<div class="gmail_quote">On Thu, Feb 5, 2009 at 11:26 PM, Stephen Smalley <<a href="mailto:sds@tycho.nsa.gov" target="_blank">sds@tycho.nsa.gov</a>> wrote: <blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"> <div>On Wed, 2009-02-04 at 21:18 -0800, Deependra Singh Shekhawat wrote: > > Greetings, > > > > I have written a selinux policy in fedora which actually have a > boolean declared within the policy and when the boolean is on some > allow rules are written which actually come into picture. But if the > boolean is off the SELinux denial message doesn't suggest the user to > actually switch on the boolean. I have seen in the normal case with > the default booleans this is not the case and the denial actually > suggest the user to switch on the boolean. I believe I need to do > something more then what I am currently doing that's why I am asking > here. > > > > Can you suggest me anything regarding this ? </div>If you feed the denial message to audit2why, does it suggest changing the boolean? -- Stephen Smalley National Security Agency </blockquote></div> Sorry for a late reply. Yes it says to look for boolean settings but it doesn't mention any boolean name as such. Thanks -- Type bits /keyID Date User ID pub 1024D/483B234C 2007/06/29 Deependra Singh Shekhawat (Fedora Project) <<a href="mailto:jeevanullas@gmail.com" target="_blank">jeevanullas@gmail.com</a>> Key fingerprint = ED45 62EA A4D7 53FB 44C7 774A D55B F3F0 483B 234C