[redhat-lspp] Re: RHEL5 Kernel with labeled networking
Steve Grubb
sgrubb at redhat.com
Wed Oct 4 16:25:28 UTC 2006
On Tuesday 03 October 2006 17:26, Klaus Weidner wrote:
> Can ausearch handle the auditallow AVC records in the audit log correctly
> for common fields such as auid and subject MLS label?
Yes it can, but there's no way to distinguish the message's proper meaning.
You get an AVC with granted. How do you figure out that was a configuration
change?
-Steve
More information about the redhat-lspp
mailing list