"semanage dontaudit off" or "semodule -DB"

Daniel J Walsh dwalsh at redhat.com
Tue Sep 27 17:44:37 UTC 2011


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 09/27/2011 11:46 AM, Göran Uddeborg wrote:
> When trying analyze things that don't work as expected, I
> sometimes need to disable the dontaudit rules from the policy.
> There seems to be (at least) two ways to do that:
> 
> semanage dontaudit off
> 
> and
> 
> semodule -DB
> 
> Is there some difference in the effect of these two commands?  Or
> is it just two ways to do the same thing? -- selinux mailing list 
> selinux at lists.fedoraproject.org 
> https://admin.fedoraproject.org/mailman/listinfo/selinux
Should be the same.


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk6CC4UACgkQrlYvE4MpobMj2wCg4c1O3kNLS1fk2gudc/4Cnymo
+r8AoLpTMwB6vtfrI9XUDnR3NvuclZdq
=l5EE
-----END PGP SIGNATURE-----


More information about the selinux mailing list