" ino=26668 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275349.172:7749): avc: denied { dac_read_search } for pid=32852 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645275349.166:7735): avc: denied { read } for pid=32849 comm="11-dhclient" name="passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645274955.070:6949): avc: denied { connectto } for pid=29708 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645275184.747:7362): avc: denied { map } for pid=31363 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645274955.083:6967): avc: denied { sendto } for pid=29720 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645275185.380:7419): avc: denied { execute } for pid=31479 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645274955.083:6965): avc: denied { add_name } for pid=29720 comm="chronyc" name="chronyc.29720.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645275184.743:7353): avc: denied { map } for pid=31360 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275184.744:7357): avc: denied { write } for pid=31360 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645275349.172:7753): avc: denied { sendto } for pid=26364 comm="chronyd" path="/run/chrony/chronyc.32852.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645275184.744:7358): avc: denied { read } for pid=31360 comm="11-dhclient" name="passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275184.747:7362): avc: denied { execute_no_trans } for pid=31363 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275184.750:7369): avc: denied { unlink } for pid=31363 comm="chronyc" name="chronyc.31363.sock" dev="tmpfs" ino=202475 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645275349.172:7750): avc: denied { create } for pid=32852 comm="chronyc" name="chronyc.32852.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645274955.074:6954): avc: denied { execute } for pid=29714 comm="20-chrony-dhcp" name="chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645274955.070:6946): avc: denied { read } for pid=29708 comm="11-dhclient" name="passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645274955.073:6953): avc: denied { map } for pid=29712 comm="rm" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275185.384:7421): avc: denied { execute_no_trans } for pid=31489 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275349.166:7736): avc: denied { getattr } for pid=32849 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645274955.081:6962): avc: denied { read open } for pid=29720 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275349.172:7752): avc: denied { sendto } for pid=32852 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645275185.392:7428): avc: denied { create } for pid=31505 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645275349.172:7750): avc: denied { add_name } for pid=32852 comm="chronyc" name="chronyc.32852.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645275349.165:7734): avc: denied { execute } for pid=32849 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275185.384:7421): avc: denied { execute } for pid=31489 comm="20-chrony-dhcp" name="chrony- helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275185.384:7422): avc: denied { getattr } for pid=31489 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645274955.081:6962): avc: denied { execute_no_trans } for pid=29720 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275349.169:7744): avc: denied { open } for pid=32851 comm="20-chrony-onoff" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275349.171:7748): avc: denied { create } for pid=32852 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645275184.743:7353): avc: denied { execute } for pid=31360 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275349.172:7752): avc: denied { write } for pid=32852 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=166573 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645275349.169:7744): avc: denied { read } for pid=32851 comm="20-chrony-onoff" name="passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275184.744:7356): avc: denied { map } for pid=31360 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275184.744:7359): avc: denied { getattr } for pid=31360 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645274955.071:6952): avc: denied { execute } for pid=29708 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645274955.083:6965): avc: denied { dac_override } for pid=29720 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1'] [6695110] upgrade/cephfs/mds_upgrade_sequence/{bluestore-bitmap centos_8.stream_container_tools conf/{client mds mon osd} overrides/{pg-warn syntax whitelist_health whitelist_wrongly_marked_down} roles tasks/{0-from/pacific 1-volume/{0-create 1-ranks/2 2-allow_standby_replay/yes 3-inline/yes 4-verify} 2-client 3-upgrade-with-workload 4-verify}} ----------------------------------------------------------------- time: 00:27:43 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695110/ log: http://qa-proxy.ceph.com/teuthology/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695110/ SELinux denials found on ubuntu@smithi061.front.sepia.ceph.com: ['type=AVC msg=audit(1645275460.284:7671): avc: denied { create } for pid=89150 comm="chronyc" name="chronyc.89150.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645276176.225:10616): avc: denied { execute } for pid=147536 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275460.284:7670): avc: denied { dac_read_search } for pid=89150 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645276176.226:10621): avc: denied { open } for pid=147536 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=39864 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645276176.231:10628): avc: denied { setattr } for pid=147539 comm="chronyc" name="chronyc.147539.sock" dev="tmpfs" ino=604858 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645276176.226:10621): avc: denied { read } for pid=147536 comm="11-dhclient" name="passwd" dev="sda1" ino=39864 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275460.284:7673): avc: denied { write } for pid=89150 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=167209 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645275460.282:7666): avc: denied { execute } for pid=89150 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275460.284:7676): avc: denied { remove_name } for pid=89150 comm="chronyc" name="chronyc.89150.sock" dev="tmpfs" ino=382324 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645275460.271:7656): avc: denied { execute } for pid=89129 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275460.280:7665): avc: denied { read } for pid=89146 comm="chrony-helper" name="dhclient" dev="sda1" ino=1965 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:dhcpc_state_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645275460.270:7651): avc: denied { getattr } for pid=89129 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=39862 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275460.271:7654): avc: denied { open } for pid=89129 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=39864 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275460.275:7659): avc: denied { execute_no_trans } for pid=89143 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275460.271:7653): avc: denied { connectto } for pid=89129 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645276176.232:10631): avc: denied { unlink } for pid=147539 comm="chronyc" name="chronyc.147539.sock" dev="tmpfs" ino=604858 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645275460.273:7658): avc: denied { map } for pid=89139 comm="rm" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275460.271:7654): avc: denied { read } for pid=89129 comm="11-dhclient" name="passwd" dev="sda1" ino=39864 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645276176.226:10619): avc: denied { map } for pid=147536 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=39862 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275460.277:7662): avc: denied { write } for pid=89143 comm="chrony-helper" name="lock" dev="tmpfs" ino=25293 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275460.284:7673): avc: denied { sendto } for pid=89150 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645275460.271:7655): avc: denied { getattr } for pid=89129 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=39864 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275460.280:7664): avc: denied { read } for pid=89146 comm="chrony-helper" name="chrony-helper" dev="tmpfs" ino=21443 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645276176.232:10629): avc: denied { sendto } for pid=147539 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645276176.226:10620): avc: denied { write } for pid=147536 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645275460.272:7657): avc: denied { execute_no_trans } for pid=89134 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/20-chrony-dhcp" dev="sda1" ino=199 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645276176.226:10617): avc: denied { read } for pid=147536 comm="11-dhclient" name="passwd" dev="sda1" ino=39862 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275460.277:7662): avc: denied { open } for pid=89143 comm="chrony-helper" path="/run/chrony-helper/lock" dev="tmpfs" ino=25293 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275460.282:7666): avc: denied { map } for pid=89150 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275460.270:7649): avc: denied { execute } for pid=89129 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645276176.231:10624): avc: denied { execute } for pid=147539 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275460.278:7663): avc: denied { lock } for pid=89145 comm="flock" path="/run/chrony-helper/lock" dev="tmpfs" ino=25293 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645276176.231:10625): avc: denied { create } for pid=147539 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645275460.273:7658): avc: denied { execute_no_trans } for pid=89139 comm="20-chrony-dhcp" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645276176.232:10631): avc: denied { remove_name } for pid=147539 comm="chronyc" name="chronyc.147539.sock" dev="tmpfs" ino=604858 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645276176.232:10630): avc: denied { sendto } for pid=26386 comm="chronyd" path="/run/chrony/chronyc.147539.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645276176.226:10620): avc: denied { connectto } for pid=147536 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645275460.270:7649): avc: denied { execute_no_trans } for pid=89129 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275460.284:7675): avc: denied { sendto } for pid=26386 comm="chronyd" path="/run/chrony/chronyc.89150.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645276176.225:10616): avc: denied { execute } for pid=147536 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275460.284:7676): avc: denied { unlink } for pid=89150 comm="chronyc" name="chronyc.89150.sock" dev="tmpfs" ino=382324 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645276176.225:10616): avc: denied { map } for pid=147536 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275460.284:7669): avc: denied { create } for pid=89150 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645275460.282:7666): avc: denied { execute_no_trans } for pid=89150 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275460.275:7659): avc: denied { execute } for pid=89143 comm="20-chrony-dhcp" name="chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275460.270:7650): avc: denied { read } for pid=89129 comm="11-dhclient" name="passwd" dev="sda1" ino=39862 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275460.282:7666): avc: denied { read open } for pid=89150 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275460.284:7672): avc: denied { setattr } for pid=89150 comm="chronyc" name="chronyc.89150.sock" dev="tmpfs" ino=382324 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645276176.232:10629): avc: denied { write } for pid=147539 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=167209 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645275460.271:7653): avc: denied { write } for pid=89129 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645276176.231:10624): avc: denied { execute_no_trans } for pid=147539 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645276176.231:10626): avc: denied { dac_read_search } for pid=147539 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645275460.270:7649): avc: denied { map } for pid=89129 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645276176.226:10617): avc: denied { open } for pid=147536 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=39862 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645276176.231:10627): avc: denied { create } for pid=147539 comm="chronyc" name="chronyc.147539.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645275460.275:7659): avc: denied { read open } for pid=89143 comm="20-chrony-dhcp" path="/usr/libexec/chrony- helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275460.275:7660): avc: denied { getattr } for pid=89143 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645276176.231:10627): avc: denied { write } for pid=147539 comm="chronyc" name="chrony" dev="tmpfs" ino=17302 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645275460.284:7671): avc: denied { dac_override } for pid=89150 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645275460.284:7671): avc: denied { write } for pid=89150 comm="chronyc" name="chrony" dev="tmpfs" ino=17302 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645276176.231:10627): avc: denied { add_name } for pid=147539 comm="chronyc" name="chronyc.147539.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645276176.226:10623): avc: denied { execute } for pid=147536 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275460.275:7661): avc: denied { ioctl } for pid=89143 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 ioctlcmd=0x5401 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645276176.231:10624): avc: denied { map } for pid=147539 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645276176.226:10618): avc: denied { getattr } for pid=147536 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=39862 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275460.270:7649): avc: denied { execute } for pid=89129 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645276176.225:10616): avc: denied { execute_no_trans } for pid=147536 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275460.272:7657): avc: denied { execute } for pid=89134 comm="nm-dispatcher" name="20-chrony- dhcp" dev="sda1" ino=199 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645276176.231:10627): avc: denied { dac_override } for pid=147539 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645276176.226:10622): avc: denied { getattr } for pid=147536 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=39864 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275460.270:7652): avc: denied { map } for pid=89129 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=39862 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645276176.231:10624): avc: denied { read open } for pid=147539 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275460.284:7671): avc: denied { add_name } for pid=89150 comm="chronyc" name="chronyc.89150.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645275460.270:7650): avc: denied { open } for pid=89129 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=39862 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1'] [6695112] upgrade/octopus-x/stress-split-no-cephadm/{0-cluster/{openstack start} 1-ceph-install/octopus 1.1-pg-log-overrides/short_pg_log 2-partial-upgrade/firsthalf 3-thrash/default 4-workload/{radosbench rbd-cls rbd-import-export rbd_api readwrite rgw_ragweed_prepare snaps-few-objects} 5-finish-upgrade 6-quincy 8-final-workload/{rbd-python snaps-many-objects} mon_election/classic objectstore/filestore-xfs thrashosds-health ubuntu_20.04} ----------------------------------------------------------------- time: 01:52:05 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695112/ log: http://qa-proxy.ceph.com/teuthology/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695112/ sentry: https://sentry.ceph.com/organizations/ceph/?query=c441630ed3dc499e9d66971fa72c369c Command failed on smithi195 with status 2: 'cd /home/ubuntu/cephtest/ragweed && ./bootstrap' [6695113] upgrade/cephfs/featureful_client/old_client/{bluestore-bitmap centos_latest clusters/1-mds-2-client-micro conf/{client mds mon osd} overrides/{multimds/no pg-warn whitelist_health whitelist_wrongly_marked_down} tasks/{0-octopus 1-client 2-upgrade 3-compat_client/pacific}} ----------------------------------------------------------------- time: 00:20:02 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695113/ log: http://qa-proxy.ceph.com/teuthology/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695113/ SELinux denials found on ubuntu@smithi135.front.sepia.ceph.com: ['type=AVC msg=audit(1645275474.080:6973): avc: denied { remove_name } for pid=29773 comm="chronyc" name="chronyc.29773.sock" dev="tmpfs" ino=185125 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645275845.799:7314): avc: denied { read } for pid=31215 comm="11-dhclient" name="passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275474.076:6961): avc: denied { read } for pid=29769 comm="chrony-helper" name="chrony-helper" dev="tmpfs" ino=27451 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645275845.802:7321): avc: denied { map } for pid=31218 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275845.799:7318): avc: denied { read } for pid=31215 comm="11-dhclient" name="passwd" dev="sda1" ino=11735 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275845.804:7324): avc: denied { create } for pid=31218 comm="chronyc" name="chronyc.31218.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645275474.079:6969): avc: denied { dac_override } for pid=29773 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645275474.079:6971): avc: denied { write } for pid=29773 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=168471 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645275845.805:7328): avc: denied { unlink } for pid=31218 comm="chronyc" name="chronyc.31218.sock" dev="tmpfs" ino=200930 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645275474.071:6955): avc: denied { execute_no_trans } for pid=29766 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275474.066:6947): avc: denied { read } for pid=29760 comm="11-dhclient" name="passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275845.799:7315): avc: denied { getattr } for pid=31215 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275474.077:6963): avc: denied { execute_no_trans } for pid=29773 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275474.077:6963): avc: denied { read open } for pid=29773 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275845.799:7320): avc: denied { execute } for pid=31215 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275845.805:7328): avc: denied { remove_name } for pid=31218 comm="chronyc" name="chronyc.31218.sock" dev="tmpfs" ino=200930 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645275845.804:7326): avc: denied { write } for pid=31218 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=168471 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645275474.073:6958): avc: denied { write } for pid=29766 comm="chrony-helper" name="lock" dev="tmpfs" ino=28103 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275474.065:6946): avc: denied { execute } for pid=29760 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275845.798:7313): avc: denied { execute } for pid=31215 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275474.070:6954): avc: denied { map } for pid=29764 comm="rm" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275845.799:7317): avc: denied { write } for pid=31215 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645275845.799:7314): avc: denied { open } for pid=31215 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275845.799:7317): avc: denied { connectto } for pid=31215 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645275845.798:7313): avc: denied { execute_no_trans } for pid=31215 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275845.802:7321): avc: denied { execute_no_trans } for pid=31218 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275845.804:7324): avc: denied { write } for pid=31218 comm="chronyc" name="chrony" dev="tmpfs" ino=16212 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645275474.079:6967): avc: denied { create } for pid=29773 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645275474.072:6957): avc: denied { ioctl } for pid=29766 comm="chrony-helper" path="/usr/libexec/chrony- helper" dev="sda1" ino=20468 ioctlcmd=0x5401 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275474.066:6949): avc: denied { map } for pid=29760 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275474.079:6969): avc: denied { add_name } for pid=29773 comm="chronyc" name="chronyc.29773.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645275845.802:7321): avc: denied { read open } for pid=31218 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275474.079:6969): avc: denied { write } for pid=29773 comm="chronyc" name="chrony" dev="tmpfs" ino=16212 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645275474.077:6963): avc: denied { execute } for pid=29773 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275474.066:6948): avc: denied { getattr } for pid=29760 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275845.798:7313): avc: denied { map } for pid=31215 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275845.804:7322): avc: denied { create } for pid=31218 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645275474.065:6946): avc: denied { map } for pid=29760 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275474.073:6958): avc: denied { open } for pid=29766 comm="chrony-helper" path="/run/chrony-helper/lock" dev="tmpfs" ino=28103 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275474.079:6971): avc: denied { sendto } for pid=29773 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645275474.065:6946): avc: denied { execute } for pid=29760 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275474.079:6969): avc: denied { create } for pid=29773 comm="chronyc" name="chronyc.29773.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645275845.799:7319): avc: denied { getattr } for pid=31215 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11735 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275845.798:7313): avc: denied { execute } for pid=31215 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275474.079:6968): avc: denied { dac_read_search } for pid=29773 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645275845.805:7327): avc: denied { sendto } for pid=26417 comm="chronyd" path="/run/chrony/chronyc.31218.