Cri-o: KubeDNS and other Pods stuck in container creating
I am testing out Crio on Kubernetes upon runc runtime and facing container creating issues with kube dns and other pods. These containers were stuck in creation. When i add weavnet pod networking the following error popped up.
rpc error: code = 2 desc = container create failed: container_linux.go:258: creating new parent process caused "container_linux.go:1465: running lstat on namespace path \"/proc/0/ns/ipc\" caused \"lstat /proc/0/ns/ipc: no such file or directory\ ```
NAMESPACE NAME READY STATUS RESTARTS AGE
kube-system etcd-1-crio-x-testing-kube-1-7 1/1 Running 3 6d
kube-system kube-apiserver-1-crio-x-testing-kube-1-7 1/1 Running 3 6d
kube-system kube-controller-manager-1-crio-x-testing-kube-1-7 1/1 Running 3 6d
kube-system kube-dns-2425271678-qgl73 0/3 rpc error: code = 2 desc = container create failed: container_linux.go:258: creating new parent process caused "container_linux.go:1465: running lstat on namespace path \"/proc/0/ns/ipc\" caused \"lstat /proc/0/ns/ipc: no such file or directory\""
0 6d
kube-system kube-proxy-c984c 1/1 Running 3 6d
kube-system kube-proxy-rnpw8 1/1 Running 1 6d
kube-system kube-scheduler-1-crio-x-testing-kube-1-7 1/1 Running 3 6d
kube-system weave-net-r7s59 2/2 Running 3 1h
kube-system weave-net-wf84q 2/2 Running 3 1h
sock-shop carts-511261774-p7b3f 0/1 rpc error: code = 2 desc = container create failed: container_linux.go:258: creating new parent process caused "container_linux.go:1465: running lstat on namespace path \"/proc/0/ns/ipc\" caused \"lstat /proc/0/ns/ipc: no such file or directory\""
0 6d
sock-shop carts-db-549516398-0wb0s 0/1 rpc error: code = 2 desc = container create failed: container_linux.go:258: creating new parent process caused "container_linux.go:1465: running lstat on namespace path \"/proc/0/ns/ipc\" caused \"lstat /proc/0/ns/ipc: no such file or directory
Any help would be appreciative, Cheers!
ahab94
All 10 comments
I guess first quesion, what version of CRI-O are you testing?
What OS?
rhatdan
on 9 Oct 2017
rpc error: code = 2 desc = container create failed: container_linux.go:258: creating new parent process caused "container_linux.go:1465: running lstat on namespace path \"/proc/0/ns/ipc\" caused \"lstat /proc/0/ns/ipc: no such file or directory\ ```
could you try disabling selinux and grab any avcs?
runcom
on 9 Oct 2017
👍3
@rhatdan, i am running
crio version 1.0.0-rc3-dev commit: "e5749088b22f01d0913413f770b309926eda3e28"
@runcom, disabling did the trick. As soon as i re-enabled the selinux it worked fine.
I tried to reproduce the issue by re-initiating kubeadm multiple times having selinux enabled, disabled on both master and node and vice versa and it worked fine. I think we are good to close the issue.
ahab94
on 9 Oct 2017
@ahab94 Could you grab the SELinux avc messages that you got
ausearch -m avc
rhatdan
on 9 Oct 2017
@rhatdan
I found these logs on the slave.
type=AVC msg=audit(1507551741.850:766767): avc: denied { transition } for pid=28759 comm="runc:[2:INIT]" path="/pause" dev="dm-3" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c631,c718 tclass=process
type=AVC msg=audit(1507551743.369:766771): avc: denied { transition } for pid=28878 comm="runc:[2:INIT]" path="/pause" dev="dm-5" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c492,c836 tclass=process
type=AVC msg=audit(1507551744.166:766774): avc: denied { transition } for pid=28904 comm="runc:[2:INIT]" path="/pause" dev="dm-6" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c8,c353 tclass=process
type=AVC msg=audit(1507551745.733:766778): avc: denied { transition } for pid=28976 comm="runc:[2:INIT]" path="/pause" dev="dm-7" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c699,c868 tclass=process
type=AVC msg=audit(1507551748.927:766783): avc: denied { transition } for pid=29127 comm="runc:[2:INIT]" path="/pause" dev="dm-8" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c535,c572 tclass=process
type=AVC msg=audit(1507551749.737:766784): avc: denied { transition } for pid=29200 comm="runc:[2:INIT]" path="/pause" dev="dm-10" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c399,c566 tclass=process
type=AVC msg=audit(1507551752.692:766793): avc: denied { transition } for pid=29277 comm="runc:[2:INIT]" path="/pause" dev="dm-11" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c47,c612 tclass=process
type=AVC msg=audit(1507551756.357:766807): avc: denied { transition } for pid=29427 comm="runc:[2:INIT]" path="/pause" dev="dm-12" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c262,c633 tclass=process
type=AVC msg=audit(1507551757.509:766815): avc: denied { transition } for pid=29456 comm="runc:[2:INIT]" path="/pause" dev="dm-13" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c207,c229 tclass=process
type=AVC msg=audit(1507551759.176:766818): avc: denied { transition } for pid=29549 comm="runc:[2:INIT]" path="/pause" dev="dm-14" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c343,c853 tclass=process
type=AVC msg=audit(1507551760.755:766821): avc: denied { transition } for pid=29625 comm="runc:[2:INIT]" path="/pause" dev="dm-15" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c71,c406 tclass=process
type=AVC msg=audit(1507551761.736:766824): avc: denied { transition } for pid=29723 comm="runc:[2:INIT]" path="/pause" dev="dm-16" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c92,c1000 tclass=process
type=AVC msg=audit(1507551763.086:766825): avc: denied { transition } for pid=29802 comm="runc:[2:INIT]" path="/pause" dev="dm-17" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c189,c242 tclass=process
type=AVC msg=audit(1507551815.506:766848): avc: denied { transition } for pid=30378 comm="runc:[2:INIT]" path="/pause" dev="dm-3" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c719,c806 tclass=process
type=AVC msg=audit(1507551837.284:766856): avc: denied { transition } for pid=30721 comm="runc:[2:INIT]" path="/pause" dev="dm-5" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c80,c599 tclass=process
