service start/stop test script
Shintaro Fujiwara
shin216 at xf7.so-net.ne.jp
Wed Sep 6 20:55:06 UTC 2006
Hi.
I named your script sgrub for test and made it run.
It woked fine and I like it very much.
I was interested in your "ausearch", so
it hits the point and I think it helps for
people who write policy.
Those scripts are really needed when humans
hard to decsern which log is related to which
program.
2006-09-06 (水) の 09:27 -0700 に Steve G さんは書きました:
> Hello,
>
> I just wanted to let everyone know that I'm making a test script available to
> help policy writers (and everyone doing selinux testing). The script will go
> though /etc/rc.d/init.d and make a list of services installed. It filters out
> some that you'd really not want to run (like halt). Then it checks the service to
> see if its running. If so, it stops and starts the service. Otherwise it starts
> then stops the service. After each service cycle, it scans the audit logs to look
> for avcs. If any are found they are run through audit2allow and output. The
> script can be found here:
>
> http://people.redhat.com/sgrubb/files/testing/service-avc-test
>
> Feedback and updates are welcome.
>
> -Steve
>
> __________________________________________________
> Do You Yahoo!?
> Tired of spam? Yahoo! Mail has the best spam protection around
> http://mail.yahoo.com
>
> --
> fedora-selinux-list mailing list
> fedora-selinux-list at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-selinux-list
More information about the fedora-selinux-list
mailing list