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645275474.079:6970): avc: denied { setattr } for pid=29773 comm="chronyc" name="chronyc.29773.sock" dev="tmpfs" ino=185125 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645275845.802:7321): avc: denied { execute } for pid=31218 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275474.067:6953): avc: denied { execute } for pid=29760 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275845.799:7316): avc: denied { map } for pid=31215 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275845.804:7326): avc: denied { sendto } for pid=31218 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645275474.066:6950): avc: denied { write } for pid=29760 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645275474.073:6959): avc: denied { lock } for pid=29768 comm="flock" path="/run/chrony-helper/lock" dev="tmpfs" ino=28103 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275845.804:7324): avc: denied { dac_override } for pid=31218 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645275474.080:6973): avc: denied { unlink } for pid=29773 comm="chronyc" name="chronyc.29773.sock" dev="tmpfs" ino=185125 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645275474.070:6954): avc: denied { execute_no_trans } for pid=29764 comm="20-chrony-dhcp" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275474.066:6947): avc: denied { open } for pid=29760 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275474.080:6972): avc: denied { sendto } for pid=26417 comm="chronyd" path="/run/chrony/chronyc.29773.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645275474.066:6952): avc: denied { getattr } for pid=29760 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11735 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275474.066:6950): avc: denied { connectto } for pid=29760 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645275474.077:6963): avc: denied { map } for pid=29773 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275474.076:6962): avc: denied { read } for pid=29769 comm="chrony-helper" name="dhclient" dev="sda1" ino=1965 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:dhcpc_state_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645275845.804:7323): avc: denied { dac_read_search } for pid=31218 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645275474.066:6951): avc: denied { read } for pid=29760 comm="11-dhclient" name="passwd" dev="sda1" ino=11735 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275474.066:6951): avc: denied { open } for pid=29760 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11735 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275474.065:6946): avc: denied { execute_no_trans } for pid=29760 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275845.804:7324): avc: denied { add_name } for pid=31218 comm="chronyc" name="chronyc.31218.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645275845.804:7325): avc: denied { setattr } for pid=31218 comm="chronyc" name="chronyc.31218.sock" dev="tmpfs" ino=200930 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645275474.071:6955): avc: denied { read open } for pid=29766 comm="20-chrony-dhcp" path="/usr/libexec/chrony- helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275474.071:6955): avc: denied { execute } for pid=29766 comm="20-chrony-dhcp" name="chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275474.072:6956): avc: denied { getattr } for pid=29766 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275845.799:7318): avc: denied { open } for pid=31215 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11735 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1'] [6695117] upgrade/cephfs/mds_upgrade_sequence/{bluestore-bitmap centos_8.stream_container_tools conf/{client mds mon osd} overrides/{pg-warn syntax whitelist_health whitelist_wrongly_marked_down} roles tasks/{0-from/v16.2.4 1-volume/{0-create 1-ranks/1 2-allow_standby_replay/yes 3-inline/no 4-verify} 2-client 3-upgrade-with-workload 4-verify}} ----------------------------------------------------------------- time: 00:30:37 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695117/ log: http://qa-proxy.ceph.com/teuthology/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695117/ SELinux denials found on ubuntu@smithi033.front.sepia.ceph.com: ['type=AVC msg=audit(1645275884.784:7698): avc: denied { create } for pid=88971 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645275884.774:7687): avc: denied { execute_no_trans } for pid=88959 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645276699.026:10661): avc: denied { connectto } for pid=150482 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645276699.029:10665): avc: denied { execute } for pid=150485 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275884.771:7679): avc: denied { open } for pid=88949 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=40342 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275884.784:7700): avc: denied { dac_override } for pid=88971 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645276699.025:10657): avc: denied { execute } for pid=150482 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645276699.026:10662): avc: denied { read } for pid=150482 comm="11-dhclient" name="passwd" dev="sda1" ino=40344 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275884.771:7682): avc: denied { write } for pid=88949 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645275884.781:7694): avc: denied { open } for pid=88970 comm="20-chrony-onoff" path="/var/lib/sss/mc/passwd" dev="sda1" ino=40342 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645276699.026:10664): avc: denied { execute } for pid=150482 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275884.777:7690): avc: denied { write } for pid=88959 comm="chrony-helper" name="lock" dev="tmpfs" ino=22021 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645276699.031:10666): avc: denied { create } for pid=150485 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645276699.026:10658): avc: denied { open } for pid=150482 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=40342 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645276699.031:10668): avc: denied { create } for pid=150485 comm="chronyc" name="chronyc.150485.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645276699.031:10669): avc: denied { setattr } for pid=150485 comm="chronyc" name="chronyc.150485.sock" dev="tmpfs" ino=611130 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645276699.025:10657): avc: denied { execute_no_trans } for pid=150482 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275884.784:7703): avc: denied { sendto } for pid=26373 comm="chronyd" path="/run/chrony/chronyc.88971.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645275884.782:7697): avc: denied { map } for pid=88971 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645276699.025:10657): avc: denied { map } for pid=150482 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275884.771:7683): avc: denied { open } for pid=88949 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=40344 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275884.770:7678): avc: denied { execute_no_trans } for pid=88949 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275884.771:7683): avc: denied { read } for pid=88949 comm="11-dhclient" name="passwd" dev="sda1" ino=40344 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275884.775:7689): avc: denied { ioctl } for pid=88959 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 ioctlcmd=0x5401 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645276699.026:10662): avc: denied { open } for pid=150482 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=40344 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645276699.026:10661): avc: denied { write } for pid=150482 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645276699.031:10667): avc: denied { dac_read_search } for pid=150485 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645275884.770:7678): avc: denied { execute } for pid=88949 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275884.773:7686): avc: denied { execute_no_trans } for pid=88957 comm="20-chrony-dhcp" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275884.781:7696): avc: denied { map } for pid=88970 comm="20-chrony-onoff" path="/var/lib/sss/mc/passwd" dev="sda1" ino=40342 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275884.782:7697): avc: denied { execute_no_trans } for pid=88971 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645276699.031:10670): avc: denied { write } for pid=150485 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=165610 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645276699.026:10658): avc: denied { read } for pid=150482 comm="11-dhclient" name="passwd" dev="sda1" ino=40342 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645276699.029:10665): avc: denied { map } for pid=150485 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645276699.031:10668): avc: denied { add_name } for pid=150485 comm="chronyc" name="chronyc.150485.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645275884.784:7702): avc: denied { write } for pid=88971 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=165610 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645275884.784:7701): avc: denied { setattr } for pid=88971 comm="chronyc" name="chronyc.88971.sock" dev="tmpfs" ino=386276 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645275884.771:7684): avc: denied { getattr } for pid=88949 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=40344 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275884.771:7680): avc: denied { getattr } for pid=88949 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=40342 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645276699.031:10668): avc: denied { dac_override } for pid=150485 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645275884.784:7700): avc: denied { write } for pid=88971 comm="chronyc" name="chrony" dev="tmpfs" ino=2656 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645276699.025:10657): avc: denied { execute } for pid=150482 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275884.774:7687): avc: denied { execute } for pid=88959 comm="20-chrony-dhcp" name="chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275884.770:7678): avc: denied { execute } for pid=88949 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275884.780:7692): avc: denied { read } for pid=88968 comm="chrony-helper" name="chrony-helper" dev="tmpfs" ino=30111 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645275884.782:7697): avc: denied { read open } for pid=88971 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275884.777:7691): avc: denied { lock } for pid=88967 comm="flock" path="/run/chrony-helper/lock" dev="tmpfs" ino=22021 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275884.781:7694): avc: denied { read } for pid=88970 comm="20-chrony-onoff" name="passwd" dev="sda1" ino=40342 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275884.784:7704): avc: denied { unlink } for pid=88971 comm="chronyc" name="chronyc.88971.sock" dev="tmpfs" ino=386276 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645275884.771:7682): avc: denied { connectto } for pid=88949 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645275884.784:7699): avc: denied { dac_read_search } for pid=88971 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645275884.780:7693): avc: denied { read } for pid=88968 comm="chrony-helper" name="dhclient" dev="sda1" ino=1965 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:dhcpc_state_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645276699.029:10665): avc: denied { execute_no_trans } for pid=150485 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645276699.031:10668): avc: denied { write } for pid=150485 comm="chronyc" name="chrony" dev="tmpfs" ino=2656 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645275884.770:7678): avc: denied { map } for pid=88949 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645276699.026:10660): avc: denied { map } for pid=150482 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=40342 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645276699.031:10671): avc: denied { sendto } for pid=26373 comm="chronyd" path="/run/chrony/chronyc.150485.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645276699.031:10672): avc: denied { remove_name } for pid=150485 comm="chronyc" name="chronyc.150485.sock" dev="tmpfs" ino=611130 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645275884.782:7697): avc: denied { execute } for pid=88971 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275884.771:7681): avc: denied { map } for pid=88949 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=40342 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275884.784:7704): avc: denied { remove_name } for pid=88971 comm="chronyc" name="chronyc.88971.sock" dev="tmpfs" ino=386276 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645275884.773:7686): avc: denied { map } for pid=88957 comm="rm" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645276699.026:10663): avc: denied { getattr } for pid=150482 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=40344 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645276699.026:10659): avc: denied { getattr } for pid=150482 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=40342 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275884.784:7700): avc: denied { add_name } for pid=88971 comm="chronyc" name="chronyc.88971.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645276699.029:10665): avc: denied { read open } for pid=150485 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275884.781:7695): avc: denied { getattr } for pid=88970 comm="20-chrony-onoff" path="/var/lib/sss/mc/passwd" dev="sda1" ino=40342 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645276699.031:10670): avc: denied { sendto } for pid=150485 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645276699.031:10672): avc: denied { unlink } for pid=150485 comm="chronyc" name="chronyc.150485.sock" dev="tmpfs" ino=611130 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645275884.771:7685): avc: denied { execute } for pid=88949 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275884.784:7702): avc: denied { sendto } for pid=88971 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645275884.775:7688): avc: denied { getattr } for pid=88959 comm="chrony-helper" path="/usr/libexec/chrony- helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275884.774:7687): avc: denied { read open } for pid=88959 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275884.777:7690): avc: denied { open } for pid=88959 comm="chrony-helper" path="/run/chrony-helper/lock" dev="tmpfs" ino=22021 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275884.784:7700): avc: denied { create } for pid=88971 comm="chronyc" name="chronyc.88971.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645275884.771:7679): avc: denied { read } for pid=88949 comm="11-dhclient" name="passwd" dev="sda1" ino=40342 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1'] [6695121] upgrade/cephfs/featureful_client/old_client/{bluestore-bitmap centos_latest clusters/1-mds-2-client-micro conf/{client mds mon osd} overrides/{multimds/no pg-warn whitelist_health whitelist_wrongly_marked_down} tasks/{0-octopus 1-client 2-upgrade 3-compat_client/no}} ----------------------------------------------------------------- time: 00:25:19 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695121/ log: http://qa-proxy.ceph.com/teuthology/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695121/ SELinux denials found on ubuntu@smithi084.front.sepia.ceph.com: ['type=AVC msg=audit(1645275851.708:6963): avc: denied { setattr } for pid=29764 comm="chronyc" name="chronyc.29764.sock" dev="tmpfs" ino=183924 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645276424.304:7312): avc: denied { read } for pid=31370 comm="20-chrony-dhcp" name="passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275851.701:6952): avc: denied { getattr } for pid=29758 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645276424.303:7309): avc: denied { open } for pid=31369 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275851.696:6943): avc: denied { open } for pid=29752 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645276424.308:7320): avc: denied { write } for pid=31372 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=171125 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645276424.304:7314): avc: denied { map } for pid=31370 comm="20-chrony-dhcp" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275851.697:6949): avc: denied { execute } for pid=29752 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645276424.306:7315): avc: denied { execute } for pid=31372 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645276424.303:7311): avc: denied { execute } for pid=31369 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275851.708:6962): avc: denied { dac_override } for pid=29764 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645276424.308:7318): avc: denied { dac_override } for pid=31372 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645275851.708:6961): avc: denied { dac_read_search } for pid=29764 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645275851.697:6947): avc: denied { read } for pid=29752 comm="11-dhclient" name="passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275851.697:6948): avc: denied { getattr } for pid=29752 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275851.700:6951): avc: denied { execute } for pid=29758 comm="20-chrony-dhcp" name="chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275851.697:6946): avc: denied { connectto } for pid=29752 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645275851.697:6945): avc: denied { map } for pid=29752 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645276424.301:7304): avc: denied { execute } for pid=31369 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275851.696:6943): avc: denied { read } for pid=29752 comm="11-dhclient" name="passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275851.700:6951): avc: denied { execute_no_trans } for pid=29758 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275851.696:6942): avc: denied { map } for pid=29752 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645276424.308:7320): avc: denied { sendto } for pid=31372 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645275851.696:6942): avc: denied { execute_no_trans } for pid=29752 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645276424.303:7310): avc: denied { getattr } for pid=31369 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275851.708:6962): avc: denied { add_name } for pid=29764 comm="chronyc" name="chronyc.29764.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645276424.308:7318): avc: denied { write } for pid=31372 comm="chronyc" name="chrony" dev="tmpfs" ino=25613 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645275851.705:6956): avc: denied { read } for pid=29761 comm="chrony-helper" name="chrony-helper" dev="tmpfs" ino=29067 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645275851.708:6962): avc: denied { write } for pid=29764 comm="chronyc" name="chrony" dev="tmpfs" ino=25613 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645275851.696:6942): avc: denied { execute } for pid=29752 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645276424.301:7304): avc: denied { map } for pid=31369 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275851.708:6964): avc: denied { sendto } for pid=29764 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645276424.306:7315): avc: denied { read open } for pid=31372 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645276424.306:7315): avc: denied { execute_no_trans } for pid=31372 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275851.702:6954): avc: denied { open } for pid=29758 comm="chrony-helper" path="/run/chrony-helper/lock" dev="tmpfs" ino=25258 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645276424.308:7317): avc: denied { dac_read_search } for pid=31372 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645276424.302:7308): avc: denied { connectto } for pid=31369 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645276424.306:7315): avc: denied { map } for pid=31372 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275851.696:6942): avc: denied { execute } for pid=29752 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275851.707:6959): avc: denied { execute } for pid=29764 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275851.707:6959): avc: denied { execute_no_trans } for pid=29764 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645276424.302:7305): avc: denied { read } for pid=31369 comm="11-dhclient" name="passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645276424.302:7307): avc: denied { map } for pid=31369 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645276424.308:7318): avc: denied { create } for pid=31372 comm="chronyc" name="chronyc.31372.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645276424.308:7318): avc: denied { add_name } for pid=31372 comm="chronyc" name="chronyc.31372.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645275851.697:6946): avc: denied { write } for pid=29752 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645276424.302:7305): avc: denied { open } for pid=31369 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645276424.308:7316): avc: denied { create } for pid=31372 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645276424.308:7322): avc: denied { remove_name } for pid=31372 comm="chronyc" name="chronyc.31372.sock" dev="tmpfs" ino=199322 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645275851.708:6962): avc: denied { create } for pid=29764 comm="chronyc" name="chronyc.29764.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645276424.308:7321): avc: denied { sendto } for pid=26384 comm="chronyd" path="/run/chrony/chronyc.31372.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645275851.707:6959): avc: denied { read open } for pid=29764 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275851.708:6960): avc: denied { create } for pid=29764 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645275851.709:6965): avc: denied { sendto } for pid=26384 comm="chronyd" path="/run/chrony/chronyc.29764.