selinux sandbox not useful [preauth] : 211 time(s)

[Reindl Harald]

Am 25.12.2012 04:51, schrieb Tom Horsley:
> On Tue, 25 Dec 2012 04:34:13 +0100
> Reindl Harald wrote:
> 
>> is it possible on systems with selinux completly disabled to
>> get rid of this messages in /var/log/secure everytime a
>> ssh-session is opened?
> 
> I don't know how to get rid of the source of the message,
> but I have discovered the way to keep drivel from cluttering
> up the logs:
> 
> I create a file named /etc/rsyslog.d/systemd-drivel.conf
> which contains patterns like this:
> 
> :programname, isequal, "systemd-logind" ~
> :msg, contains, "Activating via systemd" ~
> :msg, contains, "Activation via systemd failed" ~
> :msg, contains, "org.freedesktop.systemd" ~
> 
> You ought to be able to do something like:
> 
> :msg, contains, "selinux sandbox not useful" ~
> 
> in a similar file to get rid of the sandbox messages.
> (Note that the trailing tilde characters are part of
> the pattern, not some mail artifact :-)

well, thats a option while i would love to kill the root cause

on the other hand i have around hundret such rules in rsyslog.conf
so who cares about one or more new ones :-)

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 261 bytes
Desc: OpenPGP digital signature
URL: <http://lists.fedoraproject.org/pipermail/users/attachments/20121225/e4c75f8c/attachment.sig>