Re: sealert won't erase some entries
John Griffiths wrote:
I need some guidance.
I have four entries that show up in sealert browser mode that will not
erase. I select them, delete them, and remove those that are marked
deleted and nothing happens. There are only four entries that do this.
The other log entires can be deleted just fine.
The four entries don't seem to cause any problems; they are just an
annoyance. Any help would be appreciated.
Are you seeing a message complaining you're not the owner of those
alerts? If memory serves me correctly the message will appear in the
status bar at the bottom of the window. If so you'll have to either su
to the owner of the alerts or login in as them in order to delete them.
If that's not the case then:
Please open a bug report (https://bugzilla.redhat.com) using the
component "setroubleshoot"
Add the description from above and then attach to the bug report this file:
/var/lib/setroubleshoot/audit_listener_database.xml
Don't forget to specify the rpm version of setroubleshoot you're using:
rpm -q setroubleshoot
--
John Dennis <jdennis(a)redhat.com>