type=AVC msg=audit(1507551857.844:766864): avc: denied { transition } for pid=31058 comm="runc:[2:INIT]" path="/pause" dev="dm-5" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c814,c841 tclass=process
type=AVC msg=audit(1507551865.604:766875): avc: denied { transition } for pid=31260 comm="runc:[2:INIT]" path="/pause" dev="dm-6" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c233,c906 tclass=process
type=AVC msg=audit(1507551866.836:766876): avc: denied { transition } for pid=31341 comm="runc:[2:INIT]" path="/pause" dev="dm-5" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c223,c1012 tclass=process
type=AVC msg=audit(1507551915.679:766892): avc: denied { transition } for pid=31700 comm="runc:[2:INIT]" path="/pause" dev="dm-5" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c55,c510 tclass=process
type=AVC msg=audit(1507551916.830:766893): avc: denied { transition } for pid=31770 comm="runc:[2:INIT]" path="/pause" dev="dm-6" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c110,c1003 tclass=process
type=AVC msg=audit(1507551947.543:766925): avc: denied { transition } for pid=32552 comm="runc:[2:INIT]" path="/pause" dev="dm-5" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c127,c911 tclass=process
type=AVC msg=audit(1507551948.215:766926): avc: denied { transition } for pid=32606 comm="runc:[2:INIT]" path="/pause" dev="dm-6" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c692,c713 tclass=process
type=AVC msg=audit(1507551949.577:766927): avc: denied { transition } for pid=32672 comm="runc:[2:INIT]" path="/pause" dev="dm-7" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c598,c1004 tclass=process
type=AVC msg=audit(1507551954.321:766931): avc: denied { transition } for pid=349 comm="runc:[2:INIT]" path="/pause" dev="dm-8" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c356 tclass=process
type=AVC msg=audit(1507551962.964:766944): avc: denied { transition } for pid=601 comm="runc:[2:INIT]" path="/pause" dev="dm-6" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c324,c555 tclass=process
type=AVC msg=audit(1507551967.684:766952): avc: denied { transition } for pid=790 comm="runc:[2:INIT]" path="/pause" dev="dm-10" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c274,c555 tclass=process
type=AVC msg=audit(1507551970.404:766954): avc: denied { transition } for pid=909 comm="runc:[2:INIT]" path="/pause" dev="dm-5" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c276,c486 tclass=process
type=AVC msg=audit(1507551978.499:766967): avc: denied { transition } for pid=1144 comm="runc:[2:INIT]" path="/pause" dev="dm-7" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c654,c756 tclass=process
type=AVC msg=audit(1507551979.535:766968): avc: denied { transition } for pid=1198 comm="runc:[2:INIT]" path="/pause" dev="dm-8" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c254,c579 tclass=process
type=AVC msg=audit(1507551986.649:766969): avc: denied { transition } for pid=1287 comm="runc:[2:INIT]" path="/pause" dev="dm-11" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c603,c992 tclass=process
type=AVC msg=audit(1507552003.180:766984): avc: denied { transition } for pid=1701 comm="runc:[2:INIT]" path="/pause" dev="dm-5" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c162,c955 tclass=process
type=AVC msg=audit(1507552010.505:766996): avc: denied { transition } for pid=1822 comm="runc:[2:INIT]" path="/pause" dev="dm-6" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c586,c709 tclass=process
type=AVC msg=audit(1507552011.676:766997): avc: denied { transition } for pid=1895 comm="runc:[2:INIT]" path="/pause" dev="dm-10" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c189,c736 tclass=process
type=AVC msg=audit(1507552012.441:766998): avc: denied { transition } for pid=1945 comm="runc:[2:INIT]" path="/pause" dev="dm-11" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c427,c650 tclass=process
type=AVC msg=audit(1507552022.023:767012): avc: denied { transition } for pid=2273 comm="runc:[2:INIT]" path="/pause" dev="dm-5" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c809,c847 tclass=process
type=AVC msg=audit(1507552024.047:767013): avc: denied { transition } for pid=2360 comm="runc:[2:INIT]" path="/pause" dev="dm-7" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c423,c546 tclass=process
type=AVC msg=audit(1507552029.454:767019): avc: denied { transition } for pid=2558 comm="runc:[2:INIT]" path="/pause" dev="dm-20" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c476,c1008 tclass=process
type=AVC msg=audit(1507552038.290:767030): avc: denied { transition } for pid=2792 comm="runc:[2:INIT]" path="/pause" dev="dm-5" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c28,c781 tclass=process
type=AVC msg=audit(1507552039.453:767031): avc: denied { transition } for pid=2863 comm="runc:[2:INIT]" path="/pause" dev="dm-10" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c792,c1016 tclass=process
type=AVC msg=audit(1507552051.170:767046): avc: denied { transition } for pid=3157 comm="runc:[2:INIT]" path="/pause" dev="dm-6" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c502,c725 tclass=process
type=AVC msg=audit(1507552053.930:767051): avc: denied { transition } for pid=3264 comm="runc:[2:INIT]" path="/pause" dev="dm-11" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c473,c972 tclass=process
type=AVC msg=audit(1507552055.332:767057): avc: denied { transition } for pid=3389 comm="runc:[2:INIT]" path="/pause" dev="dm-12" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c839,c878 tclass=process
type=AVC msg=audit(1507552059.163:767061): avc: denied { transition } for pid=3586 comm="runc:[2:INIT]" path="/pause" dev="dm-7" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c424,c917 tclass=process
type=AVC msg=audit(1507552069.177:767071): avc: denied { transition } for pid=3831 comm="runc:[2:INIT]" path="/pause" dev="dm-13" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c67,c689 tclass=process
type=AVC msg=audit(1507552069.849:767072): avc: denied { transition } for pid=3867 comm="runc:[2:INIT]" path="/pause" dev="dm-19" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c468,c711 tclass=process
