i'm posting this per stephen's request:
On Mon, 2005-06-27 at 14:32 -0400, Stephen Smalley wrote:
On Mon, 2005-06-27 at 13:15 -0500, John Bray wrote:
> every time i try to run seaudit, it immediately crashes with a
> segmentation fault. the following errors appear, with or without any
> arguments on the commandline:
>
> [root@junior setools-2.1.0]# seaudit -l /var/log/messages
> -p /etc/selinux/targeted/src/policy/policy.conf
<snip>
>
> wonder if anyone has any ideas or suggestions?
- Post to fedora-selinux-list for SELinux questions.
- What is your base system, FC3 or FC4?
- In FC4, unless you disable auditd, audit messages are sent by the
kernel to auditd and are written by auditd to /var/log/audit/audit.log.
- Not sure that seaudit has been updated for the associated changes.
thanks stephen. i didn't even know that there was such a list. :-)
its FC4. clean install. auditd is running.
i guess i'd misunderstood. i'd thought that with it running, the
audit.log as well as to messages.
however, if i point at audit.log instead, it does NOT segfault, but
finds no messages either. :-)
thanks for your help. i will see about getting to the selinux list.
hope your day is going well.
john