On Thu, Feb 5, 2009 at 11:26 PM, Stephen Smalley <sds@xxxxxxxxxxxxx> wrote:
On Wed, 2009-02-04 at 21:18 -0800, Deependra Singh Shekhawat wrote:If you feed the denial message to audit2why, does it suggest changing
>
> Greetings,
>
>
>
> I have written a selinux policy in fedora which actually have a
> boolean declared within the policy and when the boolean is on some
> allow rules are written which actually come into picture. But if the
> boolean is off the SELinux denial message doesn't suggest the user to
> actually switch on the boolean. I have seen in the normal case with
> the default booleans this is not the case and the denial actually
> suggest the user to switch on the boolean. I believe I need to do
> something more then what I am currently doing that's why I am asking
> here.
>
>
>
> Can you suggest me anything regarding this ?
the boolean?
--
Stephen Smalley
National Security Agency
Sorry for a late reply.
Yes it says to look for boolean settings but it doesn't mention any boolean name as such.
Thanks
--
Type bits /keyID Date User ID
pub 1024D/483B234C 2007/06/29 Deependra Singh Shekhawat (Fedora Project) <jeevanullas@xxxxxxxxx>
Key fingerprint = ED45 62EA A4D7 53FB 44C7 774A D55B F3F0 483B 234C
-- fedora-selinux-list mailing list fedora-selinux-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-selinux-list