Skip to content

Instantly share code, notes, and snippets.

@argent-smith
Created February 7, 2017 09:32
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save argent-smith/890e21102af53bcb1bccf7686ec27d12 to your computer and use it in GitHub Desktop.
Save argent-smith/890e21102af53bcb1bccf7686ec27d12 to your computer and use it in GitHub Desktop.
Feb 07 09:29:36 boinc audit[3706]: AVC avc: denied { create } for pid=3706 comm="rancher-net" scontext=system_u:system_r:svirt_lxc_net_t:s0:c234,c943 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c234,c943 tclass=netlink_xfrm_socket permissive=1
Feb 07 09:29:36 boinc audit[3706]: SYSCALL arch=c000003e syscall=41 success=yes exit=7 a0=10 a1=3 a2=6 a3=0 items=0 ppid=3466 pid=3706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="rancher-net" exe="/usr/bin/rancher-net" subj=system_u:system_r:svirt_lxc_net_t:s0:c234,c943 key=(null)
Feb 07 09:29:36 boinc kernel: audit: type=1400 audit(1486459776.366:99): avc: denied { create } for pid=3706 comm="rancher-net" scontext=system_u:system_r:svirt_lxc_net_t:s0:c234,c943 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c234,c943 tclass=netlink_xfrm_socket permissive=1
Feb 07 09:29:36 boinc kernel: audit: type=1300 audit(1486459776.366:99): arch=c000003e syscall=41 success=yes exit=7 a0=10 a1=3 a2=6 a3=0 items=0 ppid=3466 pid=3706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="rancher-net" exe="/usr/bin/rancher-net" subj=system_u:system_r:svirt_lxc_net_t:s0:c234,c943 key=(null)
Feb 07 09:29:36 boinc kernel: audit: type=1327 audit(1486459776.366:99): proctitle=72616E636865722D6E6574002D690031302E34322E3235342E3139372F3136002D2D7069642D66696C65002F7661722F72756E2F72616E636865722D6E65742E706964002D2D67636D3D74727565002D2D7573652D6D65746164617461002D2D636861726F6E2D6C61756E6368002D2D69707365632D636F6E666967002F6574
Feb 07 09:29:36 boinc audit: PROCTITLE proctitle=72616E636865722D6E6574002D690031302E34322E3235342E3139372F3136002D2D7069642D66696C65002F7661722F72756E2F72616E636865722D6E65742E706964002D2D67636D3D74727565002D2D7573652D6D65746164617461002D2D636861726F6E2D6C61756E6368002D2D69707365632D636F6E666967002F6574
Feb 07 09:29:36 boinc audit[3706]: AVC avc: denied { bind } for pid=3706 comm="rancher-net" scontext=system_u:system_r:svirt_lxc_net_t:s0:c234,c943 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c234,c943 tclass=netlink_xfrm_socket permissive=1
Feb 07 09:29:36 boinc kernel: audit: type=1400 audit(1486459776.389:100): avc: denied { bind } for pid=3706 comm="rancher-net" scontext=system_u:system_r:svirt_lxc_net_t:s0:c234,c943 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c234,c943 tclass=netlink_xfrm_socket permissive=1
Feb 07 09:29:36 boinc kernel: audit: type=1300 audit(1486459776.389:100): arch=c000003e syscall=49 success=yes exit=0 a0=7 a1=c42036f184 a2=c a3=0 items=0 ppid=3466 pid=3706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="rancher-net" exe="/usr/bin/rancher-net" subj=system_u:system_r:svirt_lxc_net_t:s0:c234,c943 key=(null)
Feb 07 09:29:36 boinc audit[3706]: SYSCALL arch=c000003e syscall=49 success=yes exit=0 a0=7 a1=c42036f184 a2=c a3=0 items=0 ppid=3466 pid=3706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="rancher-net" exe="/usr/bin/rancher-net" subj=system_u:system_r:svirt_lxc_net_t:s0:c234,c943 key=(null)
Feb 07 09:29:36 boinc kernel: audit: type=1327 audit(1486459776.389:100): proctitle=72616E636865722D6E6574002D690031302E34322E3235342E3139372F3136002D2D7069642D66696C65002F7661722F72756E2F72616E636865722D6E65742E706964002D2D67636D3D74727565002D2D7573652D6D65746164617461002D2D636861726F6E2D6C61756E6368002D2D69707365632D636F6E666967002F6574
