Audit message

[dexter]

On Sat January 13 2007 15:16, Anne Wilson wrote:
> On Saturday 13 January 2007 14:01, dexter wrote:
> > On Fri January 12 2007 10:18, Anne Wilson wrote:
> > > Can someone tell me what this is about?
> > >
> > >  *** Denials ***
> > >     system_u system_u (capability): 1 times
> > >     system_u system_u (netlink_audit_socket): 4 times
> > >
> > > Anne
> >
> > SElinux:
> > Use the sealert program to get the low-down info on whats goin on and
> > possible fixes.
> > from a rawhide box:
> > [root at dexterFC7 ~]# rpm -q --whatprovides `which sealert`
> > setroubleshoot-1.8.14-1.fc7
> >
> >
> > ...dex
>
> Thanks, Dex.  I should be able to get that.  Is there anything I should be
> aware of, running it on a standard FC6 install?

No it's nicely intergrated in GNOME:space (menus,icons,etc) erm these demons 
need to be on audit & setroubleshoot also sealert needs to run as root or you 
can't open or see the file /var/log/audit/audit.log so I don't use the menu 
and use this command line:
sudo sealert -b


...dex
Thank's for comming :-)

 
 
Send instant messages to your online friends http://uk.messenger.yahoo.com