CentOS - Apr 2006 - SELinux modification

I installed SeLinux in warn mode.  HOw do i check to see what it is 
wanring about?  This wil help me in make a decision to turn it to active 
mode..:)
-- 
My "Foundation" verse:
Isa 54:17  No weapon that is formed against thee shall prosper; and 
every tongue that shall rise against thee in judgment thou shalt 
condemn. This is the heritage of the servants of the LORD, and their 
righteousness is of me, saith the LORD.

-- carpe ductum -- "Grab the tape"
CDTT (Certified Duct Tape Technician)

Linux user #322099
Machines:
206822
256638
276825
http://counter.li.org/

On 4/18/06, William Warren <hescominsoon at
emmanuelcomputerconsulting.com> wrote:
> I installed SeLinux in warn mode.  HOw do i check to see what it is
> wanring about?  This wil help me in make a decision to turn it to active
> mode..:)
If you're running auditd, check in /var/log/audit/ if not they're in
/var/log/messages
Things selinux doesn't like will show up with (avc).


--
Any sufficiently advanced technology is indistinguishable from magic.
-Arthur C. Clarke

There are selinux docs at
http://mirror.centos.org/centos/4/docs/html/rhel-selg-en-4/
in case you (or anyone else) did not know.


__________________________________________________
Improve the mailing list by performing a simple search 
before posting and reading the FAQ/etiquette. Protect the
integrity of your installation with the yum plugins.

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com

In-Reply-To: : <44457936.4090207 at emmanuelcomputerconsulting.com>


On Tue, 18 Apr 2006 19:41:42 -0400,
William Warren <hescominsoon at emmanuelcomputerconsulting.com> wrote:
> I installed SeLinux in warn mode.  HOw do i check to see what it
> is wanring about?  This wil help me in make a decision to turn it
> to active mode..:)
Try this:

$ audit2allow --help
audit2allow [-d] [-v] [-l] [-i <inputfile> ] [-o <outputfile>]
        -d      read input from output of /bin/dmesg
        -v      verbose output
        -l      read input only after last "load_policy"
        -i      read input from <inputfile>
        -o      append output to <outputfile>

$ audit2allow -v -1 /var/log/messages

This will not only tell you what SELinux is complaining about, it will
give you the basic information needed to configure your local policy file
in:

/etc/selinux/targeted/src/policy/domains/misc/local.te

To implement policy changes, edit the local.te file as indicated by
audit2allow and rebuild your SELinux policy files with:

$ /etc/selinux/targeted/src/policy/make reload

Be advised however that audit2allow may suggest policy alterations that
are broader than strictly necessary.  It is probably worth your while to
post your contemplated policy changes here and get some informed opinions
about whether they actually should be more restrictive.

To do any of this you need to first install the selinux-policy-targeted rpm.

Regards,
Jim


-- 
***     e-mail is NOT a secure channel     ***
James B. Byrne                mailto:ByrneJB.<token>@Harte-Lyne.ca
Harte & Lyne Limited          http://www.harte-lyne.ca
9 Brockley Drive              vox: +1 905 561 1241
Hamilton, Ontario             fax: +1 905 561 0757
Canada  L8E 3CE               delivery <token> = hal