No, although it would be cool if you could figure a fast way of doing this. You could get a list of all attributes and apply them one at a time and see if any allow the access, this is how we check with booleans, although I am not sure you could do this quickly. ----- Original Message ----- From: "Joe Nall" <joe@xxxxxxxx> To: selinux@xxxxxxxxxxxxxxxxxxxxxxx Sent: Monday, January 23, 2012 2:12:57 PM Subject: Constraint violation question When I'm tracking down a constraint violation, is there any automated way to determine which constraint is being violated? joe -- selinux mailing list selinux@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/selinux -- selinux mailing list selinux@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/selinux