Feb 07 09:29:36 boinc audit: PROCTITLE proctitle=72616E636865722D6E6574002D690031302E34322E3235342E3139372F3136002D2D7069642D66696C65002F7661722F72756E2F72616E636865722D6E65742E706964002D2D67636D3D74727565002D2D7573652D6D65746164617461002D2D636861726F6E2D6C61756E6368002D2D69707365632D636F6E666967002F6574
Feb 07 09:29:36 boinc audit[3706]: AVC avc: denied { write } for pid=3706 comm="rancher-net" scontext=system_u:system_r:svirt_lxc_net_t:s0:c234,c943 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c234,c943 tclass=netlink_xfrm_socket permissive=1
Feb 07 09:29:36 boinc kernel: audit: type=1400 audit(1486459776.411:101): avc: denied { write } for pid=3706 comm="rancher-net" scontext=system_u:system_r:svirt_lxc_net_t:s0:c234,c943 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c234,c943 tclass=netlink_xfrm_socket permissive=1
Feb 07 09:29:36 boinc kernel: audit: type=1400 audit(1486459776.411:101): avc: denied { nlmsg_read } for pid=3706 comm="rancher-net" scontext=system_u:system_r:svirt_lxc_net_t:s0:c234,c943 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c234,c943 tclass=netlink_xfrm_socket permissive=1
Feb 07 09:29:36 boinc audit[3706]: AVC avc: denied { nlmsg_read } for pid=3706 comm="rancher-net" scontext=system_u:system_r:svirt_lxc_net_t:s0:c234,c943 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c234,c943 tclass=netlink_xfrm_socket permissive=1
Feb 07 09:29:36 boinc audit[3706]: SYSCALL arch=c000003e syscall=44 success=yes exit=32 a0=7 a1=c420205ae0 a2=20 a3=0 items=0 ppid=3466 pid=3706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="rancher-net" exe="/usr/bin/rancher-net" subj=system_u:system_r:svirt_lxc_net_t:s0:c234,c943 key=(null)
Feb 07 09:29:36 boinc kernel: audit: type=1300 audit(1486459776.411:101): arch=c000003e syscall=44 success=yes exit=32 a0=7 a1=c420205ae0 a2=20 a3=0 items=0 ppid=3466 pid=3706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="rancher-net" exe="/usr/bin/rancher-net" subj=system_u:system_r:svirt_lxc_net_t:s0:c234,c943 key=(null)
Feb 07 09:29:36 boinc kernel: audit: type=1327 audit(1486459776.411:101): proctitle=72616E636865722D6E6574002D690031302E34322E3235342E3139372F3136002D2D7069642D66696C65002F7661722F72756E2F72616E636865722D6E65742E706964002D2D67636D3D74727565002D2D7573652D6D65746164617461002D2D636861726F6E2D6C61756E6368002D2D69707365632D636F6E666967002F6574
Feb 07 09:29:36 boinc audit: PROCTITLE proctitle=72616E636865722D6E6574002D690031302E34322E3235342E3139372F3136002D2D7069642D66696C65002F7661722F72756E2F72616E636865722D6E65742E706964002D2D67636D3D74727565002D2D7573652D6D65746164617461002D2D636861726F6E2D6C61756E6368002D2D69707365632D636F6E666967002F6574
Feb 07 09:29:36 boinc audit[3706]: AVC avc: denied { getattr } for pid=3706 comm="rancher-net" scontext=system_u:system_r:svirt_lxc_net_t:s0:c234,c943 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c234,c943 tclass=netlink_xfrm_socket permissive=1
Feb 07 09:29:36 boinc audit[3706]: SYSCALL arch=c000003e syscall=51 success=yes exit=0 a0=7 a1=c4200df618 a2=c4200df614 a3=0 items=0 ppid=3466 pid=3706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="rancher-net" exe="/usr/bin/rancher-net" subj=system_u:system_r:svirt_lxc_net_t:s0:c234,c943 key=(null)
Feb 07 09:29:36 boinc audit: PROCTITLE proctitle=72616E636865722D6E6574002D690031302E34322E3235342E3139372F3136002D2D7069642D66696C65002F7661722F72756E2F72616E636865722D6E65742E706964002D2D67636D3D74727565002D2D7573652D6D65746164617461002D2D636861726F6E2D6C61756E6368002D2D69707365632D636F6E666967002F6574