type=AVC msg=audit(1507552086.457:767086): avc: denied { transition } for pid=4190 comm="runc:[2:INIT]" path="/pause" dev="dm-10" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c48,c499 tclass=process
type=AVC msg=audit(1507552091.258:767094): avc: denied { transition } for pid=4404 comm="runc:[2:INIT]" path="/pause" dev="dm-11" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c432,c948 tclass=process
type=AVC msg=audit(1507552091.946:767095): avc: denied { transition } for pid=4428 comm="runc:[2:INIT]" path="/pause" dev="dm-12" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c869,c1015 tclass=process
type=AVC msg=audit(1507552097.287:767104): avc: denied { transition } for pid=4602 comm="runc:[2:INIT]" path="/pause" dev="dm-5" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c267 tclass=process
type=AVC msg=audit(1507552102.132:767115): avc: denied { transition } for pid=4743 comm="runc:[2:INIT]" path="/pause" dev="dm-6" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c716,c890 tclass=process
type=AVC msg=audit(1507552103.586:767116): avc: denied { transition } for pid=4790 comm="runc:[2:INIT]" path="/pause" dev="dm-7" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c527,c928 tclass=process
type=AVC msg=audit(1507552105.511:767121): avc: denied { transition } for pid=4874 comm="runc:[2:INIT]" path="/pause" dev="dm-14" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c283,c944 tclass=process
type=AVC msg=audit(1507552108.242:767123): avc: denied { transition } for pid=5019 comm="runc:[2:INIT]" path="/pause" dev="dm-19" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c347,c521 tclass=process
type=AVC msg=audit(1507552118.614:767139): avc: denied { transition } for pid=5304 comm="runc:[2:INIT]" path="/pause" dev="dm-10" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c670,c953 tclass=process
type=AVC msg=audit(1507552119.734:767141): avc: denied { transition } for pid=5368 comm="runc:[2:INIT]" path="/pause" dev="dm-12" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c814,c841 tclass=process
type=AVC msg=audit(1507552125.988:767147): avc: denied { transition } for pid=5578 comm="runc:[2:INIT]" path="/pause" dev="dm-6" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c40,c249 tclass=process
type=AVC msg=audit(1507552132.850:767158): avc: denied { transition } for pid=5812 comm="runc:[2:INIT]" path="/pause" dev="dm-11" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c178,c505 tclass=process
type=AVC msg=audit(1507552137.141:767164): avc: denied { transition } for pid=5928 comm="runc:[2:INIT]" path="/pause" dev="dm-7" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c380,c646 tclass=process
type=AVC msg=audit(1507552139.043:767165): avc: denied { transition } for pid=6030 comm="runc:[2:INIT]" path="/pause" dev="dm-14" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c388,c489 tclass=process
type=AVC msg=audit(1507552147.106:767183): avc: denied { transition } for pid=6239 comm="runc:[2:INIT]" path="/pause" dev="dm-5" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c392,c605 tclass=process
type=AVC msg=audit(1507552148.764:767185): avc: denied { transition } for pid=6317 comm="runc:[2:INIT]" path="/pause" dev="dm-10" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c588,c725 tclass=process
type=AVC msg=audit(1507552151.315:767190): avc: denied { transition } for pid=6409 comm="runc:[2:INIT]" path="/pause" dev="dm-13" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c505,c640 tclass=process
type=AVC msg=audit(1507552153.457:767194): avc: denied { transition } for pid=6512 comm="runc:[2:INIT]" path="/pause" dev="dm-12" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c94,c204 tclass=process
type=AVC msg=audit(1507552155.759:767195): avc: denied { transition } for pid=6624 comm="runc:[2:INIT]" path="/pause" dev="dm-15" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c583,c713 tclass=process
type=AVC msg=audit(1507552169.590:767208): avc: denied { transition } for pid=7004 comm="runc:[2:INIT]" path="/pause" dev="dm-6" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c10,c875 tclass=process
type=AVC msg=audit(1507552170.776:767210): avc: denied { transition } for pid=7068 comm="runc:[2:INIT]" path="/pause" dev="dm-19" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c284,c658 tclass=process
type=AVC msg=audit(1507552180.544:767227): avc: denied { transition } for pid=7375 comm="runc:[2:INIT]" path="/pause" dev="dm-7" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c528,c945 tclass=process
type=AVC msg=audit(1507552181.439:767229): avc: denied { transition } for pid=7426 comm="runc:[2:INIT]" path="/pause" dev="dm-10" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c501,c664 tclass=process
type=AVC msg=audit(1507552189.899:767241): avc: denied { transition } for pid=7693 comm="runc:[2:INIT]" path="/pause" dev="dm-14" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c133,c857 tclass=process
type=AVC msg=audit(1507552192.937:767247): avc: denied { transition } for pid=7803 comm="runc:[2:INIT]" path="/pause" dev="dm-5" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c54,c531 tclass=process
type=AVC msg=audit(1507552196.190:767251): avc: denied { transition } for pid=7927 comm="runc:[2:INIT]" path="/pause" dev="dm-3" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c123,c182 tclass=process
type=AVC msg=audit(1507552198.859:767259): avc: denied { transition } for pid=8022 comm="runc:[2:INIT]" path="/pause" dev="dm-12" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c659,c979 tclass=process
type=AVC msg=audit(1507552202.772:767266): avc: denied { transition } for pid=8151 comm="runc:[2:INIT]" path="/pause" dev="dm-6" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c9,c834 tclass=process
type=AVC msg=audit(1507552206.647:767273): avc: denied { transition } for pid=8276 comm="runc:[2:INIT]" path="/pause" dev="dm-13" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c380,c555 tclass=process
