On Wed, 2009-02-04 at 21:18 -0800, Deependra Singh Shekhawat wrote: > > Greetings, > > > > I have written a selinux policy in fedora which actually have a > boolean declared within the policy and when the boolean is on some > allow rules are written which actually come into picture. But if the > boolean is off the SELinux denial message doesn't suggest the user to > actually switch on the boolean. I have seen in the normal case with > the default booleans this is not the case and the denial actually > suggest the user to switch on the boolean. I believe I need to do > something more then what I am currently doing that's why I am asking > here. > > > > Can you suggest me anything regarding this ? If you feed the denial message to audit2why, does it suggest changing the boolean? -- Stephen Smalley National Security Agency -- fedora-selinux-list mailing list fedora-selinux-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-selinux-list
