All of lore.kernel.org
 help / color / mirror / Atom feed
From: Stephen Smalley <sds@tycho.nsa.gov>
To: kim.lawson-jenkins@nrl.navy.mil, selinux@tycho.nsa.gov
Subject: Re: No AVCs written to /var/log/messages
Date: Tue, 06 May 2014 10:11:18 -0400	[thread overview]
Message-ID: <5368ED86.8010508@tycho.nsa.gov> (raw)
In-Reply-To: <006701cf6934$1d4c4fb0$57e4ef10$@nrl.navy.mil>

On 05/06/2014 10:04 AM, Kim Lawson-Jenkins wrote:
> Hi,
> 
>  
> 
> I’m working on an embedded system using SELinux.  The audit daemon is
> not running so AVC errors should be written to /var/log/messages. 
> SELinux is running in permissive mode and during a system reboot I see a
> few AVC errors written to a console.  However when I look in
> /var/log/messages there are no AVC errors.  I haven’t seen a similar
> problem reported in the past.  Does anyone have any ideas why AVC errors
> would not be written to /var/log/messages if the audit daemon is not
> running?  I’ve checked syslog.conf and all messages with a priority of
> warning and above should be written to /var/log/messages.

Do they show up in dmesg output (or if you cat /proc/kmsg)?

  reply	other threads:[~2014-05-06 14:11 UTC|newest]

Thread overview: 4+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2014-05-06 14:04 No AVCs written to /var/log/messages Kim Lawson-Jenkins
2014-05-06 14:11 ` Stephen Smalley [this message]
2014-05-06 14:54   ` Kim Lawson-Jenkins
2014-05-06 14:12 ` Eric Paris

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=5368ED86.8010508@tycho.nsa.gov \
    --to=sds@tycho.nsa.gov \
    --cc=kim.lawson-jenkins@nrl.navy.mil \
    --cc=selinux@tycho.nsa.gov \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.