SE Alert windows

max bianco maximilianbianco at gmail.com
Wed May 14 18:51:05 UTC 2008


On Wed, May 14, 2008 at 11:57 AM, Jack Howarth
<howarth at bromo.msbb.uc.edu> wrote:
>    I am getting a lot of setroubleshoot entries in my messages log
> due to the pyzor and spamassassin not having proper SElinux rules
> setup for them. This results in the alert window constantly appearing
> from the menu bar whenever one of this setroubleshoot entries occur.
> Is there a way to disable the gnome SE Linux alerts without disabling
> SELinux entirely? Of course the best fix would be for pyzor and
> spamassassin to become SELinux compatible. Thanks in advance for
> any advice.
>                  Jack
>

I think what you want here is a dontaudit rule, this will supress the
AVC, I cannot find my good link to the info right now, working from
different PC than usual, but google should help you there or you can
go through these and probably find what you need :

http://selinuxproject.org/page/User_Resources

Be careful with the dontaudit rules, it supresses AVC's  which could
potentially leave you without some info if you run into trouble with
denials later on and there may be other implications as well.


Max




More information about the fedora-list mailing list