Re: FC4 update and SELINUX
Richard Irving wrote:
I seem to remember an email passing this way
that the latest FC4 targeted update,
nagios stopped working.
I recall the response was
"setenforce permissive, and capture
the audit trail"... or something of that nature.
Can anyone help refresh my memory ?
As, I just got around to testing FC4 on an AMD64,
with it set to "permissive" it -all- works..
with NO AVC messages...
Are you looking in /var/log/audit/audit.log for avcs?
You can turn off all the dontaudit rules by installing
selinux-policy-targeted-source
cd /etc/selinux/targeted/src/policy
make enableaudit; make load
make clean; make load will set it back.
and with it set to "enforcing", it stops
working ...
with NO AVC messages.
I tried "audit2allow -i /dev/null",
but for some reason, that doesn't help me write policy.
:-P
Anyone have more informative output, or subtle clues ?
:-\
TIA!
--
fedora-selinux-list mailing list
fedora-selinux-list(a)redhat.com
https://www.redhat.com/mailman/listinfo/fedora-selinux-list
--