Feb 07 09:29:36 boinc audit[3706]: AVC avc: denied { read } for pid=3706 comm="rancher-net" scontext=system_u:system_r:svirt_lxc_net_t:s0:c234,c943 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c234,c943 tclass=netlink_xfrm_socket permissive=1
Feb 07 09:29:36 boinc audit[3706]: SYSCALL arch=c000003e syscall=45 success=yes exit=1568 a0=7 a1=c4200e8000 a2=1000 a3=0 items=0 ppid=3466 pid=3706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="rancher-net" exe="/usr/bin/rancher-net" subj=system_u:system_r:svirt_lxc_net_t:s0:c234,c943 key=(null)
Feb 07 09:29:36 boinc audit: PROCTITLE proctitle=72616E636865722D6E6574002D690031302E34322E3235342E3139372F3136002D2D7069642D66696C65002F7661722F72756E2F72616E636865722D6E65742E706964002D2D67636D3D74727565002D2D7573652D6D65746164617461002D2D636861726F6E2D6C61756E6368002D2D69707365632D636F6E666967002F6574
Feb 07 09:29:37 boinc dockerd[878]: time="2017-02-07T09:29:37.566049077Z" level=warning msg="Volume driver convoy-nfs returned an error while trying to query its capabilities, using default capabilties: VolumeDriver.Capabilities: Handler not found: POST /VolumeDriver.Capabilities"
Feb 07 09:29:37 boinc dockerd[878]: time="2017-02-07T09:29:37.819778956Z" level=error msg="Handler for POST /v1.22/containers/create returned error: SELinux relabeling of /var/lib/rancher/convoy/convoy-nfs-ce7e9765-cece-4eb8-b583-e699fe710268/mnt/boinc-data-1 is not allowed: \"operation not supported\""
Feb 07 09:29:37 boinc dockerd[878]: time="2017-02-07T09:29:37.820306289Z" level=error msg="Handler for GET /v1.22/containers/aff7c239f2afda1b8d93b428a71f5b33e208769a90925c4ac4dafe8eec2f5677/json returned error: No such container: aff7c239f2afda1b8d93b428a71f5b33e208769a90925c4ac4dafe8eec2f5677"
Feb 07 09:29:37 boinc dockerd[878]: time="2017-02-07T09:29:37.898464104Z" level=warning msg="Volume driver convoy-nfs returned an error while trying to query its capabilities, using default capabilties: VolumeDriver.Capabilities: Handler not found: POST /VolumeDriver.Capabilities"
Feb 07 09:29:38 boinc dockerd[878]: time="2017-02-07T09:29:38.103499497Z" level=error msg="Handler for POST /v1.22/containers/create returned error: SELinux relabeling of /var/lib/rancher/convoy/convoy-nfs-ce7e9765-cece-4eb8-b583-e699fe710268/mnt/boinc-data-1 is not allowed: \"operation not supported\""
Feb 07 09:29:38 boinc dockerd[878]: time="2017-02-07T09:29:38.105386690Z" level=error msg="Handler for GET /v1.22/containers/0ee5eb8867c3836fe4a99887776ce27a6d1f76a5aeb924505a0e19555d155110/json returned error: No such container: 0ee5eb8867c3836fe4a99887776ce27a6d1f76a5aeb924505a0e19555d155110"
Feb 07 09:29:38 boinc dockerd[878]: time="2017-02-07T09:29:38.190119809Z" level=warning msg="Volume driver convoy-nfs returned an error while trying to query its capabilities, using default capabilties: VolumeDriver.Capabilities: Handler not found: POST /VolumeDriver.Capabilities"
Feb 07 09:29:38 boinc dockerd[878]: time="2017-02-07T09:29:38.390910297Z" level=error msg="Handler for POST /v1.22/containers/create returned error: SELinux relabeling of /var/lib/rancher/convoy/convoy-nfs-ce7e9765-cece-4eb8-b583-e699fe710268/mnt/boinc-data-1 is not allowed: \"operation not supported\""
Feb 07 09:29:38 boinc dockerd[878]: time="2017-02-07T09:29:38.391832356Z" level=error msg="Handler for GET /v1.22/containers/dcc37001f11179406d9499120e576e55545537d93ec12a3f523a2fca42a0412d/json returned error: No such container: dcc37001f11179406d9499120e576e55545537d93ec12a3f523a2fca42a0412d"
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment