Re: No avcs generated after running at jobs in enforcing mode

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Bruno Wolff III wrote:
On Tue, Oct 20, 2009 at 16:52:43 -0700,
   "Anamitra Dutta Majumdar (anmajumd)"<anmajumd@xxxxxxxxx>  wrote:

We are trying to run an at job which echoes something on the terminal as
below

  at 14:53
  at>  echo "hello">  /dev/pts/1
  at>  ^D

When we run the above in the permissive mode we get hello on our term.
However when we run in enforcing mode nothing seems to happen. We do not
get any sealerts either.

Can someone let us know what is going on in the enforcing mode and what
would be a way to check the status of the job?

There might be a don't audit on that rule.

--
fedora-selinux-list mailing list
fedora-selinux-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-selinux-list

yep,
check to see if there's a mislabel use
restorecon * then
like above just use make enableaudit
while compiling the policy to generate
any avc's that are in the don't audit section.

Justin P. Mattock

--
fedora-selinux-list mailing list
fedora-selinux-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-selinux-list

[Index of Archives]     [Fedora Users]     [Fedora Desktop]     [Big List of Linux Books]     [Yosemite News]     [Yosemite Campsites]     [KDE Users]     [Gnome Users]

  Powered by Linux