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645275851.709:6966): avc: denied { remove_name } for pid=29764 comm="chronyc" name="chronyc.29764.sock" dev="tmpfs" ino=183924 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645276424.302:7308): avc: denied { write } for pid=31369 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645276424.304:7312): avc: denied { open } for pid=31370 comm="20-chrony-dhcp" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275851.707:6959): avc: denied { map } for pid=29764 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275851.709:6966): avc: denied { unlink } for pid=29764 comm="chronyc" name="chronyc.29764.sock" dev="tmpfs" ino=183924 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645275851.702:6954): avc: denied { write } for pid=29758 comm="chrony-helper" name="lock" dev="tmpfs" ino=25258 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275851.699:6950): avc: denied { execute_no_trans } for pid=29756 comm="20-chrony-dhcp" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275851.700:6951): avc: denied { read open } for pid=29758 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275851.701:6953): avc: denied { ioctl } for pid=29758 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 ioctlcmd=0x5401 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275851.703:6955): avc: denied { lock } for pid=29760 comm="flock" path="/run/chrony-helper/lock" dev="tmpfs" ino=25258 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645276424.301:7304): avc: denied { execute_no_trans } for pid=31369 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645276424.308:7319): avc: denied { setattr } for pid=31372 comm="chronyc" name="chronyc.31372.sock" dev="tmpfs" ino=199322 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645276424.303:7309): avc: denied { read } for pid=31369 comm="11-dhclient" name="passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645276424.304:7313): avc: denied { getattr } for pid=31370 comm="20-chrony-dhcp" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275851.697:6947): avc: denied { open } for pid=29752 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275851.697:6944): avc: denied { getattr } for pid=29752 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645276424.301:7304): avc: denied { execute } for pid=31369 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645275851.708:6964): avc: denied { write } for pid=29764 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=171125 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645275851.699:6950): avc: denied { map } for pid=29756 comm="rm" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645276424.308:7322): avc: denied { unlink } for pid=31372 comm="chronyc" name="chronyc.31372.sock" dev="tmpfs" ino=199322 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645275851.705:6957): avc: denied { read } for pid=29761 comm="chrony-helper" name="dhclient" dev="sda1" ino=1965 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:dhcpc_state_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645276424.302:7306): avc: denied { getattr } for pid=31369 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11732 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1'] [6695123] upgrade/octopus-x/rgw-multisite/{clusters frontend overrides realm tasks upgrade/primary} ----------------------------------------------------------------- time: 03:06:00 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695123/ log: http://qa-proxy.ceph.com/teuthology/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695123/ sentry: https://sentry.ceph.com/organizations/ceph/?query=0b346e6a37534b828f01e738fede55e8 rgw multisite test failures [6695127] upgrade/octopus-x/stress-split-no-cephadm/{0-cluster/{openstack start} 1-ceph-install/octopus 1.1-pg-log-overrides/short_pg_log 2-partial-upgrade/firsthalf 3-thrash/default 4-workload/{radosbench rbd-cls rbd-import-export rbd_api readwrite rgw_ragweed_prepare snaps-few-objects} 5-finish-upgrade 6-quincy 8-final-workload/{rbd-python snaps-many-objects} mon_election/classic objectstore/bluestore-hybrid thrashosds-health ubuntu_20.04} ----------------------------------------------------------------- time: 03:38:08 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695127/ log: http://qa-proxy.ceph.com/teuthology/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695127/ sentry: https://sentry.ceph.com/organizations/ceph/?query=9aa3e94b2aba47b79a219e811c849e50 Command failed on smithi140 with status 2: 'cd /home/ubuntu/cephtest/ragweed && ./bootstrap' [6695129] upgrade/cephfs/mds_upgrade_sequence/{bluestore-bitmap centos_8.stream_container_tools conf/{client mds mon osd} overrides/{pg-warn syntax whitelist_health whitelist_wrongly_marked_down} roles tasks/{0-from/pacific 1-volume/{0-create 1-ranks/2 2-allow_standby_replay/no 3-inline/yes 4-verify} 2-client 3-upgrade-with-workload 4-verify}} ----------------------------------------------------------------- time: 00:26:54 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695129/ log: http://qa-proxy.ceph.com/teuthology/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695129/ SELinux denials found on ubuntu@smithi081.front.sepia.ceph.com: ['type=AVC msg=audit(1645277512.167:7663): avc: denied { map } for pid=89111 comm="rm" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278212.845:10686): avc: denied { sendto } for pid=26403 comm="chronyd" path="/run/chrony/chronyc.147654.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645278212.839:10671): avc: denied { execute_no_trans } for pid=147651 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278212.841:10679): avc: denied { execute } for pid=147652 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277512.165:7660): avc: denied { open } for pid=89101 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=39864 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277512.164:7655): avc: denied { execute } for pid=89101 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277512.178:7680): avc: denied { setattr } for pid=89122 comm="chronyc" name="chronyc.89122.sock" dev="tmpfs" ino=383353 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645278212.845:10687): avc: denied { unlink } for pid=147654 comm="chronyc" name="chronyc.147654.sock" dev="tmpfs" ino=606512 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645278212.840:10672): avc: denied { open } for pid=147651 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=39862 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278212.840:10677): avc: denied { getattr } for pid=147651 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=39864 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278212.845:10682): avc: denied { dac_read_search } for pid=147654 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645278212.839:10671): avc: denied { execute } for pid=147651 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278212.840:10676): avc: denied { open } for pid=147651 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=39864 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277512.169:7665): avc: denied { write } for pid=89115 comm="chrony-helper" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645277512.178:7679): avc: denied { write } for pid=89122 comm="chronyc" name="chrony" dev="tmpfs" ino=20165 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645277512.167:7663): avc: denied { execute_no_trans } for pid=89111 comm="20-chrony-dhcp" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277512.178:7677): avc: denied { create } for pid=89122 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645277512.165:7662): avc: denied { execute } for pid=89101 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278212.843:10680): avc: denied { read open } for pid=147654 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277512.170:7666): avc: denied { getattr } for pid=89115 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277512.171:7668): avc: denied { write } for pid=89115 comm="chrony-helper" name="lock" dev="tmpfs" ino=27704 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277512.174:7671): avc: denied { read } for pid=89118 comm="chrony-helper" name="dhclient" dev="sda1" ino=1965 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:dhcpc_state_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645277512.178:7678): avc: denied { dac_read_search } for pid=89122 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645277512.168:7664): avc: denied { execute } for pid=89115 comm="20-chrony-dhcp" name="chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277512.178:7679): avc: denied { create } for pid=89122 comm="chronyc" name="chronyc.89122.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645278212.839:10671): avc: denied { execute } for pid=147651 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277512.164:7655): avc: denied { execute } for pid=89101 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278212.845:10683): avc: denied { create } for pid=147654 comm="chronyc" name="chronyc.147654.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645278212.845:10685): avc: denied { write } for pid=147654 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=154430 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645277512.168:7664): avc: denied { execute_no_trans } for pid=89115 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277512.164:7655): avc: denied { map } for pid=89101 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277512.174:7670): avc: denied { read } for pid=89118 comm="chrony-helper" name="chrony-helper" dev="tmpfs" ino=22801 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645277512.178:7681): avc: denied { sendto } for pid=89122 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645277512.164:7655): avc: denied { execute_no_trans } for pid=89101 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277512.171:7668): avc: denied { open } for pid=89115 comm="chrony-helper" path="/run/chrony- helper/lock" dev="tmpfs" ino=27704 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278212.845:10683): avc: denied { add_name } for pid=147654 comm="chronyc" name="chronyc.147654.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645277512.178:7683): avc: denied { remove_name } for pid=89122 comm="chronyc" name="chronyc.89122.sock" dev="tmpfs" ino=383353 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645278212.840:10674): avc: denied { map } for pid=147651 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=39862 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278212.845:10687): avc: denied { remove_name } for pid=147654 comm="chronyc" name="chronyc.147654.sock" dev="tmpfs" ino=606512 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645277512.176:7673): avc: denied { read open } for pid=89122 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277512.165:7658): avc: denied { map } for pid=89101 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=39862 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277512.175:7672): avc: denied { execute } for pid=89120 comm="nm-dispatcher" name="20-chrony-onoffline" dev="sda1" ino=591 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277512.165:7661): avc: denied { getattr } for pid=89101 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=39864 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277512.176:7673): avc: denied { execute_no_trans } for pid=89122 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277512.178:7679): avc: denied { add_name } for pid=89122 comm="chronyc" name="chronyc.89122.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645278212.843:10680): avc: denied { execute_no_trans } for pid=147654 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277512.165:7660): avc: denied { read } for pid=89101 comm="11-dhclient" name="passwd" dev="sda1" ino=39864 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277512.165:7659): avc: denied { write } for pid=89101 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645277512.176:7673): avc: denied { map } for pid=89122 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277512.178:7683): avc: denied { unlink } for pid=89122 comm="chronyc" name="chronyc.89122.sock" dev="tmpfs" ino=383353 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645277512.178:7679): avc: denied { dac_override } for pid=89122 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645278212.845:10683): avc: denied { write } for pid=147654 comm="chronyc" name="chrony" dev="tmpfs" ino=20165 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645277512.164:7657): avc: denied { getattr } for pid=89101 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=39862 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278212.840:10672): avc: denied { read } for pid=147651 comm="11-dhclient" name="passwd" dev="sda1" ino=39862 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278212.843:10680): avc: denied { map } for pid=147654 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278212.840:10673): avc: denied { getattr } for pid=147651 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=39862 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278212.840:10678): avc: denied { execute } for pid=147651 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277512.164:7656): avc: denied { read } for pid=89101 comm="11-dhclient" name="passwd" dev="sda1" ino=39862 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277512.165:7659): avc: denied { connectto } for pid=89101 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645277512.178:7682): avc: denied { sendto } for pid=26403 comm="chronyd" path="/run/chrony/chronyc.89122.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645277512.176:7673): avc: denied { execute } for pid=89122 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278212.841:10679): avc: denied { map } for pid=147652 comm="20-chrony-dhcp" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277512.170:7667): avc: denied { ioctl } for pid=89115 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 ioctlcmd=0x5401 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277512.175:7672): avc: denied { execute_no_trans } for pid=89120 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/20-chrony-onoffline" dev="sda1" ino=591 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278212.843:10680): avc: denied { execute } for pid=147654 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278212.845:10681): avc: denied { create } for pid=147654 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645277512.172:7669): avc: denied { lock } for pid=89117 comm="flock" path="/run/chrony-helper/lock" dev="tmpfs" ino=27704 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278212.845:10684): avc: denied { setattr } for pid=147654 comm="chronyc" name="chronyc.147654.sock" dev="tmpfs" ino=606512 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645277512.168:7664): avc: denied { read open } for pid=89115 comm="20-chrony-dhcp" path="/usr/libexec/chrony- helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277512.178:7681): avc: denied { write } for pid=89122 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=154430 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645278212.839:10671): avc: denied { map } for pid=147651 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278212.840:10675): avc: denied { connectto } for pid=147651 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645278212.845:10685): avc: denied { sendto } for pid=147654 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645277512.164:7656): avc: denied { open } for pid=89101 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=39862 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278212.845:10683): avc: denied { dac_override } for pid=147654 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645278212.840:10675): avc: denied { write } for pid=147651 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645278212.840:10676): avc: denied { read } for pid=147651 comm="11-dhclient" name="passwd" dev="sda1" ino=39864 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1'] [6695133] upgrade/cephfs/featureful_client/upgraded_client/{bluestore-bitmap centos_latest clusters/1-mds-2-client-micro conf/{client mds mon osd} overrides/{multimds/no pg-warn whitelist_health whitelist_wrongly_marked_down} tasks/{0-octopus 1-client 2-upgrade 3-client-upgrade 4-compat_client 5-client-sanity}} ----------------------------------------------------------------- time: 00:17:43 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695133/ log: http://qa-proxy.ceph.com/teuthology/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695133/ SELinux denials found on ubuntu@smithi121.front.sepia.ceph.com: ['type=AVC msg=audit(1645277936.035:7361): avc: denied { create } for pid=31385 comm="chronyc" name="chronyc.31385.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645277734.850:6968): avc: denied { dac_override } for pid=29744 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645277936.029:7350): avc: denied { execute } for pid=31382 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277936.030:7351): avc: denied { read } for pid=31382 comm="11-dhclient" name="passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277936.030:7355): avc: denied { open } for pid=31382 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277734.850:6972): avc: denied { unlink } for pid=29744 comm="chronyc" name="chronyc.29744.sock" dev="tmpfs" ino=187926 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645278099.332:7738): avc: denied { open } for pid=32882 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278099.338:7747): avc: denied { sendto } for pid=26390 comm="chronyd" path="/run/chrony/chronyc.32885.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645278099.337:7742): avc: denied { create } for pid=32885 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645278099.338:7746): avc: denied { sendto } for pid=32885 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645277936.675:7417): avc: denied { execute_no_trans } for pid=31510 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278099.332:7734): avc: denied { open } for pid=32882 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277936.030:7354): avc: denied { connectto } for pid=31382 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645277734.848:6964): avc: denied { map } for pid=29744 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277936.035:7361): avc: denied { add_name } for pid=31385 comm="chronyc" name="chronyc.31385.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645277936.676:7419): avc: denied { ioctl } for pid=31510 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 ioctlcmd=0x5401 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277734.850:6969): avc: denied { setattr } for pid=29744 comm="chronyc" name="chronyc.29744.sock" dev="tmpfs" ino=187926 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645278099.331:7733): avc: denied { execute } for pid=32882 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277734.841:6953): avc: denied { execute } for pid=29737 comm="20-chrony-dhcp" name="chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277936.675:7417): avc: denied { read open } for pid=31510 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277734.850:6968): avc: denied { create } for pid=29744 comm="chronyc" name="chronyc.29744.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645277734.850:6967): avc: denied { dac_read_search } for pid=29744 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645278099.338:7748): avc: denied { remove_name } for pid=32885 comm="chronyc" name="chronyc.32885.sock" dev="tmpfs" ino=220507 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645278099.332:7739): avc: denied { getattr } for pid=32882 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277734.837:6944): avc: denied { execute_no_trans } for pid=29733 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277734.840:6952): avc: denied { execute_no_trans } for pid=29735 comm="20-chrony-dhcp" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277936.680:7423): avc: denied { read } for pid=31517 comm="chrony-helper" name="dhclient" dev="sda1" ino=1965 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:dhcpc_state_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645278099.331:7733): avc: denied { execute } for pid=32882 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277936.036:7364): avc: denied { sendto } for pid=26390 comm="chronyd" path="/run/chrony/chronyc.31385.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645277734.850:6970): avc: denied { write } for pid=29744 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=170140 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645277936.029:7350): avc: denied { execute_no_trans } for pid=31382 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277936.683:7424): avc: denied { add_name } for pid=31525 comm="chronyc" name="chronyc.31525.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645277936.036:7365): avc: denied { remove_name } for pid=31385 comm="chronyc" name="chronyc.31385.sock" dev="tmpfs" ino=200461 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645278099.332:7740): avc: denied { execute } for pid=32882 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277734.850:6968): avc: denied { write } for pid=29744 comm="chronyc" name="chrony" dev="tmpfs" ino=22394 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645277734.837:6946): avc: denied { getattr } for pid=29733 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277734.847:6960): avc: denied { read } for pid=29740 comm="chrony-helper" name="dhclient" dev="sda1" ino=1965 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:dhcpc_state_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645278099.332:7737): avc: denied { connectto } for pid=32882 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645277936.035:7360): avc: denied { dac_read_search } for pid=31385 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645277936.034:7358): avc: denied { map } for pid=31385 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278099.331:7733): avc: denied { execute_no_trans } for pid=32882 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277936.034:7358): avc: denied { read open } for pid=31385 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277936.683:7424): avc: denied { write } for pid=31525 comm="chronyc" name="chrony" dev="tmpfs" ino=22394 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645277936.030:7354): avc: denied { write } for pid=31382 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645278099.331:7733): avc: denied { map } for pid=32882 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277734.843:6956): avc: denied { write } for pid=29737 comm="chrony-helper" name="lock" dev="tmpfs" ino=23227 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277936.030:7351): avc: denied { open } for pid=31382 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277936.671:7415): avc: denied { execute } for pid=31501 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277936.684:7426): avc: denied { remove_name } for pid=31525 comm="chronyc" name="chronyc.31525.sock" dev="tmpfs" ino=200559 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645278099.338:7745): avc: denied { setattr } for pid=32885 comm="chronyc" name="chronyc.32885.sock" dev="tmpfs" ino=220507 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645277936.030:7353): avc: denied { map } for pid=31382 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277936.035:7359): avc: denied { create } for pid=31385 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645277936.029:7350): avc: denied { execute } for pid=31382 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277936.035:7361): avc: denied { dac_override } for pid=31385 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645277936.677:7420): avc: denied { open } for pid=31510 comm="chrony-helper" path="/run/chrony-helper/lock" dev="tmpfs" ino=23227 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277734.848:6964): avc: denied { execute } for pid=29744 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277936.031:7356): avc: denied { getattr } for pid=31382 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278099.338:7748): avc: denied { unlink } for pid=32885 comm="chronyc" name="chronyc.32885.sock" dev="tmpfs" ino=220507 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645277734.850:6971): avc: denied { sendto } for pid=26390 comm="chronyd" path="/run/chrony/chronyc.29744.