type=AVC msg=audit(1507552209.148:767275): avc: denied { transition } for pid=8438 comm="runc:[2:INIT]" path="/pause" dev="dm-17" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c367,c372 tclass=process
type=AVC msg=audit(1507552209.311:767276): avc: denied { transition } for pid=8460 comm="runc:[2:INIT]" path="/pause" dev="dm-19" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c456,c1010 tclass=process
type=AVC msg=audit(1507552221.762:767289): avc: denied { transition } for pid=8790 comm="runc:[2:INIT]" path="/pause" dev="dm-8" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c525,c721 tclass=process
type=AVC msg=audit(1507552224.923:767292): avc: denied { transition } for pid=8888 comm="runc:[2:INIT]" path="/pause" dev="dm-10" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c390,c692 tclass=process
type=AVC msg=audit(1507552229.600:767300): avc: denied { transition } for pid=9090 comm="runc:[2:INIT]" path="/pause" dev="dm-3" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c421,c655 tclass=process
type=AVC msg=audit(1507552235.937:767318): avc: denied { transition } for pid=9312 comm="runc:[2:INIT]" path="/pause" dev="dm-5" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c418,c789 tclass=process
type=AVC msg=audit(1507552236.773:767319): avc: denied { transition } for pid=9343 comm="runc:[2:INIT]" path="/pause" dev="dm-7" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c138,c767 tclass=process
type=AVC msg=audit(1507552238.960:767324): avc: denied { transition } for pid=9432 comm="runc:[2:INIT]" path="/pause" dev="dm-12" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c397,c959 tclass=process
type=AVC msg=audit(1507552241.589:767327): avc: denied { transition } for pid=9571 comm="runc:[2:INIT]" path="/pause" dev="dm-11" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c22,c664 tclass=process
type=AVC msg=audit(1507552245.806:767333): avc: denied { transition } for pid=9744 comm="runc:[2:INIT]" path="/pause" dev="dm-17" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c148,c672 tclass=process
type=AVC msg=audit(1507552251.191:767345): avc: denied { transition } for pid=9877 comm="runc:[2:INIT]" path="/pause" dev="dm-6" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c556,c1021 tclass=process
type=AVC msg=audit(1507552253.935:767350): avc: denied { transition } for pid=9998 comm="runc:[2:INIT]" path="/pause" dev="dm-13" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c225,c880 tclass=process
type=AVC msg=audit(1507552254.675:767351): avc: denied { transition } for pid=10021 comm="runc:[2:INIT]" path="/pause" dev="dm-14" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c510,c679 tclass=process
type=AVC msg=audit(1507552257.370:767354): avc: denied { transition } for pid=10134 comm="runc:[2:INIT]" path="/pause" dev="dm-8" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c373,c716 tclass=process
type=AVC msg=audit(1507552320.561:36): avc: denied { read } for pid=2252 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552320.594:38): avc: denied { read } for pid=2263 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552320.599:39): avc: denied { read } for pid=2266 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552320.611:40): avc: denied { read } for pid=2267 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552320.612:41): avc: denied { read } for pid=2268 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552320.624:42): avc: denied { read } for pid=2269 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552320.638:43): avc: denied { read } for pid=2270 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552320.651:44): avc: denied { read } for pid=2271 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552320.669:45): avc: denied { read } for pid=2272 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552320.670:46): avc: denied { read } for pid=2273 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552320.671:47): avc: denied { read } for pid=2274 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552320.672:48): avc: denied { read } for pid=2275 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552320.673:49): avc: denied { read } for pid=2276 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552320.674:50): avc: denied { read } for pid=2277 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552320.675:52): avc: denied { read } for pid=2278 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552320.698:53): avc: denied { read } for pid=2280 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552320.724:55): avc: denied { read } for pid=2281 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552320.726:56): avc: denied { read } for pid=2283 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552320.729:58): avc: denied { read } for pid=2284 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552320.730:59): avc: denied { read } for pid=2285 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552320.732:61): avc: denied { read } for pid=2286 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552320.788:63): avc: denied { read } for pid=2291 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552320.789:64): avc: denied { read } for pid=2294 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552320.822:66): avc: denied { read } for pid=2297 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552320.825:67): avc: denied { read } for pid=2298 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552320.828:69): avc: denied { read } for pid=2299 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552320.829:70): avc: denied { read } for pid=2300 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552320.830:71): avc: denied { read } for pid=2301 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552320.840:73): avc: denied { read } for pid=2303 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552320.841:74): avc: denied { read } for pid=2304 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552320.842:76): avc: denied { read } for pid=2305 