From: Steve Grubb <sgrubb@redhat.com>
To: linux-audit@redhat.com
Subject: Re: [PATCH 00/07][RFC] RACF audit plugin
Date: Fri, 28 Sep 2007 18:43:29 -0400 [thread overview]
Message-ID: <200709281843.30015.sgrubb@redhat.com> (raw)
In-Reply-To: <fdjqi0$vk2$1@sea.gmane.org>
On Friday 28 September 2007 17:09:20 Klaus Heinrich Kiwi wrote:
> On Fri, 28 Sep 2007 10:28:07 -0300, Klaus Heinrich Kiwi wrote:
> > TODO list:
> > ==========
> > - SELinux policy (currently, the plugin runs under the audit daemon
> > domain, which denies some network operations, for example)
>
> Steve,
>
> you mentioned in an IRC chat that dwalsh has made a nice GUI tool for
> building new policy - can you point it out??
You need to have policycoreutils-gui package installed. In F7, bring up the SE
Linux Administration tool in System | Administration. Select the Policy
Module item in the left window pane, then click on New button in tool bar.
This starts the druid. On rawhide/F8, I think its broken out as its own
program in Applications | System Tools menu item.
Dan wrote a nice article about using this policy GUI tool here:
http://www.redhatmagazine.com/2007/08/21/a-step-by-step-guide-to-building-a-new-selinux-policy-module/
Have fun....
-Steve
prev parent reply other threads:[~2007-09-28 22:43 UTC|newest]
Thread overview: 7+ messages / expand[flat|nested] mbox.gz Atom feed top
2007-09-28 13:28 [PATCH 00/07][RFC] RACF audit plugin Klaus Heinrich Kiwi
2007-09-28 18:47 ` Steve Grubb
2007-09-28 19:42 ` Klaus Heinrich Kiwi
2007-09-28 20:01 ` Steve Grubb
2007-09-28 20:18 ` Klaus Heinrich Kiwi
2007-09-28 21:09 ` Klaus Heinrich Kiwi
2007-09-28 22:43 ` Steve Grubb [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=200709281843.30015.sgrubb@redhat.com \
--to=sgrubb@redhat.com \
--cc=linux-audit@redhat.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.