|
You can try searching you audit by using this command: ausearch -m avc for today's denial messages : ausearch -m avc -ts today > Date: Tue, 18 Aug 2009 08:01:57 +0100 > From: paul@xxxxxxxxxxxx > To: olivares14031@xxxxxxxxx > CC: fedora-selinux-list@xxxxxxxxxx > Subject: Re: setroubleshooter not filing bugs, is there another way > > On Mon, 17 Aug 2009 19:53:50 -0700 (PDT) > Antonio Olivares <olivares14031@xxxxxxxxx> wrote: > > --- On Mon, 8/17/09, Tom London <selinux@xxxxxxxxx> wrote: > > > > > From: Tom London <selinux@xxxxxxxxx> > > > Subject: Re: setroubleshooter not filing bugs, is there another way > > > To: "Antonio Olivares" <olivares14031@xxxxxxxxx> > > > Cc: fedora-selinux-list@xxxxxxxxxx > > > Date: Monday, August 17, 2009, 4:20 PM > > > On Mon, Aug 17, 2009 at 4:12 PM, > > > Antonio > > > Olivares<olivares14031@xxxxxxxxx> > > > wrote: > > > > Dear fellow selinux experts, > > > > > > > > I am encountering a problem with setroubleshooter and > > > avc denials for wine. It gives me a fatal error report, > > > but I can't copy + paste like I used to, I tried to file a > > > bugzilla report but the process hangs and it is not being > > > sent. Is there another way to capture the report so I can > > > send in the avc denials? > > > > > > > > I am running xfce fully updated in rawhide. I try to > > > dmesg but get no avcs and I can't run windows programs under > > > wine without seeing the setroubleshoot(er) go crazy :( > > > > > > > > Thanks, > > > > > > > > Antonio > > > > > > > > > > If you are getting AVCs, you should see in > > > /var/log/messages lines > > > that look like: > > > > > > Aug 17 13:08:42 tlondon setroubleshoot: SELinux is > > > preventing abrt > > > (initrc_t) "add_name" var_t. For complete SELinux messages. > > > run > > > sealert -l 41767f84-0e7c-4e14-a318-8f2f97877019 > > > > > > You should be able to run "sealert" with the arguments in > > > the message > > > to produce a text version of the alert that you can > > > copy/paste into a > > > bugzilla. > > > > > > tom > > > -- > > > Tom London > > > > > > > Thanks Tom for your guidance. Tomorrow as I get to work and get the > > alert(s) will try to capture following your advice and mail them to > > list. > > Bear in mind that if you're running auditd, the messages will be > in /var/log/audit/audit.log rather than /var/log/messages. > > Paul. > > -- > fedora-selinux-list mailing list > fedora-selinux-list@xxxxxxxxxx > https://www.redhat.com/mailman/listinfo/fedora-selinux-list Internet Explorer 8 - accelerate your Hotmail. Download Internet Explorer 8 |
-- fedora-selinux-list mailing list fedora-selinux-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-selinux-list
