| 1 |
On Mon, 2006-01-23 at 19:00 +0100, Jan V wrote: |
| 2 |
> I wonder if it's possible to set up selinux to do |
| 3 |
> debug logging? |
| 4 |
> I would like to extend the information logged in the |
| 5 |
> avc/kern.log, for example more details in the |
| 6 |
> "name=..." field. Is there a way? |
| 7 |
|
| 8 |
The denials provide all of the information available at that point in |
| 9 |
the system call, you can't get any more information. It sounds like |
| 10 |
what you want is the audit subsystem and auditd (sys-process/audit). |
| 11 |
|
| 12 |
-- |
| 13 |
Chris PeBenito |
| 14 |
<pebenito@g.o> |
| 15 |
Developer, |
| 16 |
Hardened Gentoo Linux |
| 17 |
Embedded Gentoo Linux |
| 18 |
|
| 19 |
Public Key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xE6AF9243 |
| 20 |
Key fingerprint = B0E6 877A 883F A57A 8E6A CB00 BC8E E42D E6AF 9243 |
Archives