Re: does SELinux can log all the files access?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Thu, Aug 13, 2009 at 07:18:17PM +0800, Bai Shuwei wrote:
> Hi, ALL:
>      I cannot find any log tools to log all the files access, including
> delete/remove/read/write operations. So i want to know whether SELinux
> upport the functions. Thanks for your responce!
> 
> Best Regards!

the audit suite can do logging: see man auditctl.
You can get selinux to log grants by adding auditallow rules.
By default selinux logs denied access unless the denial is hidden using dontaudit.

> 
> Bai Shuwei
> 
> -- 
> Love other people, as same as love yourself!
> Don't think all the time, do it by your hands!
> 
> Personal URL: http://dslab.lzu.edu.cn:8080/members/baishw/
> E-Mail: baishuwei@xxxxxxxxx or baishuwei@xxxxxxxxxxxxxxxx

> --
> fedora-selinux-list mailing list
> fedora-selinux-list@xxxxxxxxxx
> https://www.redhat.com/mailman/listinfo/fedora-selinux-list

Attachment: pgpFTQp1Ga3JD.pgp
Description: PGP signature

--
fedora-selinux-list mailing list
fedora-selinux-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-selinux-list

[Index of Archives]     [Fedora Users]     [Fedora Desktop]     [Big List of Linux Books]     [Yosemite News]     [Yosemite Campsites]     [KDE Users]     [Gnome Users]

  Powered by Linux