AVC messages
Steve Grubb
sgrubb at redhat.com
Tue Jan 4 20:51:15 UTC 2005
On Tuesday 04 January 2005 15:28, Stephen Smalley wrote:
> I don't see any real benefit to moving the SELinux policy audit rules
> out of the policy and into a separate audit rule database, particularly
> as you would have to then duplicate the policy abstractions in your
> audit policy.
I'm not really thinking about moving the rules. Just about how to silence it
or select what kinds of messages it sends to auditd.
-Steve Grubb
More information about the Linux-audit
mailing list