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552320.843:77): avc: denied { read } for pid=2306 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552320.845:79): avc: denied { read } for pid=2307 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552320.846:80): avc: denied { read } for pid=2308 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552320.847:82): avc: denied { read } for pid=2309 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552320.848:83): avc: denied { read } for pid=2310 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552320.851:85): avc: denied { read } for pid=2311 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552320.852:86): avc: denied { read } for pid=2312 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552320.856:89): avc: denied { read } for pid=2314 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552320.858:90): avc: denied { read } for pid=2315 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552320.906:92): avc: denied { read } for pid=2316 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552320.967:94): avc: denied { read } for pid=2317 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552320.980:96): avc: denied { read } for pid=2320 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552320.981:97): avc: denied { read } for pid=2321 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552320.983:99): avc: denied { read } for pid=2322 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552320.988:100): avc: denied { read } for pid=2323 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552320.990:102): avc: denied { read } for pid=2326 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552320.991:103): avc: denied { read } for pid=2327 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552320.993:105): avc: denied { read } for pid=2328 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552320.995:106): avc: denied { read } for pid=2329 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552321.005:107): avc: denied { read } for pid=2330 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552321.007:109): avc: denied { read } for pid=2331 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552321.008:110): avc: denied { read } for pid=2332 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552321.022:111): avc: denied { read } for pid=2333 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552321.038:113): avc: denied { read } for pid=2336 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552321.039:114): avc: denied { read } for pid=2337 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552321.040:116): avc: denied { read } for pid=2338 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552321.041:117): avc: denied { read } for pid=2339 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552321.042:119): avc: denied { read } for pid=2340 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552321.050:120): avc: denied { read } for pid=2341 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552321.084:121): avc: denied { read } for pid=2342 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552321.085:123): avc: denied { read } for pid=2343 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552321.086:124): avc: denied { read } for pid=2344 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552321.087:126): avc: denied { read } for pid=2345 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552321.089:127): avc: denied { read } for pid=2346 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552321.090:128): avc: denied { read } for pid=2347 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552321.091:129): avc: denied { read } for pid=2348 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552321.092:130): avc: denied { read } for pid=2349 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552321.093:131): avc: denied { read } for pid=2350 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552321.095:133): avc: denied { read } for pid=2351 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552321.096:134): avc: denied { read } for pid=2352 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552321.097:136): avc: denied { read } for pid=2353 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552321.101:137): avc: denied { read } for pid=2354 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552321.122:139): avc: denied { read } for pid=2355 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552321.219:141): avc: denied { read } for pid=2357 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552321.220:142): avc: denied { read } for pid=2358 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552321.221:144): avc: denied { read } for pid=2359 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552321.222:145): avc: denied { read } for pid=2360 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552321.223:147): avc: denied { read } for pid=2361 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552321.225:148): avc: denied { read } for pid=2362 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18670 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
type=AVC msg=audit(1507552338.175:236): avc: denied { transition } for pid=4216 comm="runc:[2:INIT]" path="/pause" dev="dm-6" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c229,c584 tclass=process
type=AVC msg=audit(1507552338.273:237): avc: denied { transition } for pid=4276 comm="runc:[2:INIT]" path="/pause" dev="dm-7" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c107,c495 tclass=process
type=AVC msg=audit(1507552339.259:243): avc: denied { transition } for pid=4408 comm="runc:[2:INIT]" path="/pause" dev="dm-8" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c508,c634 tclass=process
type=AVC msg=audit(1507552341.281:250): avc: denied { transition } for pid=4585 comm="runc:[2:INIT]" path="/pause" dev="dm-6" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c50,c230 tclass=process
