Query regarding booleans

[Deependra Singh Shekhawat]

On Thu, Feb 5, 2009 at 11:26 PM, Stephen Smalley <sds at tycho.nsa.gov> wrote:

> On Wed, 2009-02-04 at 21:18 -0800, Deependra Singh Shekhawat wrote:
> >
> > Greetings,
> >
> >
> >
> > I have written a selinux policy in fedora which actually have a
> > boolean declared within the policy and when the boolean is on some
> > allow rules are written which actually come into picture. But if the
> > boolean is off the SELinux denial message doesn't suggest the user to
> > actually switch on the boolean. I have seen in the normal case with
> > the default booleans this is not the case and the denial actually
> > suggest the user to switch on the boolean. I believe I need to do
> > something more then what I am currently doing that's why I am asking
> > here.
> >
> >
> >
> > Can you suggest me anything regarding this ?
>
> If you feed the denial message to audit2why, does it suggest changing
> the boolean?
>
> --
> Stephen Smalley
> National Security Agency
>
>

Sorry for a late reply.

Yes it says to look for boolean settings but it doesn't mention any boolean
name as such.

Thanks
-- 
Type bits /keyID    Date       User ID
pub  1024D/483B234C 2007/06/29 Deependra Singh Shekhawat (Fedora Project) <
jeevanullas at gmail.com>
    Key fingerprint = ED45 62EA A4D7 53FB 44C7  774A D55B F3F0 483B 234C
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/fedora-selinux-list/attachments/20090211/d94150a3/attachment.htm>