| 1 |
You can run the log through audit2why and audit2allow to get a feel for |
| 2 |
what's going on in policy. Don't directly rely on audit2allow since I |
| 3 |
think it still orients itself to the old modular example policy and not |
| 4 |
refpolicy. |
| 5 |
|
| 6 |
Check your booleans. I spotted one thing right off the bat (urandom) |
| 7 |
which is probably due to the boolean global_ssp not being true. This |
| 8 |
should be true for gentoo systems, but for some reason, the ebuild |
| 9 |
defaults it to false. |
| 10 |
|
| 11 |
Will Keaney wrote: |
| 12 |
> I've just finished updating my SELinux VM, but still get a lot of avc |
| 13 |
> denials in /var/log/syslog. |
| 14 |
> What is the recommended method of changing |
| 15 |
> the SELinux policy? I seem to remember PeBenito saying in IRC that |
| 16 |
> editing the policy files directly is not recommended. |
| 17 |
> |
| 18 |
> On the off chance that someone has some insight into what might be |
| 19 |
> causing these errors, I'm attaching the output of |
| 20 |
> grep "Nov 18 16:2" /var/log/syslog | cut -d " " -f 7- | grep avc |
| 21 |
> |
| 22 |
> |
| 23 |
> Thanks, |
| 24 |
> |
| 25 |
> Will Keaney |
| 26 |
> uberpinguin |
| 27 |
> |
| 28 |
|
| 29 |
-- |
| 30 |
gentoo-hardened@g.o mailing list |
Archives