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645277734.837:6944): avc: denied { map } for pid=29733 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277936.036:7362): avc: denied { setattr } for pid=31385 comm="chronyc" name="chronyc.31385.sock" dev="tmpfs" ino=200461 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645277936.035:7361): avc: denied { write } for pid=31385 comm="chronyc" name="chrony" dev="tmpfs" ino=22394 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645278099.332:7738): avc: denied { read } for pid=32882 comm="11-dhclient" name="passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277936.036:7365): avc: denied { unlink } for pid=31385 comm="chronyc" name="chronyc.31385.sock" dev="tmpfs" ino=200461 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645277734.844:6957): avc: denied { lock } for pid=29739 comm="flock" path="/run/chrony-helper/lock" dev="tmpfs" ino=23227 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277734.850:6970): avc: denied { sendto } for pid=29744 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645277734.837:6944): avc: denied { execute } for pid=29733 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277734.837:6945): avc: denied { read } for pid=29733 comm="11-dhclient" name="passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277936.030:7355): avc: denied { read } for pid=31382 comm="11-dhclient" name="passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277936.674:7416): avc: denied { execute_no_trans } for pid=31507 comm="20-chrony-dhcp" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277734.838:6948): avc: denied { write } for pid=29733 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645278099.338:7744): avc: denied { write } for pid=32885 comm="chronyc" name="chrony" dev="tmpfs" ino=22394 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645278099.336:7741): avc: denied { map } for pid=32885 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278099.332:7734): avc: denied { read } for pid=32882 comm="11-dhclient" name="passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278099.336:7741): avc: denied { execute } for pid=32885 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277936.030:7352): avc: denied { getattr } for pid=31382 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277734.843:6956): avc: denied { open } for pid=29737 comm="chrony-helper" path="/run/chrony-helper/lock" dev="tmpfs" ino=23227 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278099.338:7744): avc: denied { dac_override } for pid=32885 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645277734.850:6968): avc: denied { add_name } for pid=29744 comm="chronyc" name="chronyc.29744.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645277936.034:7358): avc: denied { execute } for pid=31385 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277734.838:6949): avc: denied { open } for pid=29733 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277936.675:7417): avc: denied { execute } for pid=31510 comm="20-chrony-dhcp" name="chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277734.842:6954): avc: denied { getattr } for pid=29737 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277936.684:7425): avc: denied { sendto } for pid=26390 comm="chronyd" path="/run/chrony/chronyc.31525.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645277936.036:7363): avc: denied { write } for pid=31385 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=170140 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645277936.680:7422): avc: denied { read } for pid=31517 comm="chrony-helper" name="chrony-helper" dev="tmpfs" ino=25563 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645277936.034:7358): avc: denied { execute_no_trans } for pid=31385 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277734.841:6953): avc: denied { execute_no_trans } for pid=29737 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278099.336:7741): avc: denied { read open } for pid=32885 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277734.838:6950): avc: denied { getattr } for pid=29733 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277936.678:7421): avc: denied { lock } for pid=31515 comm="flock" path="/run/chrony-helper/lock" dev="tmpfs" ino=23227 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277734.841:6953): avc: denied { read open } for pid=29737 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277936.031:7357): avc: denied { execute } for pid=31382 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277936.671:7415): avc: denied { execute_no_trans } for pid=31501 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277734.848:6964): avc: denied { execute_no_trans } for pid=29744 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277936.036:7363): avc: denied { sendto } for pid=31385 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645278099.338:7744): avc: denied { add_name } for pid=32885 comm="chronyc" name="chronyc.32885.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645278099.338:7746): avc: denied { write } for pid=32885 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=170140 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645277734.850:6966): avc: denied { create } for pid=29744 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645277734.837:6945): avc: denied { open } for pid=29733 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277734.842:6955): avc: denied { ioctl } for pid=29737 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 ioctlcmd=0x5401 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278099.338:7743): avc: denied { dac_read_search } for pid=32885 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645278099.332:7737): avc: denied { write } for pid=32882 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645277734.848:6964): avc: denied { read open } for pid=29744 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278099.336:7741): avc: denied { execute_no_trans } for pid=32885 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277936.674:7416): avc: denied { map } for pid=31507 comm="rm" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277734.838:6951): avc: denied { execute } for pid=29733 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277936.676:7418): avc: denied { getattr } for pid=31510 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278099.332:7736): avc: denied { map } for pid=32882 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278099.338:7744): avc: denied { create } for pid=32885 comm="chronyc" name="chronyc.32885.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645277734.850:6972): avc: denied { remove_name } for pid=29744 comm="chronyc" name="chronyc.29744.sock" dev="tmpfs" ino=187926 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645277734.837:6944): avc: denied { execute } for pid=29733 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277734.846:6959): avc: denied { read } for pid=29740 comm="chrony-helper" name="chrony-helper" dev="tmpfs" ino=25563 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645277734.837:6947): avc: denied { map } for pid=29733 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277734.838:6949): avc: denied { read } for pid=29733 comm="11-dhclient" name="passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278099.332:7735): avc: denied { getattr } for pid=32882 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277936.029:7350): avc: denied { map } for pid=31382 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277734.838:6948): avc: denied { connectto } for pid=29733 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645277936.677:7420): avc: denied { write } for pid=31510 comm="chrony-helper" name="lock" dev="tmpfs" ino=23227 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645277734.840:6952): avc: denied { map } for pid=29735 comm="rm" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1'] [6695136] upgrade/octopus-x/stress-split-no-cephadm/{0-cluster/{openstack start} 1-ceph-install/octopus 1.1-pg-log-overrides/normal_pg_log 2-partial-upgrade/firsthalf 3-thrash/default 4-workload/{radosbench rbd-cls rbd-import-export rbd_api readwrite rgw_ragweed_prepare snaps-few-objects} 5-finish-upgrade 6-quincy 8-final-workload/{rbd-python snaps-many-objects} mon_election/connectivity objectstore/filestore-xfs thrashosds-health ubuntu_20.04} ----------------------------------------------------------------- time: 01:54:11 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695136/ log: http://qa-proxy.ceph.com/teuthology/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695136/ sentry: https://sentry.ceph.com/organizations/ceph/?query=e1e16be5cec34a09a08608b2d03b1e87 Command failed on smithi169 with status 2: 'cd /home/ubuntu/cephtest/ragweed && ./bootstrap' [6695137] upgrade/cephfs/mds_upgrade_sequence/{bluestore-bitmap centos_8.stream_container_tools conf/{client mds mon osd} overrides/{pg-warn syntax whitelist_health whitelist_wrongly_marked_down} roles tasks/{0-from/v16.2.4 1-volume/{0-create 1-ranks/2 2-allow_standby_replay/no 3-inline/no 4-verify} 2-client 3-upgrade-with-workload 4-verify}} ----------------------------------------------------------------- time: 00:30:54 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695137/ log: http://qa-proxy.ceph.com/teuthology/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695137/ SELinux denials found on ubuntu@smithi033.front.sepia.ceph.com: ['type=AVC msg=audit(1645278850.344:7697): avc: denied { read } for pid=88836 comm="chrony-helper" name="dhclient" dev="sda1" ino=1965 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:dhcpc_state_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645279698.506:10833): avc: denied { add_name } for pid=151071 comm="chronyc" name="chronyc.151071.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645278850.338:7690): avc: denied { execute_no_trans } for pid=88828 comm="20-chrony-dhcp" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278850.342:7695): avc: denied { lock } for pid=88835 comm="flock" path="/run/chrony-helper/lock" dev="tmpfs" ino=26011 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279698.504:10830): avc: denied { execute_no_trans } for pid=151071 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278850.335:7687): avc: denied { read } for pid=88821 comm="11-dhclient" name="passwd" dev="sda1" ino=40345 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278850.346:7698): avc: denied { execute_no_trans } for pid=88839 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279698.500:10822): avc: denied { execute } for pid=151068 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278850.348:7703): avc: denied { create } for pid=88839 comm="chronyc" name="chronyc.88839.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645278850.346:7698): avc: denied { read open } for pid=88839 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279698.501:10827): avc: denied { read } for pid=151068 comm="11-dhclient" name="passwd" dev="sda1" ino=40345 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279698.507:10837): avc: denied { remove_name } for pid=151071 comm="chronyc" name="chronyc.151071.sock" dev="tmpfs" ino=620930 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645279698.501:10827): avc: denied { open } for pid=151068 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=40345 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279698.504:10830): avc: denied { execute } for pid=151071 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278850.335:7684): avc: denied { getattr } for pid=88821 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=40343 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278850.334:7682): avc: denied { execute } for pid=88821 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279698.506:10833): avc: denied { create } for pid=151071 comm="chronyc" name="chronyc.151071.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645278850.340:7693): avc: denied { ioctl } for pid=88831 comm="chrony-helper" path="/usr/libexec/chrony- helper" dev="sda1" ino=20468 ioctlcmd=0x5401 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278850.344:7696): avc: denied { read } for pid=88836 comm="chrony-helper" name="chrony-helper" dev="tmpfs" ino=22920 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645278850.334:7682): avc: denied { execute_no_trans } for pid=88821 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279698.501:10829): avc: denied { execute } for pid=151068 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278850.335:7683): avc: denied { read } for pid=88821 comm="11-dhclient" name="passwd" dev="sda1" ino=40343 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278850.346:7698): avc: denied { map } for pid=88839 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279698.506:10833): avc: denied { dac_override } for pid=151071 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645278850.335:7686): avc: denied { connectto } for pid=88821 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645278850.336:7689): avc: denied { execute } for pid=88821 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278850.336:7688): avc: denied { getattr } for pid=88821 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=40345 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278850.339:7691): avc: denied { execute_no_trans } for pid=88831 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278850.348:7703): avc: denied { write } for pid=88839 comm="chronyc" name="chrony" dev="tmpfs" ino=21955 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645278850.334:7682): avc: denied { map } for pid=88821 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279698.506:10831): avc: denied { create } for pid=151071 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645278850.334:7682): avc: denied { execute } for pid=88821 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278850.335:7686): avc: denied { write } for pid=88821 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645279698.504:10830): avc: denied { map } for pid=151071 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278850.349:7708): avc: denied { unlink } for pid=88839 comm="chronyc" name="chronyc.88839.sock" dev="tmpfs" ino=384612 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645279698.506:10834): avc: denied { setattr } for pid=151071 comm="chronyc" name="chronyc.151071.sock" dev="tmpfs" ino=620930 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645279698.501:10826): avc: denied { connectto } for pid=151068 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645278850.348:7703): avc: denied { add_name } for pid=88839 comm="chronyc" name="chronyc.88839.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645278850.348:7705): avc: denied { sendto } for pid=88839 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645278850.341:7694): avc: denied { open } for pid=88831 comm="chrony-helper" path="/run/chrony-helper/lock" dev="tmpfs" ino=26011 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279698.507:10836): avc: denied { sendto } for pid=26349 comm="chronyd" path="/run/chrony/chronyc.151071.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645278850.335:7683): avc: denied { open } for pid=88821 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=40343 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279698.501:10823): avc: denied { open } for pid=151068 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=40343 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278850.348:7702): avc: denied { dac_read_search } for pid=88839 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645278850.348:7705): avc: denied { write } for pid=88839 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=166610 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645278850.340:7692): avc: denied { getattr } for pid=88831 comm="chrony-helper" path="/usr/libexec/chrony- helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279698.506:10835): avc: denied { write } for pid=151071 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=166610 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645279698.501:10826): avc: denied { write } for pid=151068 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645279698.500:10822): avc: denied { execute } for pid=151068 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279698.506:10835): avc: denied { sendto } for pid=151071 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645278850.339:7691): avc: denied { read open } for pid=88831 comm="20-chrony-dhcp" path="/usr/libexec/chrony- helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279698.501:10825): avc: denied { map } for pid=151068 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=40343 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278850.348:7701): avc: denied { create } for pid=88839 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645279698.506:10833): avc: denied { write } for pid=151071 comm="chronyc" name="chrony" dev="tmpfs" ino=21955 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645279698.501:10824): avc: denied { getattr } for pid=151068 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=40343 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278850.339:7691): avc: denied { execute } for pid=88831 comm="20-chrony-dhcp" name="chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279698.501:10828): avc: denied { getattr } for pid=151068 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=40345 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279698.501:10823): avc: denied { read } for pid=151068 comm="11-dhclient" name="passwd" dev="sda1" ino=40343 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279698.507:10837): avc: denied { unlink } for pid=151071 comm="chronyc" name="chronyc.151071.sock" dev="tmpfs" ino=620930 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645278850.335:7687): avc: denied { open } for pid=88821 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=40345 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279698.504:10830): avc: denied { read open } for pid=151071 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279698.506:10832): avc: denied { dac_read_search } for pid=151071 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645278850.338:7690): avc: denied { map } for pid=88828 comm="rm" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278850.341:7694): avc: denied { write } for pid=88831 comm="chrony-helper" name="lock" dev="tmpfs" ino=26011 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278850.348:7703): avc: denied { dac_override } for pid=88839 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645279698.500:10822): avc: denied { map } for pid=151068 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279698.500:10822): avc: denied { execute_no_trans } for pid=151068 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278850.335:7685): avc: denied { map } for pid=88821 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=40343 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278850.348:7704): avc: denied { setattr } for pid=88839 comm="chronyc" name="chronyc.88839.sock" dev="tmpfs" ino=384612 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645278850.349:7708): avc: denied { remove_name } for pid=88839 comm="chronyc" name="chronyc.88839.sock" dev="tmpfs" ino=384612 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645278850.346:7698): avc: denied { execute } for pid=88839 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645278850.349:7707): avc: denied { sendto } for pid=26349 comm="chronyd" path="/run/chrony/chronyc.88839.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1'] [6695140] upgrade/cephfs/featureful_client/old_client/{bluestore-bitmap centos_latest clusters/1-mds-2-client-micro conf/{client mds mon osd} overrides/{multimds/yes pg-warn whitelist_health whitelist_wrongly_marked_down} tasks/{0-octopus 1-client 2-upgrade 3-compat_client/pacific}} ----------------------------------------------------------------- time: 00:22:06 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695140/ log: http://qa-proxy.ceph.com/teuthology/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695140/ SELinux denials found on ubuntu@smithi149.front.sepia.ceph.com: ['type=AVC msg=audit(1645279804.324:7299): avc: denied { open } for pid=31162 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279440.625:6970): avc: denied { write } for pid=29774 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=167669 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645279440.612:6947): avc: denied { write } for pid=29763 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645279440.618:6957): avc: denied { lock } for pid=29769 comm="flock" path="/run/chrony-helper/lock" dev="tmpfs" ino=29946 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279440.616:6953): avc: denied { execute } for pid=29767 comm="20-chrony-dhcp" name="chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279440.624:6968): avc: denied { add_name } for pid=29774 comm="chronyc" name="chronyc.29774.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645279440.623:6961): avc: denied { read open } for pid=29774 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279440.624:6968): avc: denied { dac_override } for pid=29774 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645279440.621:6959): avc: denied { read } for pid=29770 comm="chrony-helper" name="chrony-helper" dev="tmpfs" ino=17396 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645279440.613:6949): avc: denied { getattr } for pid=29763 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279804.325:7301): avc: denied { execute } for pid=31162 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279804.330:7305): avc: denied { dac_override } for pid=31165 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645279440.612:6944): avc: denied { read } for pid=29763 comm="11-dhclient" name="passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279804.330:7305): avc: denied { add_name } for pid=31165 comm="chronyc" name="chronyc.31165.