Displaying 1 result from an estimated 1 matches for "disable_dontaudit".
2019 Jan 18
1
SElinux AVC signull
...denial would
not happen. If you don't have it installed policycoreutils-python
provides the audit2allow and audit2why binaries which can help you
generate a policy to avoid this denial if you want.
Also, I often find that to truly diagnose the issue, I need to run the
following:
# semodule --disable_dontaudit --build
# setenforce permissive
# tail -f /var/log/audit/audit.log | grep denied | tee ~/denials.out
... then reproduce the problem, and kill the tail. The resulting
denials.out file will have a lot of unrelated denials, but if you run
audit2allow against the entire file, you'll be able to de...