type=AVC msg=audit(1507552342.275:256): avc: denied { transition } for pid=4721 comm="runc:[2:INIT]" path="/pause" dev="dm-7" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c563,c924 tclass=process
type=AVC msg=audit(1507552344.272:262): avc: denied { transition } for pid=4848 comm="runc:[2:INIT]" path="/pause" dev="dm-6" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c817,c979 tclass=process
type=AVC msg=audit(1507552345.504:275): avc: denied { transition } for pid=4974 comm="runc:[2:INIT]" path="/pause" dev="dm-7" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c161,c412 tclass=process
type=AVC msg=audit(1507552346.653:286): avc: denied { transition } for pid=5130 comm="runc:[2:INIT]" path="/pause" dev="dm-8" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c451,c464 tclass=process
type=AVC msg=audit(1507552346.683:287): avc: denied { transition } for pid=5154 comm="runc:[2:INIT]" path="/pause" dev="dm-9" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c83,c663 tclass=process
type=AVC msg=audit(1507552346.752:288): avc: denied { transition } for pid=5204 comm="runc:[2:INIT]" path="/pause" dev="dm-10" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c134,c901 tclass=process
type=AVC msg=audit(1507552348.526:293): avc: denied { transition } for pid=5407 comm="runc:[2:INIT]" path="/pause" dev="dm-6" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c987,c992 tclass=process
type=AVC msg=audit(1507552348.557:294): avc: denied { transition } for pid=5423 comm="runc:[2:INIT]" path="/pause" dev="dm-7" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c272,c883 tclass=process
type=AVC msg=audit(1507552350.808:322): avc: denied { transition } for pid=5720 comm="runc:[2:INIT]" path="/pause" dev="dm-8" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c130,c304 tclass=process
type=AVC msg=audit(1507552351.016:329): avc: denied { transition } for pid=5795 comm="runc:[2:INIT]" path="/pause" dev="dm-9" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c170,c194 tclass=process
type=AVC msg=audit(1507552351.051:330): avc: denied { transition } for pid=5850 comm="runc:[2:INIT]" path="/pause" dev="dm-10" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c491,c625 tclass=process
type=AVC msg=audit(1507552351.169:331): avc: denied { transition } for pid=5936 comm="runc:[2:INIT]" path="/pause" dev="dm-11" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c178,c184 tclass=process
type=AVC msg=audit(1507552351.213:332): avc: denied { transition } for pid=5958 comm="runc:[2:INIT]" path="/pause" dev="dm-12" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c33,c948 tclass=process
type=AVC msg=audit(1507552351.839:333): avc: denied { transition } for pid=6076 comm="runc:[2:INIT]" path="/pause" dev="dm-13" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c30,c523 tclass=process
type=AVC msg=audit(1507552353.048:338): avc: denied { transition } for pid=6244 comm="runc:[2:INIT]" path="/pause" dev="dm-6" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c133,c282 tclass=process
type=AVC msg=audit(1507552353.130:340): avc: denied { transition } for pid=6260 comm="runc:[2:INIT]" path="/pause" dev="dm-7" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c112,c142 tclass=process
type=AVC msg=audit(1507552355.428:367): avc: denied { transition } for pid=6752 comm="runc:[2:INIT]" path="/pause" dev="dm-8" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c94,c296 tclass=process
type=AVC msg=audit(1507552355.656:368): avc: denied { transition } for pid=6848 comm="runc:[2:INIT]" path="/pause" dev="dm-9" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c333,c667 tclass=process
type=AVC msg=audit(1507552355.760:369): avc: denied { transition } for pid=6903 comm="runc:[2:INIT]" path="/pause" dev="dm-10" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c245,c414 tclass=process
type=AVC msg=audit(1507552356.765:375): avc: denied { transition } for pid=7118 comm="runc:[2:INIT]" path="/pause" dev="dm-11" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c407,c885 tclass=process
type=AVC msg=audit(1507552356.940:379): avc: denied { transition } for pid=7199 comm="runc:[2:INIT]" path="/pause" dev="dm-12" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c474,c604 tclass=process
type=AVC msg=audit(1507552357.086:380): avc: denied { transition } for pid=7267 comm="runc:[2:INIT]" path="/pause" dev="dm-6" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c568,c784 tclass=process
type=AVC msg=audit(1507552358.412:394): avc: denied { transition } for pid=7489 comm="runc:[2:INIT]" path="/pause" dev="dm-13" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c23,c915 tclass=process
type=AVC msg=audit(1507552359.636:409): avc: denied { transition } for pid=7739 comm="runc:[2:INIT]" path="/pause" dev="dm-7" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c284,c534 tclass=process
type=AVC msg=audit(1507552359.678:411): avc: denied { transition } for pid=7755 comm="runc:[2:INIT]" path="/pause" dev="dm-8" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c366,c599 tclass=process
type=AVC msg=audit(1507552360.218:412): avc: denied { transition } for pid=7876 comm="runc:[2:INIT]" path="/pause" dev="dm-9" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c683,c736 tclass=process
type=AVC msg=audit(1507552361.538:419): avc: denied { transition } for pid=8053 comm="runc:[2:INIT]" path="/pause" dev="dm-6" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c97,c1022 tclass=process
type=AVC msg=audit(1507552361.669:421): avc: denied { transition } for pid=8127 comm="runc:[2:INIT]" path="/pause" dev="dm-10" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c733 tclass=process
type=AVC msg=audit(1507552361.786:422): avc: denied { transition } for pid=8194 comm="runc:[2:INIT]" path="/pause" dev="dm-11" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c41,c950 tclass=process
type=AVC msg=audit(1507552363.660:430): avc: denied { transition } for pid=8430 comm="runc:[2:INIT]" path="/pause" dev="dm-7" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c704,c792 tclass=process