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645279440.616:6953): avc: denied { read open } for pid=29767 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279804.328:7302): avc: denied { map } for pid=31165 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279440.615:6952): avc: denied { execute_no_trans } for pid=29765 comm="20-chrony-dhcp" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279804.328:7302): avc: denied { read open } for pid=31165 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279440.612:6947): avc: denied { connectto } for pid=29763 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645279804.323:7294): avc: denied { execute } for pid=31162 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279804.324:7298): avc: denied { connectto } for pid=31162 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645279804.324:7300): avc: denied { getattr } for pid=31162 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279440.623:6961): avc: denied { execute_no_trans } for pid=29774 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279440.612:6945): avc: denied { getattr } for pid=29763 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279804.324:7295): avc: denied { read } for pid=31162 comm="11-dhclient" name="passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279440.625:6972): avc: denied { unlink } for pid=29774 comm="chronyc" name="chronyc.29774.sock" dev="tmpfs" ino=181964 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645279804.324:7299): avc: denied { read } for pid=31162 comm="11-dhclient" name="passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279440.613:6948): avc: denied { read } for pid=29763 comm="11-dhclient" name="passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279440.615:6952): avc: denied { map } for pid=29765 comm="rm" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279440.625:6970): avc: denied { sendto } for pid=29774 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645279804.328:7302): avc: denied { execute } for pid=31165 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279440.611:6943): avc: denied { execute_no_trans } for pid=29763 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279440.624:6968): avc: denied { create } for pid=29774 comm="chronyc" name="chronyc.29774.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645279804.330:7309): avc: denied { remove_name } for pid=31165 comm="chronyc" name="chronyc.31165.sock" dev="tmpfs" ino=199489 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645279440.616:6953): avc: denied { execute_no_trans } for pid=29767 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279440.611:6943): avc: denied { map } for pid=29763 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279440.621:6960): avc: denied { read } for pid=29770 comm="chrony-helper" name="dhclient" dev="sda1" ino=1965 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:dhcpc_state_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645279440.623:6961): avc: denied { map } for pid=29774 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279440.612:6944): avc: denied { open } for pid=29763 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279440.613:6951): avc: denied { execute } for pid=29764 comm="nm-dispatcher" name="20-chrony-dhcp" dev="sda1" ino=199 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279440.625:6971): avc: denied { sendto } for pid=26407 comm="chronyd" path="/run/chrony/chronyc.29774.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645279804.330:7304): avc: denied { dac_read_search } for pid=31165 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645279804.330:7305): avc: denied { write } for pid=31165 comm="chronyc" name="chrony" dev="tmpfs" ino=25014 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645279804.324:7297): avc: denied { map } for pid=31162 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279440.625:6972): avc: denied { remove_name } for pid=29774 comm="chronyc" name="chronyc.29774.sock" dev="tmpfs" ino=181964 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645279440.623:6961): avc: denied { execute } for pid=29774 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279440.618:6956): avc: denied { write } for pid=29767 comm="chrony-helper" name="lock" dev="tmpfs" ino=29946 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279440.624:6967): avc: denied { dac_read_search } for pid=29774 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645279804.324:7296): avc: denied { getattr } for pid=31162 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279804.330:7307): avc: denied { write } for pid=31165 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=167669 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645279440.613:6948): avc: denied { open } for pid=29763 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279804.330:7307): avc: denied { sendto } for pid=31165 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645279440.613:6950): avc: denied { execute } for pid=29763 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279804.323:7294): avc: denied { map } for pid=31162 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279804.323:7294): avc: denied { execute_no_trans } for pid=31162 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279440.613:6951): avc: denied { execute_no_trans } for pid=29764 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/20-chrony-dhcp" dev="sda1" ino=199 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279440.616:6955): avc: denied { ioctl } for pid=29767 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 ioctlcmd=0x5401 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279440.624:6968): avc: denied { write } for pid=29774 comm="chronyc" name="chrony" dev="tmpfs" ino=25014 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645279804.330:7308): avc: denied { sendto } for pid=26407 comm="chronyd" path="/run/chrony/chronyc.31165.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645279440.618:6956): avc: denied { open } for pid=29767 comm="chrony-helper" path="/run/chrony-helper/lock" dev="tmpfs" ino=29946 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279804.330:7303): avc: denied { create } for pid=31165 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645279804.324:7295): avc: denied { open } for pid=31162 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279440.612:6946): avc: denied { map } for pid=29763 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279804.323:7294): avc: denied { execute } for pid=31162 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279440.624:6966): avc: denied { create } for pid=29774 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645279804.324:7298): avc: denied { write } for pid=31162 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645279804.330:7306): avc: denied { setattr } for pid=31165 comm="chronyc" name="chronyc.31165.sock" dev="tmpfs" ino=199489 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645279440.616:6954): avc: denied { getattr } for pid=29767 comm="chrony-helper" path="/usr/libexec/chrony- helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279440.611:6943): avc: denied { execute } for pid=29763 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279440.611:6943): avc: denied { execute } for pid=29763 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279440.625:6969): avc: denied { setattr } for pid=29774 comm="chronyc" name="chronyc.29774.sock" dev="tmpfs" ino=181964 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645279804.328:7302): avc: denied { execute_no_trans } for pid=31165 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645279804.330:7309): avc: denied { unlink } for pid=31165 comm="chronyc" name="chronyc.31165.sock" dev="tmpfs" ino=199489 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645279804.330:7305): avc: denied { create } for pid=31165 comm="chronyc" name="chronyc.31165.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1'] [6695144] upgrade/cephfs/mds_upgrade_sequence/{bluestore-bitmap centos_8.stream_container_tools conf/{client mds mon osd} overrides/{pg-warn syntax whitelist_health whitelist_wrongly_marked_down} roles tasks/{0-from/pacific 1-volume/{0-create 1-ranks/1 2-allow_standby_replay/yes 3-inline/yes 4-verify} 2-client 3-upgrade-with-workload 4-verify}} ----------------------------------------------------------------- time: 00:27:02 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695144/ log: http://qa-proxy.ceph.com/teuthology/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695144/ SELinux denials found on ubuntu@smithi097.front.sepia.ceph.com: ['type=AVC msg=audit(1645281208.006:10644): avc: denied { dac_override } for pid=147175 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645280560.415:7657): avc: denied { ioctl } for pid=89044 comm="chrony-helper" path="/usr/libexec/chrony- helper" dev="sda1" ino=20468 ioctlcmd=0x5401 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280560.423:7664): avc: denied { dac_read_search } for pid=89052 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645281208.007:10648): avc: denied { unlink } for pid=147175 comm="chronyc" name="chronyc.147175.sock" dev="tmpfs" ino=606266 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281208.005:10641): avc: denied { execute_no_trans } for pid=147175 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280560.411:7651): avc: denied { read } for pid=89034 comm="11-dhclient" name="passwd" dev="sda1" ino=39864 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281208.000:10633): avc: denied { execute } for pid=147172 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280560.423:7671): avc: denied { unlink } for pid=89052 comm="chronyc" name="chronyc.89052.sock" dev="tmpfs" ino=381642 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281208.001:10634): avc: denied { read } for pid=147172 comm="11-dhclient" name="passwd" dev="sda1" ino=39862 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280560.415:7656): avc: denied { getattr } for pid=89044 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281208.007:10648): avc: denied { dac_read_search } for pid=147175 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645280560.421:7662): avc: denied { execute } for pid=89052 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280560.412:7653): avc: denied { execute } for pid=89034 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280560.423:7665): avc: denied { write } for pid=89052 comm="chronyc" name="chrony" dev="tmpfs" ino=22658 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645280560.423:7668): avc: denied { write } for pid=89052 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=158347 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281208.001:10635): avc: denied { getattr } for pid=147172 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=39862 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281208.002:10640): avc: denied { execute } for pid=147172 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280560.423:7665): avc: denied { add_name } for pid=89052 comm="chronyc" name="chronyc.89052.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645281208.000:10633): avc: denied { map } for pid=147172 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280560.417:7658): avc: denied { open } for pid=89044 comm="chrony-helper" path="/run/chrony-helper/lock" dev="tmpfs" ino=24238 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281208.001:10638): avc: denied { read } for pid=147172 comm="11-dhclient" name="passwd" dev="sda1" ino=39864 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280560.419:7661): avc: denied { read } for pid=89049 comm="chrony-helper" name="dhclient" dev="sda1" ino=1965 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:dhcpc_state_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645281208.001:10636): avc: denied { map } for pid=147172 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=39862 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280560.410:7646): avc: denied { execute_no_trans } for pid=89034 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280560.423:7663): avc: denied { create } for pid=89052 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645281208.001:10637): avc: denied { connectto } for pid=147172 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645281208.000:10633): avc: denied { execute_no_trans } for pid=147172 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280560.411:7652): avc: denied { getattr } for pid=89034 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=39864 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280560.411:7651): avc: denied { open } for pid=89034 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=39864 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280560.423:7665): avc: denied { dac_override } for pid=89052 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645281208.006:10642): avc: denied { create } for pid=147175 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645281208.006:10644): avc: denied { add_name } for pid=147175 comm="chronyc" name="chronyc.147175.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645280560.411:7649): avc: denied { map } for pid=89034 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=39862 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281208.006:10644): avc: denied { write } for pid=147175 comm="chronyc" name="chrony" dev="tmpfs" ino=22658 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645280560.414:7655): avc: denied { execute_no_trans } for pid=89044 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280560.411:7648): avc: denied { getattr } for pid=89034 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=39862 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280560.410:7646): avc: denied { map } for pid=89034 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280560.413:7654): avc: denied { map } for pid=89041 comm="rm" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281208.001:10634): avc: denied { open } for pid=147172 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=39862 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280560.410:7646): avc: denied { execute } for pid=89034 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280560.417:7659): avc: denied { lock } for pid=89048 comm="flock" path="/run/chrony-helper/lock" dev="tmpfs" ino=24238 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280560.421:7662): avc: denied { read open } for pid=89052 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281208.007:10647): avc: denied { sendto } for pid=26311 comm="chronyd" path="/run/chrony/chronyc.147175.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645281208.001:10639): avc: denied { getattr } for pid=147172 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=39864 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280560.413:7654): avc: denied { execute_no_trans } for pid=89041 comm="20-chrony-dhcp" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281208.001:10637): avc: denied { write } for pid=147172 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281208.006:10644): avc: denied { create } for pid=147175 comm="chronyc" name="chronyc.147175.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645280560.410:7646): avc: denied { execute } for pid=89034 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280560.414:7655): avc: denied { execute } for pid=89044 comm="20-chrony-dhcp" name="chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280560.423:7671): avc: denied { remove_name } for pid=89052 comm="chronyc" name="chronyc.89052.sock" dev="tmpfs" ino=381642 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645280560.423:7668): avc: denied { sendto } for pid=89052 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645281208.005:10641): avc: denied { map } for pid=147175 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280560.417:7658): avc: denied { write } for pid=89044 comm="chrony-helper" name="lock" dev="tmpfs" ino=24238 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280560.423:7665): avc: denied { create } for pid=89052 comm="chronyc" name="chronyc.89052.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281208.000:10633): avc: denied { execute } for pid=147172 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280560.411:7650): avc: denied { write } for pid=89034 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645280560.419:7660): avc: denied { read } for pid=89049 comm="chrony-helper" name="chrony-helper" dev="tmpfs" ino=26911 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645280560.411:7647): avc: denied { read } for pid=89034 comm="11-dhclient" name="passwd" dev="sda1" ino=39862 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280560.421:7662): avc: denied { execute_no_trans } for pid=89052 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281208.005:10641): avc: denied { execute } for pid=147175 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280560.421:7662): avc: denied { map } for pid=89052 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280560.414:7655): avc: denied { read open } for pid=89044 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280560.423:7667): avc: denied { setattr } for pid=89052 comm="chronyc" name="chronyc.89052.sock" dev="tmpfs" ino=381642 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281208.007:10648): avc: denied { dac_override } for pid=147175 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645280560.411:7647): avc: denied { open } for pid=89034 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=39862 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280560.423:7670): avc: denied { sendto } for pid=26311 comm="chronyd" path="/run/chrony/chronyc.89052.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645281208.007:10648): avc: denied { remove_name } for pid=147175 comm="chronyc" name="chronyc.147175.sock" dev="tmpfs" ino=606266 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645281208.006:10646): avc: denied { sendto } for pid=147175 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645281208.001:10638): avc: denied { open } for pid=147172 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=39864 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281208.005:10641): avc: denied { read open } for pid=147175 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281208.006:10643): avc: denied { dac_read_search } for pid=147175 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645281208.006:10646): avc: denied { write } for pid=147175 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=158347 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281208.006:10645): avc: denied { setattr } for pid=147175 comm="chronyc" name="chronyc.147175.sock" dev="tmpfs" ino=606266 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645280560.411:7650): avc: denied { connectto } for pid=89034 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1'] [6695147] upgrade/octopus-x/rgw-multisite/{clusters frontend overrides realm tasks upgrade/secondary} ----------------------------------------------------------------- time: 03:07:25 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695147/ log: http://qa-proxy.ceph.com/teuthology/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695147/ sentry: https://sentry.ceph.com/organizations/ceph/?query=2f6335638a8249628d08767bfc858d7c rgw multisite test failures [6695149] upgrade/cephfs/featureful_client/old_client/{bluestore-bitmap centos_latest clusters/1-mds-2-client-micro conf/{client mds mon osd} overrides/{multimds/yes pg-warn whitelist_health whitelist_wrongly_marked_down} tasks/{0-octopus 1-client 2-upgrade 3-compat_client/no}} ----------------------------------------------------------------- time: 00:24:39 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695149/ log: http://qa-proxy.ceph.com/teuthology/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695149/ SELinux denials found on ubuntu@smithi105.front.sepia.ceph.com: ['type=AVC msg=audit(1645280900.553:6953): avc: denied { open } for pid=29747 comm="chrony-helper" path="/run/chrony-helper/lock" dev="tmpfs" ino=23510 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280900.551:6950): avc: denied { execute_no_trans } for pid=29747 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281471.733:7314): avc: denied { write } for pid=31380 comm="chronyc" name="chrony" dev="tmpfs" ino=23745 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645280900.547:6941): avc: denied { execute } for pid=29743 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280900.548:6946): avc: denied { read } for pid=29743 comm="11-dhclient" name="passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281471.727:7308): avc: denied { open } for pid=31377 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281471.733:7314): avc: denied { dac_override } for pid=31380 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645281471.732:7312): avc: denied { create } for pid=31380 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645280900.558:6959): avc: denied { read open } for pid=29754 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281471.727:7308): avc: denied { read } for pid=31377 comm="11-dhclient" name="passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281471.727:7304): avc: denied { open } for pid=31377 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280900.547:6941): avc: denied { map } for pid=29743 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280900.548:6946): avc: denied { open } for pid=29743 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281471.726:7303): avc: denied { execute_no_trans } for pid=31377 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281471.733:7315): avc: denied { setattr } for pid=31380 comm="chronyc" name="chronyc.31380.sock" dev="tmpfs" ino=197136 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645280900.560:6965): avc: denied { dac_override } for pid=29754 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645281471.733:7316): avc: denied { sendto } for pid=31380 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645280900.548:6948): avc: denied { execute } for pid=29743 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280900.547:6943): avc: denied { getattr } for pid=29743 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280900.548:6945): avc: denied { connectto } for pid=29743 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645280900.556:6957): avc: denied { read } for pid=29750 comm="chrony-helper" name="dhclient" dev="sda1" ino=1965 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:dhcpc_state_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645280900.560:6967): avc: denied { sendto } for pid=29754 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645281471.733:7313): avc: denied { dac_read_search } for pid=31380 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645280900.558:6959): avc: denied { execute_no_trans } for pid=29754 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280900.560:6969): avc: denied { remove_name } for pid=29754 comm="chronyc" name="chronyc.29754.sock" dev="tmpfs" ino=184723 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645281471.728:7310): avc: denied { execute } for pid=31377 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280900.552:6952): avc: denied { ioctl } for pid=29747 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 ioctlcmd=0x5401 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281471.726:7303): avc: denied { execute } for pid=31377 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280900.547:6942): avc: denied { open } for pid=29743 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281471.727:7307): avc: denied { connectto } for pid=31377 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645280900.547:6942): avc: denied { read } for pid=29743 comm="11-dhclient" name="passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280900.548:6947): avc: denied { getattr } for pid=29743 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280900.560:6965): avc: denied { write } for pid=29754 comm="chronyc" name="chrony" dev="tmpfs" ino=23745 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645281471.733:7314): avc: denied { add_name } for pid=31380 comm="chronyc" name="chronyc.31380.