FC4 update and SELINUX

[Daniel J Walsh]

Richard Irving wrote:
>  I seem to remember an email passing this way
> that the latest FC4 targeted update,
> nagios stopped working.
>
> I recall the response was
> "setenforce permissive, and capture
> the audit trail"... or something of that nature.
>
> Can anyone help refresh my memory ?
>
> As, I just got around to testing FC4 on an AMD64,
> with it set to "permissive" it -all- works..
> with NO AVC messages...
>
Are you looking in /var/log/audit/audit.log for avcs?

You can turn off all the dontaudit rules by installing 
selinux-policy-targeted-source
cd /etc/selinux/targeted/src/policy
make enableaudit; make load

make clean; make load will set it back.


> and with it set to "enforcing", it stops
> working ...
> with NO AVC messages.
>
> I tried "audit2allow -i /dev/null",
> but for some reason, that doesn't help me write policy.
>
> :-P
>
> Anyone have more informative output, or subtle clues ?
>
> :-\
>
> TIA!
>
>
>
>
>
> -- 
> fedora-selinux-list mailing list
> fedora-selinux-list at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-selinux-list


--