dontaudit

dontaudit

[Tom]

Is there a way to globally turn off dontaudit ?

I have a very weird problem I don't understand which doesn't give any
error messages, so I assume that some dontaudit rule suppresses them.
However, I don't want to go through three or four policy files, disable
all of them, recompile, find out that it must be somewhere else and
repeat until I'm crazy.

so what is the best way to globally turn off dontaudit? grep -v
dontaudit policy.conf  ?


-- 
PGP/GPG key: http://web.lemuria.org/pubkey.html
pub  1024D/2D7A04F5 2002-05-16 Tom Vogt <tom@lemuria.org>
     Key fingerprint = C731 64D1 4BCF 4C20 48A4  29B2 BF01 9FA1 2D7A 04F5

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: dontaudit

[Russell Coker]

On Mon, 28 Oct 2002 12:55, Tom wrote:
> Is there a way to globally turn off dontaudit ?
>
> I have a very weird problem I don't understand which doesn't give any
> error messages, so I assume that some dontaudit rule suppresses them.
> However, I don't want to go through three or four policy files, disable
> all of them, recompile, find out that it must be somewhere else and
> repeat until I'm crazy.
>
> so what is the best way to globally turn off dontaudit? grep -v
> dontaudit policy.conf  ?

grep -v ^dontaudit policy.conf > p ; mv p policy.conf ; make load

I guess it might make sense to have an entry in the Makefile to allow "make 
dontaudit" for this...

-- 
http://www.coker.com.au/selinux/   My NSA Security Enhanced Linux packages
http://www.coker.com.au/bonnie++/  Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/    Postal SMTP/POP benchmark
http://www.coker.com.au/~russell/  My home page


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: dontaudit

[Tom]

On Mon, Oct 28, 2002 at 01:57:29PM +0100, Russell Coker wrote:
> > so what is the best way to globally turn off dontaudit? grep -v
> > dontaudit policy.conf  ?
> 
> grep -v ^dontaudit policy.conf > p ; mv p policy.conf ; make load
> 
> I guess it might make sense to have an entry in the Makefile to allow "make 
> dontaudit" for this...

Actually, the more I work with policies the more I want various
policies, i.e. "create a new one but keep the old". Should be possible
right now with some manual work, but something like Lilo where you can
also boot from a choice of kernels would be better.


-- 
PGP/GPG key: http://web.lemuria.org/pubkey.html
pub  1024D/2D7A04F5 2002-05-16 Tom Vogt <tom@lemuria.org>
     Key fingerprint = C731 64D1 4BCF 4C20 48A4  29B2 BF01 9FA1 2D7A 04F5

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.