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645280900.551:6950): avc: denied { execute } for pid=29747 comm="20-chrony-dhcp" name="chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280900.556:6956): avc: denied { read } for pid=29750 comm="chrony-helper" name="chrony-helper" dev="tmpfs" ino=27709 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645280900.560:6966): avc: denied { setattr } for pid=29754 comm="chronyc" name="chronyc.29754.sock" dev="tmpfs" ino=184723 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645280900.547:6941): avc: denied { execute_no_trans } for pid=29743 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281471.733:7317): avc: denied { sendto } for pid=26397 comm="chronyd" path="/run/chrony/chronyc.31380.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645280900.559:6963): avc: denied { create } for pid=29754 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645280900.558:6959): avc: denied { execute } for pid=29754 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280900.560:6965): avc: denied { create } for pid=29754 comm="chronyc" name="chronyc.29754.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645280900.550:6949): avc: denied { execute_no_trans } for pid=29745 comm="20-chrony-dhcp" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280900.560:6968): avc: denied { sendto } for pid=26397 comm="chronyd" path="/run/chrony/chronyc.29754.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645281471.726:7303): avc: denied { execute } for pid=31377 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280900.550:6949): avc: denied { map } for pid=29745 comm="rm" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281471.726:7303): avc: denied { map } for pid=31377 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281471.733:7316): avc: denied { write } for pid=31380 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=155239 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645280900.551:6950): avc: denied { read open } for pid=29747 comm="20-chrony-dhcp" path="/usr/libexec/chrony- helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280900.547:6941): avc: denied { execute } for pid=29743 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280900.560:6969): avc: denied { unlink } for pid=29754 comm="chronyc" name="chronyc.29754.sock" dev="tmpfs" ino=184723 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645280900.547:6944): avc: denied { map } for pid=29743 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281471.731:7311): avc: denied { map } for pid=31380 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280900.560:6964): avc: denied { dac_read_search } for pid=29754 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645281471.733:7318): avc: denied { remove_name } for pid=31380 comm="chronyc" name="chronyc.31380.sock" dev="tmpfs" ino=197136 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645281471.731:7311): avc: denied { execute } for pid=31380 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281471.727:7304): avc: denied { read } for pid=31377 comm="11-dhclient" name="passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280900.560:6965): avc: denied { add_name } for pid=29754 comm="chronyc" name="chronyc.29754.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645281471.727:7307): avc: denied { write } for pid=31377 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645280900.560:6967): avc: denied { write } for pid=29754 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=155239 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281471.727:7306): avc: denied { map } for pid=31377 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280900.553:6953): avc: denied { write } for pid=29747 comm="chrony-helper" name="lock" dev="tmpfs" ino=23510 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281471.727:7309): avc: denied { getattr } for pid=31377 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281471.733:7318): avc: denied { unlink } for pid=31380 comm="chronyc" name="chronyc.31380.sock" dev="tmpfs" ino=197136 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645280900.554:6954): avc: denied { lock } for pid=29749 comm="flock" path="/run/chrony-helper/lock" dev="tmpfs" ino=23510 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280900.558:6959): avc: denied { map } for pid=29754 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280900.552:6951): avc: denied { getattr } for pid=29747 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281471.733:7314): avc: denied { create } for pid=31380 comm="chronyc" name="chronyc.31380.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281471.727:7305): avc: denied { getattr } for pid=31377 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11731 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281471.731:7311): avc: denied { read open } for pid=31380 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645280900.548:6945): avc: denied { write } for pid=29743 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281471.731:7311): avc: denied { execute_no_trans } for pid=31380 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1'] [6695150] upgrade/octopus-x/stress-split-no-cephadm/{0-cluster/{openstack start} 1-ceph-install/octopus 1.1-pg-log-overrides/short_pg_log 2-partial-upgrade/firsthalf 3-thrash/default 4-workload/{radosbench rbd-cls rbd-import-export rbd_api readwrite rgw_ragweed_prepare snaps-few-objects} 5-finish-upgrade 6-quincy 8-final-workload/{rbd-python snaps-many-objects} mon_election/connectivity objectstore/bluestore-hybrid thrashosds-health ubuntu_20.04} ----------------------------------------------------------------- time: 03:12:58 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695150/ log: http://qa-proxy.ceph.com/teuthology/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695150/ sentry: https://sentry.ceph.com/organizations/ceph/?query=03a97835ce174ef5a6d8f7ed51d71f60 Command failed on smithi131 with status 2: 'cd /home/ubuntu/cephtest/ragweed && ./bootstrap' [6695153] upgrade/cephfs/mds_upgrade_sequence/{bluestore-bitmap centos_8.stream_container_tools conf/{client mds mon osd} overrides/{pg-warn syntax whitelist_health whitelist_wrongly_marked_down} roles tasks/{0-from/v16.2.4 1-volume/{0-create 1-ranks/2 2-allow_standby_replay/yes 3-inline/no 4-verify} 2-client 3-upgrade-with-workload 4-verify}} ----------------------------------------------------------------- time: 00:29:56 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695153/ log: http://qa-proxy.ceph.com/teuthology/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695153/ SELinux denials found on ubuntu@smithi081.front.sepia.ceph.com: ['type=AVC msg=audit(1645281604.384:7708): avc: denied { dac_read_search } for pid=88728 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645282450.339:10684): avc: denied { remove_name } for pid=150877 comm="chronyc" name="chronyc.150877.sock" dev="tmpfs" ino=622153 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645281604.384:7709): avc: denied { dac_override } for pid=88728 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645281604.384:7711): avc: denied { write } for pid=88728 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=166687 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281604.384:7709): avc: denied { create } for pid=88728 comm="chronyc" name="chronyc.88728.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281604.384:7709): avc: denied { add_name } for pid=88728 comm="chronyc" name="chronyc.88728.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645281604.377:7696): avc: denied { open } for pid=88719 comm="chrony-helper" path="/run/chrony-helper/lock" dev="tmpfs" ino=27715 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281604.382:7703): avc: denied { map } for pid=88728 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645282450.337:10677): avc: denied { map } for pid=150877 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281604.370:7679): avc: denied { execute } for pid=88707 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281604.378:7697): avc: denied { lock } for pid=88723 comm="flock" path="/run/chrony-helper/lock" dev="tmpfs" ino=27715 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645282450.339:10682): avc: denied { sendto } for pid=150877 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645281604.378:7698): avc: denied { execute } for pid=88724 comm="20-chrony-dhcp" name="chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281604.382:7703): avc: denied { execute } for pid=88728 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645282450.339:10678): avc: denied { create } for pid=150877 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645281604.374:7688): avc: denied { execute_no_trans } for pid=88719 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281604.384:7713): avc: denied { remove_name } for pid=88728 comm="chronyc" name="chronyc.88728.sock" dev="tmpfs" ino=383508 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645282450.339:10683): avc: denied { sendto } for pid=26412 comm="chronyd" path="/run/chrony/chronyc.150877.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645281604.373:7687): avc: denied { map } for pid=88716 comm="rm" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645282450.333:10673): avc: denied { write } for pid=150874 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645282450.332:10669): avc: denied { map } for pid=150874 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645282450.339:10680): avc: denied { write } for pid=150877 comm="chronyc" name="chrony" dev="tmpfs" ino=17090 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645281604.371:7683): avc: denied { write } for pid=88707 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645282450.337:10677): avc: denied { execute_no_trans } for pid=150877 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281604.371:7683): avc: denied { connectto } for pid=88707 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645282450.337:10677): avc: denied { execute } for pid=150877 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281604.378:7698): avc: denied { execute_no_trans } for pid=88724 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645282450.333:10672): avc: denied { map } for pid=150874 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=40341 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281604.378:7698): avc: denied { read open } for pid=88724 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645282450.334:10675): avc: denied { getattr } for pid=150874 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=40343 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645282450.332:10669): avc: denied { execute } for pid=150874 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645282450.339:10681): avc: denied { setattr } for pid=150877 comm="chronyc" name="chronyc.150877.sock" dev="tmpfs" ino=622153 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281604.377:7696): avc: denied { write } for pid=88719 comm="chrony-helper" name="lock" dev="tmpfs" ino=27715 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281604.384:7710): avc: denied { setattr } for pid=88728 comm="chronyc" name="chronyc.88728.sock" dev="tmpfs" ino=383508 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281604.382:7703): avc: denied { read open } for pid=88728 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645282450.332:10669): avc: denied { execute } for pid=150874 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645282450.339:10680): avc: denied { dac_override } for pid=150877 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645281604.384:7709): avc: denied { write } for pid=88728 comm="chronyc" name="chrony" dev="tmpfs" ino=17090 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645282450.333:10670): avc: denied { read } for pid=150874 comm="11-dhclient" name="passwd" dev="sda1" ino=40341 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281604.371:7682): avc: denied { map } for pid=88707 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=40341 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281604.370:7679): avc: denied { execute } for pid=88707 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281604.380:7702): avc: denied { read } for pid=88724 comm="chrony-helper" name="dhclient" dev="sda1" ino=1965 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:dhcpc_state_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645282450.334:10676): avc: denied { execute } for pid=150874 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281604.371:7684): avc: denied { read } for pid=88707 comm="11-dhclient" name="passwd" dev="sda1" ino=40343 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645282450.333:10670): avc: denied { open } for pid=150874 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=40341 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281604.371:7680): avc: denied { read } for pid=88707 comm="11-dhclient" name="passwd" dev="sda1" ino=40341 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645282450.339:10682): avc: denied { write } for pid=150877 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=166687 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281604.375:7689): avc: denied { read } for pid=88719 comm="chrony-helper" name="passwd" dev="sda1" ino=40341 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281604.374:7688): avc: denied { execute } for pid=88719 comm="20-chrony-dhcp" name="chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281604.384:7713): avc: denied { unlink } for pid=88728 comm="chronyc" name="chronyc.88728.sock" dev="tmpfs" ino=383508 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281604.371:7681): avc: denied { getattr } for pid=88707 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=40341 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645282450.339:10680): avc: denied { add_name } for pid=150877 comm="chronyc" name="chronyc.150877.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645282450.339:10680): avc: denied { create } for pid=150877 comm="chronyc" name="chronyc.150877.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281604.375:7692): avc: denied { open } for pid=88719 comm="chrony-helper" path="/etc/passwd" dev="sda1" ino=40343 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281604.379:7700): avc: denied { ioctl } for pid=88724 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 ioctlcmd=0x5401 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281604.371:7684): avc: denied { open } for pid=88707 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=40343 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281604.371:7685): avc: denied { getattr } for pid=88707 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=40343 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281604.378:7698): avc: denied { map } for pid=88724 comm="chrony-helper" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281604.375:7695): avc: denied { ioctl } for pid=88719 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 ioctlcmd=0x5401 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281604.371:7686): avc: denied { execute } for pid=88707 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645282450.333:10673): avc: denied { connectto } for pid=150874 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645281604.375:7691): avc: denied { map } for pid=88719 comm="chrony-helper" path="/var/lib/sss/mc/passwd" dev="sda1" ino=40341 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281604.384:7711): avc: denied { sendto } for pid=88728 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645281604.371:7680): avc: denied { open } for pid=88707 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=40341 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281604.370:7679): avc: denied { execute_no_trans } for pid=88707 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281604.375:7694): avc: denied { getattr } for pid=88719 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281604.380:7701): avc: denied { read } for pid=88724 comm="chrony-helper" name="chrony-helper" dev="tmpfs" ino=30810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645281604.374:7688): avc: denied { read open } for pid=88719 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281604.375:7689): avc: denied { open } for pid=88719 comm="chrony-helper" path="/var/lib/sss/mc/passwd" dev="sda1" ino=40341 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645282450.333:10671): avc: denied { getattr } for pid=150874 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=40341 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281604.373:7687): avc: denied { execute_no_trans } for pid=88716 comm="20-chrony-dhcp" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281604.375:7693): avc: denied { getattr } for pid=88719 comm="chrony-helper" path="/etc/passwd" dev="sda1" ino=40343 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645282450.334:10674): avc: denied { read } for pid=150874 comm="11-dhclient" name="passwd" dev="sda1" ino=40343 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281604.370:7679): avc: denied { map } for pid=88707 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645282450.339:10679): avc: denied { dac_read_search } for pid=150877 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645282450.332:10669): avc: denied { execute_no_trans } for pid=150874 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645282450.337:10677): avc: denied { read open } for pid=150877 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281604.375:7690): avc: denied { getattr } for pid=88719 comm="chrony-helper" path="/var/lib/sss/mc/passwd" dev="sda1" ino=40341 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281604.379:7699): avc: denied { getattr } for pid=88724 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645282450.339:10684): avc: denied { unlink } for pid=150877 comm="chronyc" name="chronyc.150877.sock" dev="tmpfs" ino=622153 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281604.382:7703): avc: denied { execute_no_trans } for pid=88728 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645282450.334:10674): avc: denied { open } for pid=150874 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=40343 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281604.384:7712): avc: denied { sendto } for pid=26412 comm="chronyd" path="/run/chrony/chronyc.88728.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645281604.378:7698): avc: denied { execute } for pid=88724 comm="20-chrony-dhcp" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281604.384:7707): avc: denied { create } for pid=88728 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645281604.375:7692): avc: denied { read } for pid=88719 comm="chrony-helper" name="passwd" dev="sda1" ino=40343 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1'] [6695156] upgrade/cephfs/featureful_client/upgraded_client/{bluestore-bitmap centos_latest clusters/1-mds-2-client-micro conf/{client mds mon osd} overrides/{multimds/yes pg-warn whitelist_health whitelist_wrongly_marked_down} tasks/{0-octopus 1-client 2-upgrade 3-client-upgrade 4-compat_client 5-client-sanity}} ----------------------------------------------------------------- time: 00:18:46 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695156/ log: http://qa-proxy.ceph.com/teuthology/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695156/ SELinux denials found on ubuntu@smithi142.front.sepia.ceph.com: ['type=AVC msg=audit(1645281558.897:6950): avc: denied { open } for pid=29739 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11735 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.733:7747): avc: denied { setattr } for pid=32897 comm="chronyc" name="chronyc.32897.sock" dev="tmpfs" ino=219816 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281558.895:6945): avc: denied { map } for pid=29739 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.901:6956): avc: denied { ioctl } for pid=29745 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 ioctlcmd=0x5401 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.728:7737): avc: denied { getattr } for pid=32894 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.727:7735): avc: denied { execute } for pid=32894 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.733:7746): avc: denied { add_name } for pid=32897 comm="chronyc" name="chronyc.32897.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645281968.733:7746): avc: denied { write } for pid=32897 comm="chronyc" name="chrony" dev="tmpfs" ino=22999 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645281804.890:7421): avc: denied { read open } for pid=31542 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.897:6950): avc: denied { read } for pid=29739 comm="11-dhclient" name="passwd" dev="sda1" ino=11735 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.909:6969): avc: denied { write } for pid=29752 comm="chronyc" name="chrony" dev="tmpfs" ino=22999 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645281558.907:6963): avc: denied { execute_no_trans } for pid=29752 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.231:7354): avc: denied { map } for pid=31413 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.733:7750): avc: denied { remove_name } for pid=32897 comm="chronyc" name="chronyc.32897.sock" dev="tmpfs" ino=219816 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645281804.895:7427): avc: denied { read } for pid=31549 comm="chrony-helper" name="dhclient" dev="sda1" ino=1965 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:dhcpc_state_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645281558.909:6969): avc: denied { add_name } for pid=29752 comm="chronyc" name="chronyc.29752.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645281968.733:7748): avc: denied { sendto } for pid=32897 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645281968.728:7741): avc: denied { getattr } for pid=32894 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11735 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.907:6963): avc: denied { map } for pid=29752 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.232:7359): avc: denied { read } for pid=31413 comm="11-dhclient" name="passwd" dev="sda1" ino=11735 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.889:7420): avc: denied { map } for pid=31539 comm="rm" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.900:6954): avc: denied { execute_no_trans } for pid=29745 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.889:7420): avc: denied { execute_no_trans } for pid=31539 comm="20-chrony-dhcp" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.728:7739): avc: denied { write } for pid=32894 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281804.237:7365): avc: denied { add_name } for pid=31416 comm="chronyc" name="chronyc.31416.