"semanage dontaudit off" or "semodule -DB"

Dominick Grift dominick.grift at gmail.com
Tue Sep 27 17:17:35 UTC 2011


On Tue, 2011-09-27 at 17:46 +0200, Göran Uddeborg wrote:
> When trying analyze things that don't work as expected, I sometimes
> need to disable the dontaudit rules from the policy.  There seems to
> be (at least) two ways to do that:
> 
>   semanage dontaudit off
> 
> and
> 
>   semodule -DB
> 
> Is there some difference in the effect of these two commands?  Or is
> it just two ways to do the same thing?

probably the same thing.

> --
> selinux mailing list
> selinux at lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/selinux

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 836 bytes
Desc: This is a digitally signed message part
Url : http://lists.fedoraproject.org/pipermail/selinux/attachments/20110927/cb8c20fa/attachment.bin 


More information about the selinux mailing list