Re: FC4 update and SELINUX

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Richard Irving wrote:
 I seem to remember an email passing this way
that the latest FC4 targeted update,
nagios stopped working.

I recall the response was
"setenforce permissive, and capture
the audit trail"... or something of that nature.

Can anyone help refresh my memory ?

As, I just got around to testing FC4 on an AMD64,
with it set to "permissive" it -all- works..
with NO AVC messages...

Are you looking in /var/log/audit/audit.log for avcs?

You can turn off all the dontaudit rules by installing selinux-policy-targeted-source
cd /etc/selinux/targeted/src/policy
make enableaudit; make load

make clean; make load will set it back.


and with it set to "enforcing", it stops
working ...
with NO AVC messages.

I tried "audit2allow -i /dev/null",
but for some reason, that doesn't help me write policy.

:-P

Anyone have more informative output, or subtle clues ?

:-\

TIA!





--
fedora-selinux-list mailing list
fedora-selinux-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-selinux-list


--


--
fedora-selinux-list mailing list
fedora-selinux-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-selinux-list

[Index of Archives]     [Fedora Users]     [Fedora Desktop]     [Big List of Linux Books]     [Yosemite News]     [Yosemite Campsites]     [KDE Users]     [Gnome Users]

  Powered by Linux