Re: wish-list item for selinux policy analyss

[Luke Kenneth Casson Leighton <lkcl@lkcl.net>]

On Thu, Jun 30, 2005 at 03:05:56AM -0400, Ivan Gyurdiev wrote:
 
> This is just my personal opinion - it has nothing to do with
> the company I work for, or some grand conspiracy to maintain
> control of the policy (no such thing exists, since it is open
> source). I don't understand why you need an internal kernel 
> change to do what you like, however - what's wrong with working 
> on top of the audit log? Just comment out all the rules you're
> interested in, and look for denials?
 
 hiya ivan,

 yes, joshua described something which would achieve the same thing
 using audit logging.

 (thank you joshua!)

 l.

-- 
--
<a href="http://lkcl.net">http://lkcl.net</a>
--

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.