audit2allow -M local < /tmp/avcs ?

[drago01]

On Mon, Jul 7, 2008 at 11:02 AM, Frank Murphy <frankly3d at gmail.com> wrote:
> [root at frank-01 ~]# audit2allow -M local < /tmp/avcs
> -bash: /tmp/avcs: No such file or directory
>
>
> Where to go next.
>
> The logs are mailed to "root at localhost" by exim.
>
> What and where need to be allowed.
>
> Have already done a /sbin/fixfiles relabel. (mislabelled stuff)
>
> To allow for future logs?

/tmp/avcs ??
The logs are either in /var/log/audit.log (if audit is running)
otherwise in syslog (in this case passing -D to audit2allow will use
them)