Re: audit2 in FC4T2

On Tuesday 12 April 2005 18:57, Russell Coker <russell@coker.com.au> wrote:
> It seems that auditd now logs to /var/log/audit/audit.log. I've attached a
> fixed version of auditd.fc.

Had a second problem, auditctl didn't work if initrc_t wasn't unrestricted. I've attached a new auditd.fc which labels auditctl as auditd_exec_t.

Also in auditd.te log_domain needs to be changed to logdir_domain.

-- 
http://www.coker.com.au/selinux/   My NSA Security Enhanced Linux packages
http://www.coker.com.au/bonnie++/  Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/    Postal SMTP/POP benchmark
http://www.coker.com.au/~russell/  My home page



--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.



text/plain attachment: auditd.fc