-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Reveals dontaudit rules in policy. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.8 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org iEYEARECAAYFAkff30kACgkQrlYvE4MpobP0IgCfTxNojL6yGB6t26Nl+aERmQc4 pJUAoNlJHmee/Q++U18HG2ty5UcECkte =qpCx -----END PGP SIGNATURE-----
--- nsapolicycoreutils/audit2allow/audit2allow 2008-01-28 16:52:25.000000000 -0500 +++ policycoreutils-2.0.44/audit2allow/audit2allow 2008-03-18 11:22:52.000000000 -0400 @@ -247,6 +247,11 @@ print "\t\tPossible mismatch between this policy and the one under which the audit message was generated.\n" print "\t\tPossible mismatch between current in-memory boolean settings vs. permanent ones.\n" continue + if rc == audit2why.DONTAUDIT: + print "\t\tUnknown - should be dontaudit'd by active policy\n", + print "\t\tPossible mismatch between this policy and the one under which the audit message was generated.\n" + print "\t\tPossible mismatch between current in-memory boolean settings vs. permanent ones.\n" + continue if rc == audit2why.BOOLEAN: if len(bools) > 1: print "\tOne of the following booleans was set incorrectly."
Attachment:
audit2why.patch.sig
Description: Binary data