On Thu, 2007-02-08 at 16:09 +0000, Dan Track wrote:
I've tried to capture the process information that is triggiring
these
alerts but so far I'm failing. Basically the web page is just a form
which you submit as soon as you press the submit button the whole
process is over in a second.
Well, you could just wrap the script under strace or autrace or
something similar.
Question: What happens if you don't allow the getsession permission but
just fix up the file permissions by running chcon as I suggested? Does
the getsession denial actually prevent it from working?
--
Stephen Smalley
National Security Agency