type=AVC msg=audit(1507552364.508:438): avc: denied { transition } for pid=8626 comm="runc:[2:INIT]" path="/pause" dev="dm-6" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c7,c679 tclass=process
type=AVC msg=audit(1507552366.553:448): avc: denied { transition } for pid=8798 comm="runc:[2:INIT]" path="/pause" dev="dm-7" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c700,c958 tclass=process
type=AVC msg=audit(1507552367.588:454): avc: denied { transition } for pid=8932 comm="runc:[2:INIT]" path="/pause" dev="dm-6" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c574,c865 tclass=process
type=AVC msg=audit(1507552369.618:460): avc: denied { transition } for pid=9064 comm="runc:[2:INIT]" path="/pause" dev="dm-7" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c179,c674 tclass=process
type=AVC msg=audit(1507552370.711:462): avc: denied { transition } for pid=9185 comm="runc:[2:INIT]" path="/pause" dev="dm-6" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c180,c524 tclass=process
type=AVC msg=audit(1507552373.695:468): avc: denied { transition } for pid=9368 comm="runc:[2:INIT]" path="/pause" dev="dm-6" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c299,c627 tclass=process
type=AVC msg=audit(1507552376.718:474): avc: denied { transition } for pid=9495 comm="runc:[2:INIT]" path="/pause" dev="dm-6" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c352,c916 tclass=process
type=AVC msg=audit(1507552379.820:480): avc: denied { transition } for pid=9626 comm="runc:[2:INIT]" path="/pause" dev="dm-6" ino=261 scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:svirt_lxc_net_t:s0:c604,c948 tclass=process
And these on master
type=AVC msg=audit(1507507445.762:641076): avc: denied { read } for pid=30273 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18107 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:container_var_run_t:s0 tclass=file
type=AVC msg=audit(1507507445.768:641077): avc: denied { read } for pid=30274 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18107 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:container_var_run_t:s0 tclass=file
type=AVC msg=audit(1507507445.773:641079): avc: denied { read } for pid=30275 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18107 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:container_var_run_t:s0 tclass=file
type=AVC msg=audit(1507507445.784:641080): avc: denied { read } for pid=30278 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18107 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:container_var_run_t:s0 tclass=file
type=AVC msg=audit(1507507445.792:641081): avc: denied { read } for pid=30279 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18107 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:container_var_run_t:s0 tclass=file
type=AVC msg=audit(1507507445.800:641082): avc: denied { read } for pid=30280 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18107 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:container_var_run_t:s0 tclass=file
type=AVC msg=audit(1507507445.806:641083): avc: denied { read } for pid=30281 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18107 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:container_var_run_t:s0 tclass=file
type=AVC msg=audit(1507507445.816:641084): avc: denied { read } for pid=30282 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18107 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:container_var_run_t:s0 tclass=file
type=AVC msg=audit(1507507445.823:641085): avc: denied { read } for pid=30283 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18107 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:container_var_run_t:s0 tclass=file
type=AVC msg=audit(1507507445.831:641087): avc: denied { read } for pid=30284 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18107 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:container_var_run_t:s0 tclass=file
type=AVC msg=audit(1507507445.836:641088): avc: denied { read } for pid=30285 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18107 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:container_var_run_t:s0 tclass=file
type=AVC msg=audit(1507507505.858:641098): avc: denied { read } for pid=30481 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18107 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:container_var_run_t:s0 tclass=file
type=AVC msg=audit(1507507505.865:641099): avc: denied { read } for pid=30482 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18107 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:container_var_run_t:s0 tclass=file
type=AVC msg=audit(1507507505.892:641101): avc: denied { read } for pid=30485 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18107 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:container_var_run_t:s0 tclass=file
type=AVC msg=audit(1507507505.901:641102): avc: denied { read } for pid=30486 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18107 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:container_var_run_t:s0 tclass=file
type=AVC msg=audit(1507507505.908:641103): avc: denied { read } for pid=30487 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18107 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:container_var_run_t:s0 tclass=file
type=AVC msg=audit(1507507505.918:641104): avc: denied { read } for pid=30488 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18107 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:container_var_run_t:s0 tclass=file
type=AVC msg=audit(1507507505.925:641105): avc: denied { read } for pid=30489 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18107 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:container_var_run_t:s0 tclass=file
type=AVC msg=audit(1507507505.933:641106): avc: denied { read } for pid=30490 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18107 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:container_var_run_t:s0 tclass=file
type=AVC msg=audit(1507507505.941:641107): avc: denied { read } for pid=30491 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18107 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:container_var_run_t:s0 tclass=file