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645281804.232:7359): avc: denied { open } for pid=31413 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11735 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.907:6963): avc: denied { execute } for pid=29752 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.896:6949): avc: denied { write } for pid=29739 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281804.237:7367): avc: denied { sendto } for pid=31416 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645281804.237:7365): avc: denied { dac_override } for pid=31416 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645281558.896:6946): avc: denied { open } for pid=29739 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.235:7362): avc: denied { execute_no_trans } for pid=31416 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.895:6945): avc: denied { execute } for pid=29739 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.733:7748): avc: denied { write } for pid=32897 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=169119 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281804.892:7424): avc: denied { open } for pid=31542 comm="chrony-helper" path="/run/chrony-helper/lock" dev="tmpfs" ino=24791 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.896:6946): avc: denied { read } for pid=29739 comm="11-dhclient" name="passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.733:7746): avc: denied { create } for pid=32897 comm="chronyc" name="chronyc.32897.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281804.895:7426): avc: denied { read } for pid=31549 comm="chrony-helper" name="chrony-helper" dev="tmpfs" ino=21840 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645281558.909:6967): avc: denied { create } for pid=29752 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645281804.892:7424): avc: denied { write } for pid=31542 comm="chrony-helper" name="lock" dev="tmpfs" ino=24791 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.238:7369): avc: denied { unlink } for pid=31416 comm="chronyc" name="chronyc.31416.sock" dev="tmpfs" ino=197590 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281968.733:7750): avc: denied { unlink } for pid=32897 comm="chronyc" name="chronyc.32897.sock" dev="tmpfs" ino=219816 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281968.733:7745): avc: denied { dac_read_search } for pid=32897 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645281558.899:6953): avc: denied { execute_no_trans } for pid=29743 comm="20-chrony-dhcp" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.902:6957): avc: denied { write } for pid=29745 comm="chrony-helper" name="lock" dev="tmpfs" ino=24791 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.237:7368): avc: denied { sendto } for pid=26398 comm="chronyd" path="/run/chrony/chronyc.31416.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645281558.896:6947): avc: denied { getattr } for pid=29739 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.733:7746): avc: denied { dac_override } for pid=32897 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645281804.232:7360): avc: denied { getattr } for pid=31413 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11735 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.890:7421): avc: denied { execute_no_trans } for pid=31542 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.909:6969): avc: denied { dac_override } for pid=29752 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645281558.909:6971): avc: denied { write } for pid=29752 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=169119 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281804.231:7354): avc: denied { execute_no_trans } for pid=31413 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.905:6960): avc: denied { read } for pid=29748 comm="chrony-helper" name="chrony-helper" dev="tmpfs" ino=21840 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645281968.727:7735): avc: denied { map } for pid=32894 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.728:7740): avc: denied { read } for pid=32894 comm="11-dhclient" name="passwd" dev="sda1" ino=11735 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.731:7743): avc: denied { read open } for pid=32897 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.909:6969): avc: denied { create } for pid=29752 comm="chronyc" name="chronyc.29752.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281558.909:6973): avc: denied { unlink } for pid=29752 comm="chronyc" name="chronyc.29752.sock" dev="tmpfs" ino=183883 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281804.891:7423): avc: denied { ioctl } for pid=31542 comm="chrony-helper" path="/usr/libexec/chrony- helper" dev="sda1" ino=20468 ioctlcmd=0x5401 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.909:6971): avc: denied { sendto } for pid=29752 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645281804.238:7369): avc: denied { remove_name } for pid=31416 comm="chronyc" name="chronyc.31416.sock" dev="tmpfs" ino=197590 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645281558.909:6973): avc: denied { remove_name } for pid=29752 comm="chronyc" name="chronyc.29752.sock" dev="tmpfs" ino=183883 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645281804.235:7362): avc: denied { execute } for pid=31416 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.237:7367): avc: denied { write } for pid=31416 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=169119 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281558.909:6972): avc: denied { sendto } for pid=26398 comm="chronyd" path="/run/chrony/chronyc.29752.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645281968.731:7743): avc: denied { execute } for pid=32897 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.895:6945): avc: denied { execute_no_trans } for pid=29739 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.909:6968): avc: denied { dac_read_search } for pid=29752 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645281558.896:6949): avc: denied { connectto } for pid=29739 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645281804.232:7357): avc: denied { map } for pid=31413 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.895:6945): avc: denied { execute } for pid=29739 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.900:6954): avc: denied { read open } for pid=29745 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.902:6957): avc: denied { open } for pid=29745 comm="chrony-helper" path="/run/chrony-helper/lock" dev="tmpfs" ino=24791 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.731:7743): avc: denied { execute_no_trans } for pid=32897 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.237:7363): avc: denied { create } for pid=31416 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645281968.728:7740): avc: denied { open } for pid=32894 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11735 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.897:6951): avc: denied { getattr } for pid=29739 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=11735 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.903:6958): avc: denied { lock } for pid=29747 comm="flock" path="/run/chrony-helper/lock" dev="tmpfs" ino=24791 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.232:7358): avc: denied { write } for pid=31413 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281558.900:6954): avc: denied { execute } for pid=29745 comm="20-chrony-dhcp" name="chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.237:7365): avc: denied { create } for pid=31416 comm="chronyc" name="chronyc.31416.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281804.235:7362): avc: denied { map } for pid=31416 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.733:7744): avc: denied { create } for pid=32897 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645281804.231:7354): avc: denied { execute } for pid=31413 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.906:6962): avc: denied { execute } for pid=29750 comm="nm-dispatcher" name="20-chrony-onoffline" dev="sda1" ino=591 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.896:6948): avc: denied { map } for pid=29739 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.731:7743): avc: denied { map } for pid=32897 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.231:7354): avc: denied { execute } for pid=31413 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.733:7749): avc: denied { sendto } for pid=26398 comm="chronyd" path="/run/chrony/chronyc.32897.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645281804.232:7355): avc: denied { read } for pid=31413 comm="11-dhclient" name="passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.899:6953): avc: denied { map } for pid=29743 comm="rm" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.727:7735): avc: denied { execute } for pid=32894 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.887:7419): avc: denied { write } for pid=31532 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281804.235:7362): avc: denied { read open } for pid=31416 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.232:7358): avc: denied { connectto } for pid=31413 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645281968.728:7738): avc: denied { map } for pid=32894 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.891:7422): avc: denied { getattr } for pid=31542 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.232:7356): avc: denied { getattr } for pid=31413 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.232:7355): avc: denied { open } for pid=31413 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.893:7425): avc: denied { lock } for pid=31547 comm="flock" path="/run/chrony-helper/lock" dev="tmpfs" ino=24791 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.898:7428): avc: denied { create } for pid=31556 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645281804.232:7361): avc: denied { execute } for pid=31413 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.909:6970): avc: denied { setattr } for pid=29752 comm="chronyc" name="chronyc.29752.sock" dev="tmpfs" ino=183883 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281968.728:7736): avc: denied { open } for pid=32894 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.237:7366): avc: denied { setattr } for pid=31416 comm="chronyc" name="chronyc.31416.sock" dev="tmpfs" ino=197590 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645281804.237:7365): avc: denied { write } for pid=31416 comm="chronyc" name="chrony" dev="tmpfs" ino=22999 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645281804.890:7421): avc: denied { execute } for pid=31542 comm="20-chrony-dhcp" name="chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.728:7742): avc: denied { execute } for pid=32894 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.901:6955): avc: denied { getattr } for pid=29745 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281968.727:7735): avc: denied { execute_no_trans } for pid=32894 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.897:6952): avc: denied { execute } for pid=29739 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281804.237:7364): avc: denied { dac_read_search } for pid=31416 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645281968.728:7739): avc: denied { connectto } for pid=32894 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645281558.906:6962): avc: denied { execute_no_trans } for pid=29750 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/20-chrony-onoffline" dev="sda1" ino=591 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.905:6961): avc: denied { read } for pid=29748 comm="chrony-helper" name="dhclient" dev="sda1" ino=1965 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:dhcpc_state_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645281968.728:7736): avc: denied { read } for pid=32894 comm="11-dhclient" name="passwd" dev="sda1" ino=11733 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645281558.907:6963): avc: denied { read open } for pid=29752 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1'] [6695160] upgrade/cephfs/mds_upgrade_sequence/{bluestore-bitmap centos_8.stream_container_tools conf/{client mds mon osd} overrides/{pg-warn syntax whitelist_health whitelist_wrongly_marked_down} roles tasks/{0-from/pacific 1-volume/{0-create 1-ranks/1 2-allow_standby_replay/no 3-inline/yes 4-verify} 2-client 3-upgrade-with-workload 4-verify}} ----------------------------------------------------------------- time: 00:27:09 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695160/ log: http://qa-proxy.ceph.com/teuthology/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695160/ SELinux denials found on ubuntu@smithi102.front.sepia.ceph.com: ['type=AVC msg=audit(1645283227.891:10633): avc: denied { execute } for pid=147089 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645283227.896:10641): avc: denied { remove_name } for pid=147092 comm="chronyc" name="chronyc.147092.sock" dev="tmpfs" ino=607281 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645283227.894:10634): avc: denied { execute_no_trans } for pid=147092 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645282557.510:7672): avc: denied { setattr } for pid=89034 comm="chronyc" name="chronyc.89034.sock" dev="tmpfs" ino=381550 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645282557.497:7652): avc: denied { map } for pid=89014 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645282557.498:7655): avc: denied { map } for pid=89014 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=39863 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645282557.498:7656): avc: denied { connectto } for pid=89014 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645283227.896:10637): avc: denied { add_name } for pid=147092 comm="chronyc" name="chronyc.147092.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645283227.890:10627): avc: denied { read } for pid=147089 comm="11-dhclient" name="passwd" dev="sda1" ino=39863 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645283227.890:10630): avc: denied { write } for pid=147089 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645282557.511:7675): avc: denied { remove_name } for pid=89034 comm="chronyc" name="chronyc.89034.sock" dev="tmpfs" ino=381550 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645282557.511:7675): avc: denied { unlink } for pid=89034 comm="chronyc" name="chronyc.89034.sock" dev="tmpfs" ino=381550 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645282557.502:7662): avc: denied { getattr } for pid=89025 comm="chrony-helper" path="/usr/libexec/chrony- helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645283227.890:10630): avc: denied { connectto } for pid=147089 comm="11-dhclient" path="/var/lib/sss/pipes/nss" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=unix_stream_socket permissive=1', 'type=AVC msg=audit(1645283227.895:10635): avc: denied { create } for pid=147092 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645283227.896:10638): avc: denied { setattr } for pid=147092 comm="chronyc" name="chronyc.147092.sock" dev="tmpfs" ino=607281 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645283227.890:10627): avc: denied { open } for pid=147089 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=39863 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645283227.896:10637): avc: denied { write } for pid=147092 comm="chronyc" name="chrony" dev="tmpfs" ino=24636 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645282557.497:7652): avc: denied { execute } for pid=89014 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645282557.498:7656): avc: denied { write } for pid=89014 comm="11-dhclient" name="nss" dev="sda1" ino=2052 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_var_lib_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645282557.498:7654): avc: denied { getattr } for pid=89014 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=39863 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645282557.510:7671): avc: denied { dac_override } for pid=89034 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645282557.510:7671): avc: denied { write } for pid=89034 comm="chronyc" name="chrony" dev="tmpfs" ino=24636 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645282557.504:7664): avc: denied { write } for pid=89025 comm="chrony-helper" name="lock" dev="tmpfs" ino=27928 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645283227.896:10637): avc: denied { dac_override } for pid=147092 comm="chronyc" capability=1 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645282557.498:7658): avc: denied { getattr } for pid=89014 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=39865 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645283227.890:10628): avc: denied { getattr } for pid=147089 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=39863 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645283227.894:10634): avc: denied { read open } for pid=147092 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645283227.896:10641): avc: denied { unlink } for pid=147092 comm="chronyc" name="chronyc.147092.sock" dev="tmpfs" ino=607281 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645282557.509:7668): avc: denied { execute_no_trans } for pid=89034 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645282557.504:7664): avc: denied { open } for pid=89025 comm="chrony-helper" path="/run/chrony-helper/lock" dev="tmpfs" ino=27928 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645282557.510:7670): avc: denied { dac_read_search } for pid=89034 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645282557.500:7660): avc: denied { map } for pid=89022 comm="rm" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645282557.501:7661): avc: denied { execute } for pid=89025 comm="20-chrony-dhcp" name="chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645282557.510:7671): avc: denied { create } for pid=89034 comm="chronyc" name="chronyc.89034.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645283227.895:10636): avc: denied { dac_read_search } for pid=147092 comm="chronyc" capability=2 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=capability permissive=1', 'type=AVC msg=audit(1645283227.889:10626): avc: denied { execute } for pid=147089 comm="nm-dispatcher" name="bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645283227.894:10634): avc: denied { map } for pid=147092 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645282557.507:7667): avc: denied { read } for pid=89031 comm="chrony-helper" name="dhclient" dev="sda1" ino=1965 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:dhcpc_state_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645283227.890:10629): avc: denied { map } for pid=147089 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=39863 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645282557.510:7673): avc: denied { write } for pid=89034 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=163773 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645282557.501:7661): avc: denied { read open } for pid=89025 comm="20-chrony-dhcp" path="/usr/libexec/chrony- helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645282557.511:7674): avc: denied { sendto } for pid=26367 comm="chronyd" path="/run/chrony/chronyc.89034.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645282557.502:7663): avc: denied { ioctl } for pid=89025 comm="chrony-helper" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 ioctlcmd=0x5401 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645282557.501:7661): avc: denied { execute_no_trans } for pid=89025 comm="20-chrony-dhcp" path="/usr/libexec/chrony-helper" dev="sda1" ino=20468 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645282557.509:7668): avc: denied { read open } for pid=89034 comm="20-chrony-onoff" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645282557.507:7666): avc: denied { read } for pid=89031 comm="chrony-helper" name="chrony-helper" dev="tmpfs" ino=22076 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645282557.498:7653): avc: denied { open } for pid=89014 comm="11-dhclient" path="/var/lib/sss/mc/passwd" dev="sda1" ino=39863 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645283227.896:10639): avc: denied { sendto } for pid=147092 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645283227.889:10626): avc: denied { execute_no_trans } for pid=147089 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645283227.889:10626): avc: denied { execute } for pid=147089 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645282557.498:7657): avc: denied { open } for pid=89014 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=39865 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645282557.510:7673): avc: denied { sendto } for pid=89034 comm="chronyc" path="/run/chrony/chronyd.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645282557.510:7671): avc: denied { add_name } for pid=89034 comm="chronyc" name="chronyc.89034.