Re: bloody links!
> What am I doing wrong?!
>
Using bind mounts instead of symlinks will help.
It did!
I added "/apps/var/log /var/log none bind 0 0" to my fstab file and 2 of
the three alerts are now gone. I am still getting this though:
kernel: type=1400 audit(1278074918.050:4): avc: denied { write } for
pid=1557 comm="login" name="log" dev=sdc ino=16386
scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023
tcontext=system_u:object_r:var_log_t:s0 tclass=dir
This happens when I try to log in to the console. Any ideas?