>Yes, another program instrumented for audit generation, needs that >capability. There's a lot of them. Someone needs to look at all the places where CAP_AUDIT_WRITE and CONTROL were and update the policy. This broke about 2-3 weeks ago. This stuff used to work. >Why wasn't this taken care of when these programs were originally >instrumented for audit? They were. Something broke a couple weeks ago. Look back when someone reported the hwclock problem. That's when all this occurred. I thought it would have been fixed, too. -Steve __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com -- fedora-selinux-list mailing list fedora-selinux-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-selinux-list