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=dir permissive=1', 'type=AVC msg=audit(1645282557.510:7669): avc: denied { create } for pid=89034 comm="chronyc" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=udp_socket permissive=1', 'type=AVC msg=audit(1645282557.498:7653): avc: denied { read } for pid=89014 comm="11-dhclient" name="passwd" dev="sda1" ino=39863 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:sssd_public_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645283227.891:10632): avc: denied { getattr } for pid=147089 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=39865 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645283227.896:10637): avc: denied { create } for pid=147092 comm="chronyc" name="chronyc.147092.sock" scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645283227.896:10639): avc: denied { write } for pid=147092 comm="chronyc" name="chronyd.sock" dev="tmpfs" ino=163773 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=sock_file permissive=1', 'type=AVC msg=audit(1645282557.498:7659): avc: denied { execute } for pid=89014 comm="11-dhclient" name="chrony.sh" dev="sda1" ino=662 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645283227.890:10631): avc: denied { read } for pid=147089 comm="11-dhclient" name="passwd" dev="sda1" ino=39865 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645283227.894:10634): avc: denied { execute } for pid=147092 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645282557.497:7652): avc: denied { execute } for pid=89014 comm="nm-dispatcher" name="11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645282557.509:7668): avc: denied { execute } for pid=89034 comm="20-chrony-onoff" name="chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645282557.500:7660): avc: denied { execute_no_trans } for pid=89022 comm="20-chrony-dhcp" path="/usr/bin/rm" dev="sda1" ino=10810 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645282557.497:7652): avc: denied { execute_no_trans } for pid=89014 comm="nm-dispatcher" path="/etc/NetworkManager/dispatcher.d/11-dhclient" dev="sda1" ino=66 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:NetworkManager_dispatcher_script_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645283227.889:10626): avc: denied { map } for pid=147089 comm="11-dhclient" path="/usr/bin/bash" dev="sda1" ino=6040 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645283227.890:10631): avc: denied { open } for pid=147089 comm="11-dhclient" path="/etc/passwd" dev="sda1" ino=39865 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645282557.498:7657): avc: denied { read } for pid=89014 comm="11-dhclient" name="passwd" dev="sda1" ino=39865 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645283227.896:10640): avc: denied { sendto } for pid=26367 comm="chronyd" path="/run/chrony/chronyc.147092.sock" scontext=system_u:system_r:chronyd_t:s0 tcontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tclass=unix_dgram_socket permissive=1', 'type=AVC msg=audit(1645282557.509:7668): avc: denied { map } for pid=89034 comm="chronyc" path="/usr/bin/chronyc" dev="sda1" ino=12976 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyc_exec_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1645282557.504:7665): avc: denied { lock } for pid=89030 comm="flock" path="/run/chrony-helper/lock" dev="tmpfs" ino=27928 scontext=system_u:system_r:NetworkManager_dispatcher_t:s0 tcontext=system_u:object_r:chronyd_var_run_t:s0 tclass=file permissive=1'] [6695161] upgrade/octopus-x/stress-split-no-cephadm/{0-cluster/{openstack start} 1-ceph-install/octopus 1.1-pg-log-overrides/normal_pg_log 2-partial-upgrade/firsthalf 3-thrash/default 4-workload/{radosbench rbd-cls rbd-import-export rbd_api readwrite rgw_ragweed_prepare snaps-few-objects} 5-finish-upgrade 6-quincy 8-final-workload/{rbd-python snaps-many-objects} mon_election/classic objectstore/filestore-xfs thrashosds-health ubuntu_20.04} ----------------------------------------------------------------- time: 01:59:45 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695161/ log: http://qa-proxy.ceph.com/teuthology/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695161/ sentry: https://sentry.ceph.com/organizations/ceph/?query=e77652c2cea746569e2f92c3e8d8e15a Command failed on smithi195 with status 2: 'cd /home/ubuntu/cephtest/ragweed && ./bootstrap' Dead ================================================================= [6695142] upgrade/octopus-x/parallel/{0-distro/ubuntu_20.04 0-start 1-tasks mon_election/classic upgrade-sequence workload/{ec-rados-default rados_api rados_loadgenbig rbd_import_export test_rbd_api}} ----------------------------------------------------------------- time: 00:03:45 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695142/ log: http://qa-proxy.ceph.com/teuthology/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695142/ sentry: https://sentry.ceph.com/organizations/ceph/?query=5b846d3c77cf4084b57b85f16d0b64d6 {'smithi029.front.sepia.ceph.com': {'_ansible_no_log': False, 'attempts': 24, 'changed': False, 'invocation': {'module_args': {'allow_unauthenticated': False, 'autoclean': False, 'autoremove': False, 'cache_valid_time': 0, 'deb': None, 'default_release': None, 'dpkg_options': 'force-confdef,force-confold', 'force': False, 'force_apt_get': False, 'install_recommends': None, 'only_upgrade': False, 'package': None, 'policy_rc_d': None, 'purge': False, 'state': 'present', 'update_cache': True, 'upgrade': None}}, 'msg': 'Failed to update apt cache: '}} Pass ================================================================= [6695068] upgrade/octopus-x/stress-split/{0-distro/rhel_8.4_container_tools_3.0 0-roles 1-start 2-first-half-tasks/readwrite 3-stress-tasks/{radosbench rbd-cls rbd-import-export rbd_api readwrite snaps-few-objects} 4-second-half-tasks/rbd-import-export mon_election/connectivity} time: 02:05:20 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695068/ [6695069] upgrade/octopus-x/parallel/{0-distro/ubuntu_20.04 0-start 1-tasks mon_election/connectivity upgrade-sequence workload/{ec-rados-default rados_api rados_loadgenbig rbd_import_export test_rbd_api}} time: 01:08:18 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695069/ [6695071] upgrade/octopus-x/parallel/{0-distro/centos_8.stream_container_tools 0-start 1-tasks mon_election/classic upgrade-sequence workload/{ec-rados-default rados_api rados_loadgenbig rbd_import_export test_rbd_api}} time: 01:02:07 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695071/ [6695072] upgrade/pacific-x/parallel/{0-random-distro$/{ubuntu_20.04} 0-start 1-tasks mon_election/classic upgrade-sequence workload/{ec-rados-default rados_api rados_loadgenbig rbd_import_export test_rbd_api test_rbd_python}} time: 01:23:56 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695072/ [6695075] upgrade/octopus-x/stress-split-erasure-code-no-cephadm/{0-cluster/{openstack start} 1-octopus-install/octopus 1.1-pg-log-overrides/normal_pg_log 2-partial-upgrade/firsthalf 3-thrash/default 3.1-objectstore/bluestore-hybrid 4-ec-workload/{rados-ec-workload rbd-ec-workload} 5-finish-upgrade 6-quincy 7-final-workload mon_election/classic thrashosds-health ubuntu_20.04} time: 04:14:02 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695075/ [6695077] upgrade/pacific-x/stress-split/{0-distro/rhel_8.4_container_tools_rhel8 0-roles 1-start 2-first-half-tasks/snaps-few-objects 3-stress-tasks/{radosbench rbd-cls rbd-import-export rbd_api readwrite snaps-few-objects} 4-second-half-tasks/radosbench mon_election/classic} time: 02:41:32 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695077/ [6695078] upgrade/cephfs/nofs/{bluestore-bitmap centos_latest conf/{client mds mon osd} no-mds-cluster overrides/{pg-warn whitelist_health whitelist_wrongly_marked_down} tasks/{0-octopus 1-upgrade}} time: 00:09:36 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695078/ [6695079] upgrade/octopus-x/stress-split/{0-distro/rhel_8.4_container_tools_rhel8 0-roles 1-start 2-first-half-tasks/snaps-few-objects 3-stress-tasks/{radosbench rbd-cls rbd-import-export rbd_api readwrite snaps-few-objects} 4-second-half-tasks/radosbench mon_election/classic} time: 02:20:07 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695079/ [6695080] upgrade/octopus-x/parallel/{0-distro/centos_8.stream_container_tools_crun 0-start 1-tasks mon_election/connectivity upgrade-sequence workload/{ec-rados-default rados_api rados_loadgenbig rbd_import_export test_rbd_api}} time: 01:02:13 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695080/ [6695082] upgrade/octopus-x/stress-split/{0-distro/ubuntu_20.04 0-roles 1-start 2-first-half-tasks/radosbench 3-stress-tasks/{radosbench rbd-cls rbd-import-export rbd_api readwrite snaps-few-objects} 4-second-half-tasks/rbd-import-export mon_election/connectivity} time: 02:24:07 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695082/ [6695083] upgrade/pacific-x/stress-split/{0-distro/ubuntu_20.04 0-roles 1-start 2-first-half-tasks/radosbench 3-stress-tasks/{radosbench rbd-cls rbd-import-export rbd_api readwrite snaps-few-objects} 4-second-half-tasks/rbd-import-export mon_election/connectivity} time: 02:20:27 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695083/ [6695084] upgrade/octopus-x/parallel/{0-distro/rhel_8.4_container_tools_3.0 0-start 1-tasks mon_election/classic upgrade-sequence workload/{ec-rados-default rados_api rados_loadgenbig rbd_import_export test_rbd_api}} time: 01:15:35 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695084/ [6695085] upgrade/octopus-x/stress-split-erasure-code-no-cephadm/{0-cluster/{openstack start} 1-octopus-install/octopus 1.1-pg-log-overrides/short_pg_log 2-partial-upgrade/firsthalf 3-thrash/default 3.1-objectstore/filestore-xfs 4-ec-workload/{rados-ec-workload rbd-ec-workload} 5-finish-upgrade 6-quincy 7-final-workload mon_election/connectivity thrashosds-health ubuntu_20.04} time: 01:41:55 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695085/ [6695088] upgrade/pacific-x/stress-split/{0-distro/centos_8.stream_container_tools 0-roles 1-start 2-first-half-tasks/rbd-cls 3-stress-tasks/{radosbench rbd-cls rbd-import-export rbd_api readwrite snaps-few-objects} 4-second-half-tasks/radosbench mon_election/classic} time: 02:07:49 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695088/ [6695091] upgrade/octopus-x/parallel/{0-distro/rhel_8.4_container_tools_rhel8 0-start 1-tasks mon_election/connectivity upgrade-sequence workload/{ec-rados-default rados_api rados_loadgenbig rbd_import_export test_rbd_api}} time: 01:16:13 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695091/ [6695093] upgrade/octopus-x/parallel/{0-distro/ubuntu_20.04 0-start 1-tasks mon_election/classic upgrade-sequence workload/{ec-rados-default rados_api rados_loadgenbig rbd_import_export test_rbd_api}} time: 01:07:32 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695093/ [6695096] upgrade/octopus-x/parallel/{0-distro/centos_8.stream_container_tools 0-start 1-tasks mon_election/connectivity upgrade-sequence workload/{ec-rados-default rados_api rados_loadgenbig rbd_import_export test_rbd_api}} time: 01:02:05 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695096/ [6695098] upgrade/pacific-x/parallel/{0-random-distro$/{centos_8.stream_container_tools_crun} 0-start 1-tasks mon_election/connectivity upgrade-sequence workload/{ec-rados-default rados_api rados_loadgenbig rbd_import_export test_rbd_api test_rbd_python}} time: 01:16:22 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695098/ [6695100] upgrade/octopus-x/stress-split-erasure-code-no-cephadm/{0-cluster/{openstack start} 1-octopus-install/octopus 1.1-pg-log-overrides/normal_pg_log 2-partial-upgrade/firsthalf 3-thrash/default 3.1-objectstore/filestore-xfs 4-ec-workload/{rados-ec-workload rbd-ec-workload} 5-finish-upgrade 6-quincy 7-final-workload mon_election/classic thrashosds-health ubuntu_20.04} time: 02:14:49 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695100/ [6695103] upgrade/pacific-x/stress-split/{0-distro/rhel_8.4_container_tools_3.0 0-roles 1-start 2-first-half-tasks/rbd_api 3-stress-tasks/{radosbench rbd-cls rbd-import-export rbd_api readwrite snaps-few-objects} 4-second-half-tasks/radosbench mon_election/classic} time: 02:20:34 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695103/ [6695104] upgrade/octopus-x/stress-split/{0-distro/rhel_8.4_container_tools_3.0 0-roles 1-start 2-first-half-tasks/rbd_api 3-stress-tasks/{radosbench rbd-cls rbd-import-export rbd_api readwrite snaps-few-objects} 4-second-half-tasks/radosbench mon_election/classic} time: 02:17:33 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695104/ [6695106] upgrade/octopus-x/parallel/{0-distro/centos_8.stream_container_tools_crun 0-start 1-tasks mon_election/classic upgrade-sequence workload/{ec-rados-default rados_api rados_loadgenbig rbd_import_export test_rbd_api}} time: 01:01:32 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695106/ [6695107] upgrade/octopus-x/parallel/{0-distro/rhel_8.4_container_tools_3.0 0-start 1-tasks mon_election/connectivity upgrade-sequence workload/{ec-rados-default rados_api rados_loadgenbig rbd_import_export test_rbd_api}} time: 01:18:45 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695107/ [6695108] upgrade/pacific-x/stress-split/{0-distro/rhel_8.4_container_tools_rhel8 0-roles 1-start 2-first-half-tasks/readwrite 3-stress-tasks/{radosbench rbd-cls rbd-import-export rbd_api readwrite snaps-few-objects} 4-second-half-tasks/rbd-import-export mon_election/connectivity} time: 01:58:45 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695108/ [6695109] upgrade/octopus-x/stress-split/{0-distro/rhel_8.4_container_tools_rhel8 0-roles 1-start 2-first-half-tasks/readwrite 3-stress-tasks/{radosbench rbd-cls rbd-import-export rbd_api readwrite snaps-few-objects} 4-second-half-tasks/rbd-import-export mon_election/connectivity} time: 02:16:44 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695109/ [6695111] upgrade/octopus-x/stress-split-erasure-code-no-cephadm/{0-cluster/{openstack start} 1-octopus-install/octopus 1.1-pg-log-overrides/short_pg_log 2-partial-upgrade/firsthalf 3-thrash/default 3.1-objectstore/bluestore-hybrid 4-ec-workload/{rados-ec-workload rbd-ec-workload} 5-finish-upgrade 6-quincy 7-final-workload mon_election/connectivity thrashosds-health ubuntu_20.04} time: 03:37:37 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695111/ [6695114] upgrade/pacific-x/stress-split/{0-distro/ubuntu_20.04 0-roles 1-start 2-first-half-tasks/snaps-few-objects 3-stress-tasks/{radosbench rbd-cls rbd-import-export rbd_api readwrite snaps-few-objects} 4-second-half-tasks/radosbench mon_election/classic} time: 02:27:38 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695114/ [6695115] upgrade/octopus-x/parallel/{0-distro/rhel_8.4_container_tools_rhel8 0-start 1-tasks mon_election/classic upgrade-sequence workload/{ec-rados-default rados_api rados_loadgenbig rbd_import_export test_rbd_api}} time: 01:17:26 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695115/ [6695116] upgrade/octopus-x/stress-split/{0-distro/ubuntu_20.04 0-roles 1-start 2-first-half-tasks/snaps-few-objects 3-stress-tasks/{radosbench rbd-cls rbd-import-export rbd_api readwrite snaps-few-objects} 4-second-half-tasks/radosbench mon_election/classic} time: 02:20:53 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695116/ [6695118] upgrade/octopus-x/parallel/{0-distro/ubuntu_20.04 0-start 1-tasks mon_election/connectivity upgrade-sequence workload/{ec-rados-default rados_api rados_loadgenbig rbd_import_export test_rbd_api}} time: 01:07:59 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695118/ [6695119] upgrade/pacific-x/stress-split/{0-distro/centos_8.stream_container_tools 0-roles 1-start 2-first-half-tasks/radosbench 3-stress-tasks/{radosbench rbd-cls rbd-import-export rbd_api readwrite snaps-few-objects} 4-second-half-tasks/radosbench mon_election/classic} time: 02:21:17 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695119/ [6695120] upgrade/octopus-x/stress-split/{0-distro/centos_8.stream_container_tools 0-roles 1-start 2-first-half-tasks/radosbench 3-stress-tasks/{radosbench rbd-cls rbd-import-export rbd_api readwrite snaps-few-objects} 4-second-half-tasks/radosbench mon_election/classic} time: 02:15:04 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695120/ [6695122] upgrade/octopus-x/parallel/{0-distro/centos_8.stream_container_tools 0-start 1-tasks mon_election/classic upgrade-sequence workload/{ec-rados-default rados_api rados_loadgenbig rbd_import_export test_rbd_api}} time: 01:01:26 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695122/ [6695124] upgrade/pacific-x/parallel/{0-random-distro$/{centos_8.stream_container_tools} 0-start 1-tasks mon_election/classic upgrade-sequence workload/{ec-rados-default rados_api rados_loadgenbig rbd_import_export test_rbd_api test_rbd_python}} time: 01:16:40 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695124/ [6695125] upgrade/cephfs/nofs/{bluestore-bitmap centos_latest conf/{client mds mon osd} no-mds-cluster overrides/{pg-warn whitelist_health whitelist_wrongly_marked_down} tasks/{0-octopus 1-upgrade}} time: 00:09:21 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695125/ [6695126] upgrade/octopus-x/stress-split-erasure-code-no-cephadm/{0-cluster/{openstack start} 1-octopus-install/octopus 1.1-pg-log-overrides/short_pg_log 2-partial-upgrade/firsthalf 3-thrash/default 3.1-objectstore/bluestore-hybrid 4-ec-workload/{rados-ec-workload rbd-ec-workload} 5-finish-upgrade 6-quincy 7-final-workload mon_election/classic thrashosds-health ubuntu_20.04} time: 03:19:35 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695126/ [6695128] upgrade/octopus-x/parallel/{0-distro/centos_8.stream_container_tools_crun 0-start 1-tasks mon_election/connectivity upgrade-sequence workload/{ec-rados-default rados_api rados_loadgenbig rbd_import_export test_rbd_api}} time: 01:02:06 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695128/ [6695130] upgrade/pacific-x/stress-split/{0-distro/centos_8.stream_container_tools_crun 0-roles 1-start 2-first-half-tasks/rbd-cls 3-stress-tasks/{radosbench rbd-cls rbd-import-export rbd_api readwrite snaps-few-objects} 4-second-half-tasks/rbd-import-export mon_election/connectivity} time: 01:55:31 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695130/ [6695131] upgrade/octopus-x/stress-split/{0-distro/centos_8.stream_container_tools_crun 0-roles 1-start 2-first-half-tasks/rbd-cls 3-stress-tasks/{radosbench rbd-cls rbd-import-export rbd_api readwrite snaps-few-objects} 4-second-half-tasks/rbd-import-export mon_election/connectivity} time: 01:51:48 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695131/ [6695132] upgrade/octopus-x/parallel/{0-distro/rhel_8.4_container_tools_3.0 0-start 1-tasks mon_election/classic upgrade-sequence workload/{ec-rados-default rados_api rados_loadgenbig rbd_import_export test_rbd_api}} time: 01:15:28 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695132/ [6695134] upgrade/octopus-x/stress-split-erasure-code-no-cephadm/{0-cluster/{openstack start} 1-octopus-install/octopus 1.1-pg-log-overrides/normal_pg_log 2-partial-upgrade/firsthalf 3-thrash/default 3.1-objectstore/filestore-xfs 4-ec-workload/{rados-ec-workload rbd-ec-workload} 5-finish-upgrade 6-quincy 7-final-workload mon_election/connectivity thrashosds-health ubuntu_20.04} time: 02:13:52 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695134/ [6695135] upgrade/pacific-x/stress-split/{0-distro/rhel_8.4_container_tools_3.0 0-roles 1-start 2-first-half-tasks/rbd-import-export 3-stress-tasks/{radosbench rbd-cls rbd-import-export rbd_api readwrite snaps-few-objects} 4-second-half-tasks/radosbench mon_election/classic} time: 02:17:53 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695135/ [6695138] upgrade/octopus-x/stress-split/{0-distro/rhel_8.4_container_tools_3.0 0-roles 1-start 2-first-half-tasks/rbd-import-export 3-stress-tasks/{radosbench rbd-cls rbd-import-export rbd_api readwrite snaps-few-objects} 4-second-half-tasks/radosbench mon_election/classic} time: 02:20:44 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695138/ [6695139] upgrade/octopus-x/parallel/{0-distro/rhel_8.4_container_tools_rhel8 0-start 1-tasks mon_election/connectivity upgrade-sequence workload/{ec-rados-default rados_api rados_loadgenbig rbd_import_export test_rbd_api}} time: 01:17:02 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695139/ [6695141] upgrade/pacific-x/stress-split/{0-distro/rhel_8.4_container_tools_rhel8 0-roles 1-start 2-first-half-tasks/rbd_api 3-stress-tasks/{radosbench rbd-cls rbd-import-export rbd_api readwrite snaps-few-objects} 4-second-half-tasks/rbd-import-export mon_election/connectivity} time: 02:13:23 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695141/ [6695143] upgrade/octopus-x/stress-split/{0-distro/rhel_8.4_container_tools_rhel8 0-roles 1-start 2-first-half-tasks/rbd_api 3-stress-tasks/{radosbench rbd-cls rbd-import-export rbd_api readwrite snaps-few-objects} 4-second-half-tasks/rbd-import-export mon_election/connectivity} time: 01:58:55 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695143/ [6695145] upgrade/octopus-x/parallel/{0-distro/centos_8.stream_container_tools 0-start 1-tasks mon_election/connectivity upgrade-sequence workload/{ec-rados-default rados_api rados_loadgenbig rbd_import_export test_rbd_api}} time: 01:01:53 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695145/ [6695146] upgrade/pacific-x/parallel/{0-random-distro$/{ubuntu_20.04} 0-start 1-tasks mon_election/connectivity upgrade-sequence workload/{ec-rados-default rados_api rados_loadgenbig rbd_import_export test_rbd_api test_rbd_python}} time: 01:23:46 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695146/ [6695148] upgrade/octopus-x/stress-split-erasure-code-no-cephadm/{0-cluster/{openstack start} 1-octopus-install/octopus 1.1-pg-log-overrides/short_pg_log 2-partial-upgrade/firsthalf 3-thrash/default 3.1-objectstore/filestore-xfs 4-ec-workload/{rados-ec-workload rbd-ec-workload} 5-finish-upgrade 6-quincy 7-final-workload mon_election/classic thrashosds-health ubuntu_20.04} time: 01:39:13 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695148/ [6695151] upgrade/pacific-x/stress-split/{0-distro/ubuntu_20.04 0-roles 1-start 2-first-half-tasks/readwrite 3-stress-tasks/{radosbench rbd-cls rbd-import-export rbd_api readwrite snaps-few-objects} 4-second-half-tasks/radosbench mon_election/classic} time: 02:27:13 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695151/ [6695152] upgrade/octopus-x/stress-split/{0-distro/ubuntu_20.04 0-roles 1-start 2-first-half-tasks/readwrite 3-stress-tasks/{radosbench rbd-cls rbd-import-export rbd_api readwrite snaps-few-objects} 4-second-half-tasks/radosbench mon_election/classic} time: 02:23:18 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695152/ [6695154] upgrade/octopus-x/parallel/{0-distro/centos_8.stream_container_tools_crun 0-start 1-tasks mon_election/classic upgrade-sequence workload/{ec-rados-default rados_api rados_loadgenbig rbd_import_export test_rbd_api}} time: 01:02:20 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695154/ [6695155] upgrade/octopus-x/parallel/{0-distro/rhel_8.4_container_tools_3.0 0-start 1-tasks mon_election/connectivity upgrade-sequence workload/{ec-rados-default rados_api rados_loadgenbig rbd_import_export test_rbd_api}} time: 01:16:05 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695155/ [6695157] upgrade/pacific-x/stress-split/{0-distro/centos_8.stream_container_tools 0-roles 1-start 2-first-half-tasks/snaps-few-objects 3-stress-tasks/{radosbench rbd-cls rbd-import-export rbd_api readwrite snaps-few-objects} 4-second-half-tasks/rbd-import-export mon_election/connectivity} time: 02:01:34 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695157/ [6695158] upgrade/octopus-x/stress-split/{0-distro/centos_8.stream_container_tools 0-roles 1-start 2-first-half-tasks/snaps-few-objects 3-stress-tasks/{radosbench rbd-cls rbd-import-export rbd_api readwrite snaps-few-objects} 4-second-half-tasks/rbd-import-export mon_election/connectivity} time: 01:54:22 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695158/ [6695159] upgrade/octopus-x/stress-split-erasure-code-no-cephadm/{0-cluster/{openstack start} 1-octopus-install/octopus 1.1-pg-log-overrides/normal_pg_log 2-partial-upgrade/firsthalf 3-thrash/default 3.1-objectstore/bluestore-hybrid 4-ec-workload/{rados-ec-workload rbd-ec-workload} 5-finish-upgrade 6-quincy 7-final-workload mon_election/connectivity thrashosds-health ubuntu_20.04} time: 03:55:17 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695159/ [6695162] upgrade/pacific-x/stress-split/{0-distro/centos_8.stream_container_tools_crun 0-roles 1-start 2-first-half-tasks/radosbench 3-stress-tasks/{radosbench rbd-cls rbd-import-export rbd_api readwrite snaps-few-objects} 4-second-half-tasks/radosbench mon_election/classic} time: 02:30:59 info: http://pulpito.ceph.com/yuriw-2022-02-18_22:53:39-upgrade-wip-yuriw-quincy-2.18.22-distro-default-smithi/6695162/