On Mon, Jul 7, 2008 at 11:02 AM, Frank Murphy frankly3d@gmail.com wrote:
[root@frank-01 ~]# audit2allow -M local < /tmp/avcs -bash: /tmp/avcs: No such file or directory
Where to go next.
The logs are mailed to "root@localhost" by exim.
What and where need to be allowed.
Have already done a /sbin/fixfiles relabel. (mislabelled stuff)
To allow for future logs?
/tmp/avcs ?? The logs are either in /var/log/audit.log (if audit is running) otherwise in syslog (in this case passing -D to audit2allow will use them)