-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Deependra Singh Shekhawat wrote: > On Thu, Feb 5, 2009 at 11:26 PM, Stephen Smalley <sds@xxxxxxxxxxxxx> wrote: > >> On Wed, 2009-02-04 at 21:18 -0800, Deependra Singh Shekhawat wrote: >>> Greetings, >>> >>> >>> >>> I have written a selinux policy in fedora which actually have a >>> boolean declared within the policy and when the boolean is on some >>> allow rules are written which actually come into picture. But if the >>> boolean is off the SELinux denial message doesn't suggest the user to >>> actually switch on the boolean. I have seen in the normal case with >>> the default booleans this is not the case and the denial actually >>> suggest the user to switch on the boolean. I believe I need to do >>> something more then what I am currently doing that's why I am asking >>> here. >>> >>> >>> >>> Can you suggest me anything regarding this ? >> If you feed the denial message to audit2why, does it suggest changing >> the boolean? >> >> -- >> Stephen Smalley >> National Security Agency >> >> > > Sorry for a late reply. > > Yes it says to look for boolean settings but it doesn't mention any boolean > name as such. > > Thanks > > > ------------------------------------------------------------------------ > > -- > fedora-selinux-list mailing list > fedora-selinux-list@xxxxxxxxxx > https://www.redhat.com/mailman/listinfo/fedora-selinux-list RHEL5? -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org iEYEARECAAYFAkmTV5UACgkQrlYvE4MpobPXbwCeIBIJN389Z/FdK4oPf0eOKnNQ b1UAn0wJWamINs52ndEewDswaw6ZCr7x =4gsM -----END PGP SIGNATURE----- -- fedora-selinux-list mailing list fedora-selinux-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-selinux-list
