That brings up the browser just fine, but there is not a list of alerts.
It says, "No alerts."
If the alert is ignored, it does not show in the browser as far as I know.
What I am looking for is a way to display alerts that have been ignored
and no longer display in the browser by default. Is there an option for
that? The sealert --help shows none that are obvious.
If the installation of a new policy wipes the ignore data, then that is
fine and eventually solves my issue. If it doesn't, then my question
remains.
Thanks,
John
On 05/28/2018 10:06 AM, Petr Lautrbach wrote:
On Sat, May 26, 2018 at 09:26:22PM -0000, John Griffiths wrote:
> I have marked some recurring alerts as "ignore" in sealert browser. There
have been some recent policy updates and I want to now receive alerts for those alerts to
see if they were fixed in the update.
>
> I have read the man pages for sealert and setroubleshootd and cannot find any
reference to a command or an edit to be able to stop ignoring an alert.
>
> Is there such a command? Do I have to edit a file? If so, which one?
>
You can run sealert browser (`sealert` from command line, `SELinux
Troubleshooter` from desktop ui) and go through the list of problems. When you find
the one you want to un-ignore, hit `Notify` button or delete the problem.
Petr