No Denial

Browder, Tom Tom.Browder at
Mon Dec 20 22:08:23 UTC 2004

> -----Original Message-----
> From: fedora-selinux-list-bounces at 
> [mailto:fedora-selinux-list-bounces at] On Behalf Of 
> Stephen Smalley
> I suspect that you don't actually want SELinux auditing here, 
> as it is just of MAC permission checks, but instead want 
> ordinary system call auditing.  There is ongoing work to 
> enhance the existing Linux audit framework and userspace 
> tools toward that end, see the linux-audit mailing list.

Thanks, Stephen, I'll check it out.

In the meantime, I've turned on enforcement and will see if that at
least is a temporary fix.  

A quick test of major programs I use shows no problems.

Tom Browder

More information about the fedora-selinux-list mailing list