RE: Turn off "dontaudit" rules in monolithic policy

[Hung Truong <hung.truong@tridsys.com>]

[-- Attachment #1: Type: text/plain, Size: 1010 bytes --]

I am using version 3.7.19-155el6.6.



*From:* Vu, Joseph [mailto:joseph.vu@boeing.com]
*Sent:* Tuesday, January 22, 2013 9:19 AM
*To:* Hung Truong; SELinux
*Subject:* RE: Turn off "dontaudit" rules in monolithic policy



Hung,



I have been trying to rebuild monolithic policy and was not able to.

What version of SELinux Policy and RHT are you using?


------------------------------

*From:* owner-selinux@tycho.nsa.gov
[mailto:owner-selinux@tycho.nsa.gov<owner-selinux@tycho.nsa.gov>]
*On Behalf Of *Hung Truong
*Sent:* Monday, January 21, 2013 11:25 AM
*To:* SELinux
*Subject:* Turn off "dontaudit" rules in monolithic policy



I have a custom monolithic build based on RHEL6 policy.
I get this error when try to turn off dontaudit rules:

$ semodule -DB


libsemanage.semanage_link_sandbox: Could not access sandbox base file
/etc/selinux/targeted/modules/bmp/base.pp. (No such file or directory)

Is there other way to turn off dontaudit rules in a monilithic policy?



Many thanks,

--Hung Truong

[-- Attachment #2: Type: text/html, Size: 4949 bytes --]