Dne 24. 06. 20 v 21:03 Iñaki Ucar napsal(a):
3. Use audit2allow to convert them to rules.
4. Repeat until you don't get any more complaints.
And I cannot believe my eyes. Is this *really* the way to implement
SELinux policies? It seems like a joke to me.
No. It is a bit complicated. You should run audit2allow with -R option.
And you should actually review what audit2allow produce. But otherwise... yes, it is that
simple.
--
Miroslav Suchy, RHCA
Red Hat, Associate Manager ABRT/Copr, #brno, #fedora-buildsys