-
Notifications
You must be signed in to change notification settings - Fork 49
getting "avc: denied" messages in system logs #696
Description
On applying Flatcar recommendations as mentioned in https://www.flatcar.org/docs/latest/setup/security/selinux/ . when checking system logs getting many messages as "avc: denied". what we have to do now?
avc log message-
" localhost kernel: audit: type=1400 audit(1648446800.796:86): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0
localhost kernel: audit: type=1400 audit(1648446800.796:91): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0
localhost audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 "