Email notifications of access denials on Fedora 18

Jamie Nguyen j at jamielinux.com
Tue Feb 12 00:24:34 UTC 2013


On 11/02/13 16:39, Daniel J Walsh wrote:
> On 02/09/2013 05:08 PM, Jamie Nguyen wrote:
>> All you had to do on RHEL 6 was "chkconfig messagebus on", but
>> I'm not sure how to enable setroubleshoot email notifications on
>> Fedora 18.
> 
> setroubleshootd is started via dbus activation.  auditd is the tool
> you need to activated
> 
> auditd watches for all audit messages and sends them to its
> dispatches. sedispatch is the setroubleshoot dispatcher which
> watches for an SELinux AVC, and then formats and sends a dbus
> message to setroubleshootd.  dbus will activated setroubleshootd if
> it is not running.

Ahh ok. I have auditd running already but a quick look at man
audit.conf explains that this option can be used:

action_mail_account = j at jamielinux.com

Thanks! Working as expected.

-- 
Jamie Nguyen




More information about the selinux mailing list