type=AVC msg=audit(1552226284.038:2422): avc: denied { mac_admin } for
pid=8289 comm="rsync" capability=33
scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023
tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=capability2
permissive=0
The above is from running rsync with the -X option.
$ grep -R mac_admin .
./policy/flask/access_vectors: mac_admin # unused by SELinux
./policy/modules/apps/livecd.te:dontaudit livecd_t self:capability2 mac_admin;
Grepping the git policy shows that there's a comment saying it's unused as
well as a dontaudit rule indicating that it has been used for some time.
--
My Main Blog http://etbe.coker.com.au/
My Documents Blog http://doc.coker.com.au/