type=AVC msg=audit(1507507505.953:641109): avc: denied { read } for pid=30492 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18107 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:container_var_run_t:s0 tclass=file
type=AVC msg=audit(1507507505.965:641110): avc: denied { read } for pid=30493 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18107 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:container_var_run_t:s0 tclass=file
type=AVC msg=audit(1507507565.976:641120): avc: denied { read } for pid=30671 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18107 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:container_var_run_t:s0 tclass=file
type=AVC msg=audit(1507507565.980:641121): avc: denied { read } for pid=30672 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18107 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:container_var_run_t:s0 tclass=file
type=AVC msg=audit(1507507565.989:641123): avc: denied { read } for pid=30674 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18107 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:container_var_run_t:s0 tclass=file
type=AVC msg=audit(1507507565.995:641124): avc: denied { read } for pid=30676 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18107 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:container_var_run_t:s0 tclass=file
type=AVC msg=audit(1507507566.010:641125): avc: denied { read } for pid=30677 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18107 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:container_var_run_t:s0 tclass=file
type=AVC msg=audit(1507507566.017:641126): avc: denied { read } for pid=30678 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18107 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:container_var_run_t:s0 tclass=file
type=AVC msg=audit(1507507566.027:641127): avc: denied { read } for pid=30679 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18107 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:container_var_run_t:s0 tclass=file
type=AVC msg=audit(1507507566.034:641128): avc: denied { read } for pid=30680 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18107 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:container_var_run_t:s0 tclass=file
type=AVC msg=audit(1507507566.042:641129): avc: denied { read } for pid=30681 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18107 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:container_var_run_t:s0 tclass=file
type=AVC msg=audit(1507507566.057:641131): avc: denied { read } for pid=30682 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18107 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:container_var_run_t:s0 tclass=file
type=AVC msg=audit(1507507566.075:641132): avc: denied { read } for pid=30683 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18107 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:container_var_run_t:s0 tclass=file
type=AVC msg=audit(1507507626.087:641155): avc: denied { read } for pid=30890 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18107 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:container_var_run_t:s0 tclass=file
type=AVC msg=audit(1507507626.092:641156): avc: denied { read } for pid=30891 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18107 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:container_var_run_t:s0 tclass=file
type=AVC msg=audit(1507507626.106:641158): avc: denied { read } for pid=30894 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18107 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:container_var_run_t:s0 tclass=file
type=AVC msg=audit(1507507626.109:641159): avc: denied { read } for pid=30895 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18107 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:container_var_run_t:s0 tclass=file
type=AVC msg=audit(1507507626.113:641160): avc: denied { read } for pid=30896 comm="iptables" name="xtables.lock" dev="tmpfs" ino=18107 scontext=system_u:system_r:iptables_t:s0 tcontext=system_u:object_r:container_var_run_t:s0 tclass=file
The transition ones are the ones causing you the failure. This basically means cri-o was not labeled correctly (container_runtime_exec_t) at launch. Is cri-o installed in /usr/bin or /usr/local/bin?
rhatdan
on 10 Oct 2017
I have binaries in both of these folders. I guess i copied in both of these directories after build.
ls -Z /usr/bin/ | grep crio
-rwxr-xr-x. root root unconfined_u:object_r:container_runtime_exec_t:s0 crio
-rwxr-xr-x. root root unconfined_u:object_r:container_runtime_exec_t:s0 crioctl
ls -Z /usr/local/bin/ | grep crio
-rwxr-xr-x. root root unconfined_u:object_r:bin_t:s0 crio
-rwxr-xr-x. root root unconfined_u:object_r:bin_t:s0 crioctl
In crio.service /usr/bin/crio has been selected in the ExecStart.
ahab94
on 10 Oct 2017
I don't believe we have the correct labeling for /usr/local/bin on crio in RHEL yet.
Running the following should change the labels if we have it correct.
restorecon -R -v /usr/local/bin/crio*
rhatdan
on 10 Oct 2017
Restorecon didn't change that, so i changed fcontext via semanage and then restorecon worked fine.
#semanage fcontext -a -t container_runtime_exec_t /usr/local/bin/crioctl
Full path required for exclude: net:[4026532228].
#restorecon -R -v /usr/local/bin/crio*octl
Full path required for exclude: net:[4026532228].
#restorecon reset /usr/local/bin/crioctl context unconfined_u:object_r:bin_t:s0->unconfined_u:object_r:container_runtime_exec_t:s0
#ls -Z /usr/local/bin/ | grep crio
-rwxr-xr-x. root root unconfined_u:object_r:container_runtime_exec_t:s0 crio
-rwxr-xr-x. root root unconfined_u:object_r:container_runtime_exec_t:s0 crioctl
We should have the next updated container-selinux for RHEL should have the new labeling in it.
rhatdan
on 10 Oct 2017
👍1
Was this page helpful?
0 / 5 - 0 ratings
Related issues
feiskyer
路
5Comments
haircommander
路
6Comments
runcom
路
3Comments
kolyshkin
路
5Comments
kunalkushwaha
路
10Comments
Most helpful comment
could you try disabling selinux and grab any avcs?