For cases where I can't (be bothered to take the time to) find the proper context and end up using this method, I make a habit of moving/flushing audit.log then recreating the specific issue. This way, nothing unexpected slips by.
I probably should be paying more attention to what's in there, but there's nobody paying me...
On Jan 24, 2012 10:39 PM, "Frank Murphy" <frankly3d@xxxxxxxxx> wrote:
On 25/01/12 02:03, Fedora Linux wrote:
grep /usr/sbin/httpd /var/log/audit/audit.log | audit2allow -M mypol
Comments are mine.
Do the following in a terminal:
grep /usr/sbin/httpd /var/log/audit/audit.log | audit2allow -M mypol
## it's better to change "mypol" to something more related like "myhttpd01", in case you get more alerts down the road.
semodule -i mypol.pp
# if you use the "myhttpd01" naming this would be,
# semodule -i myhttpd01.pp
I would also report the bug,
where it says so.
# you will required an account on bugzilla.redhat.com
--
Regards,
Frank Murphy
UTF_8 Encoded
--
users mailing list
users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org
-- users mailing list users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
