"semanage dontaudit off" or "semodule -DB"

Göran Uddeborg goeran at uddeborg.se
Tue Sep 27 15:46:44 UTC 2011


When trying analyze things that don't work as expected, I sometimes
need to disable the dontaudit rules from the policy.  There seems to
be (at least) two ways to do that:

  semanage dontaudit off

and

  semodule -DB

Is there some difference in the effect of these two commands?  Or is
it just two ways to do the same thing?


More information about the selinux mailing list