>This solution is definitely interesting to me, have you code to implement it? The aureport command was intended to be the audit log reduction utility. It can provide lots of information about various aspects of the system beyond AVCs. for example, failed logins: aureport -ts today -l --failed failed syscalls: aureport -ts -i -s --failed failed file access: aureport -ts today -i -f --failed You can also get numeric summaries by adding --summary. -Steve __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com -- fedora-selinux-list mailing list fedora-selinux-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-selinux-list
