Skip to Main Content

Infrastructure Software

Announcement

For appeals, questions and feedback about Oracle Forums, please email oracle-forums-moderators_us@oracle.com. Technical questions should be asked in the appropriate category. Thank you!

Selinux spice-vdagentd avc: denied High CPU usage 70%

EvgenyPrikhodkoFeb 14 2022

Oracle Linux 8.5 KVM, Oracle Linux 8.5 Gnome XRDP 

type=AVC msg=audit(1644814319.050:225652): avc:  denied  { read } for 
pid=13779 comm="spice-vdagentd" name="cgroup" dev="proc" ino=5427605
scontext=system_u:system_r:vdagent_t:s0
tcontext=system_u:system_r:unconfined_service_t:s0 tclass=file permissive=0
type=AVC msg=audit(1644814319.050:225653): avc:  denied  { read } for 
pid=13779 comm="spice-vdagentd" name="cgroup" dev="proc" ino=5427605
scontext=system_u:system_r:vdagent_t:s0
tcontext=system_u:system_r:unconfined_service_t:s0 tclass=file permissive=0
type=AVC msg=audit(1644814319.050:225654): avc:  denied  { getattr } for 
pid=13779 comm="spice-vdagentd" path="/proc/157051/status" dev="proc"
ino=5427606 scontext=system_u:system_r:vdagent_t:s0
tcontext=system_u:system_r:unconfined_service_t:s0 tclass=file permissive=0
type=AVC msg=audit(1644814319.127:225655): avc:  denied  { read } for 
pid=13779 comm="spice-vdagentd" name="cgroup" dev="proc" ino=5427605
scontext=system_u:system_r:vdagent_t:s0
tcontext=system_u:system_r:unconfined_service_t:s0 tclass=file permissive=0
type=AVC msg=audit(1644814319.127:225656): avc:  denied  { read } for 
pid=13779 comm="spice-vdagentd" name="cgroup" dev="proc" ino=5427605
scontext=system_u:system_r:vdagent_t:s0
tcontext=system_u:system_r:unconfined_service_t:s0 tclass=file permissive=0
type=AVC msg=audit(1644814319.127:225657): avc:  denied  { getattr } for 
pid=13779 comm="spice-vdagentd" path="/proc/157051/status" dev="proc"
ino=5427606 scontext=system_u:system_r:vdagent_t:s0
tcontext=system_u:system_r:unconfined_service_t:s0 tclass=file permissive=0
type=AVC msg=audit(1644814319.203:225658): avc:  denied  { read } for 
pid=13779 comm="spice-vdagentd" name="cgroup" dev="proc" ino=5427605
scontext=system_u:system_r:vdagent_t:s0
tcontext=system_u:system_r:unconfined_service_t:s0 tclass=file permissive=0
type=AVC msg=audit(1644814319.203:225659): avc:  denied  { read } for 
pid=13779 comm="spice-vdagentd" name="cgroup" dev="proc" ino=5427605
scontext=system_u:system_r:vdagent_t:s0
tcontext=system_u:system_r:unconfined_service_t:s0 tclass=file permissive=0
type=AVC msg=audit(1644814319.203:225660): avc:  denied  { getattr } for 
pid=13779 comm="spice-vdagentd" path="/proc/157051/status" dev="proc"
ino=5427606 scontext=system_u:system_r:vdagent_t:s0
tcontext=system_u:system_r:unconfined_service_t:s0 tclass=file permissive=0
type=AVC msg=audit(1644814319.284:225661): avc:  denied  { read } for 
pid=13779 comm="spice-vdagentd" name="cgroup" dev="proc" ino=5427605
scontext=system_u:system_r:vdagent_t:s0
tcontext=system_u:system_r:unconfined_service_t:s0 tclass=file permissive=0
type=AVC msg=audit(1644814319.284:225662): avc:  denied  { read } for 
pid=13779 comm="spice-vdagentd" name="cgroup" dev="proc" ino=5427605
scontext=system_u:system_r:vdagent_t:s0
tcontext=system_u:system_r:unconfined_service_t:s0 tclass=file permissive=0
type=AVC msg=audit(1644814319.285:225663): avc:  denied  { getattr } for 
pid=13779 comm="spice-vdagentd" path="/proc/157051/status" dev="proc"
ino=5427606 scontext=system_u:system_r:vdagent_t:s0
tcontext=system_u:system_r:unconfined_service_t:s0 tclass=file permissive=0
type=AVC msg=audit(1644814319.357:225664): avc:  denied  { read } for 
pid=13779 comm="spice-vdagentd" name="cgroup" dev="proc" ino=5427605
scontext=system_u:system_r:vdagent_t:s0
tcontext=system_u:system_r:unconfined_service_t:s0 tclass=file permissive=0
type=AVC msg=audit(1644814319.357:225665): avc:  denied  { read } for 
pid=13779 comm="spice-vdagentd" name="cgroup" dev="proc" ino=5427605
scontext=system_u:system_r:vdagent_t:s0
tcontext=system_u:system_r:unconfined_service_t:s0 tclass=file permissive=0
type=AVC msg=audit(1644814319.357:225666): avc:  denied  { getattr } for 
pid=13779 comm="spice-vdagentd" path="/proc/157051/status" dev="proc"
ino=5427606 scontext=system_u:system_r:vdagent_t:s0
tcontext=system_u:system_r:unconfined_service_t:s0 tclass=file permissive=0
type=AVC msg=audit(1644814319.429:225667): avc:  denied  { read } for 
pid=13779 comm="spice-vdagentd" name="cgroup" dev="proc" ino=5427605
scontext=system_u:system_r:vdagent_t:s0
tcontext=system_u:system_r:unconfined_service_t:s0 tclass=file permissive=0
type=AVC msg=audit(1644814319.429:225668): avc:  denied  { read } for 
pid=13779 comm="spice-vdagentd" name="cgroup" dev="proc" ino=5427605
scontext=system_u:system_r:vdagent_t:s0
tcontext=system_u:system_r:unconfined_service_t:s0 tclass=file permissive=0
type=AVC msg=audit(1644814319.429:225669): avc:  denied  { getattr } for 
pid=13779 comm="spice-vdagentd" path="/proc/157051/status" dev="proc"
ino=5427606 scontext=system_u:system_r:vdagent_t:s0
tcontext=system_u:system_r:unconfined_service_t:s0 tclass=file permissive=0
type=AVC msg=audit(1644814319.503:225670): avc:  denied  { read } for 
pid=13779 comm="spice-vdagentd" name="cgroup" dev="proc" ino=5427605
scontext=system_u:system_r:vdagent_t:s0
tcontext=system_u:system_r:unconfined_service_t:s0 tclass=file permissive=0
type=AVC msg=audit(1644814319.503:225671): avc:  denied  { read } for 
pid=13779 comm="spice-vdagentd" name="cgroup" dev="proc" ino=5427605
scontext=system_u:system_r:vdagent_t:s0
tcontext=system_u:system_r:unconfined_service_t:s0 tclass=file permissive=0
Comments
Post Details
Added on Feb 14 2022
4 comments
546 views