On Mon, 28 Oct 2002 12:55, Tom wrote:
> Is there a way to globally turn off dontaudit ?
>
> I have a very weird problem I don't understand which doesn't give any
> error messages, so I assume that some dontaudit rule suppresses them.
> However, I don't want to go through three or four policy files, disable
> all of them, recompile, find out that it must be somewhere else and
> repeat until I'm crazy.
>
> so what is the best way to globally turn off dontaudit? grep -v
> dontaudit policy.conf ?

grep -v ^dontaudit policy.conf > p ; mv p policy.conf ; make load

I guess it might make sense to have an entry in the Makefile to allow "make dontaudit" for this...

-- 
http://www.coker.com.au/selinux/   My NSA Security Enhanced Linux packages
http://www.coker.com.au/bonnie++/  Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/    Postal SMTP/POP benchmark
http://www.coker.com.au/~russell/  My home page


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.