Hi, ALL: I cannot find any log tools to log all the files access, including delete/remove/read/write operations. So i want to know whether SELinux upport the functions. Thanks for your responce!
Best Regards!
Bai Shuwei
On Thu, Aug 13, 2009 at 07:18:17PM +0800, Bai Shuwei wrote:
Hi, ALL: I cannot find any log tools to log all the files access, including delete/remove/read/write operations. So i want to know whether SELinux upport the functions. Thanks for your responce!
Best Regards!
the audit suite can do logging: see man auditctl. You can get selinux to log grants by adding auditallow rules. By default selinux logs denied access unless the denial is hidden using dontaudit.
Bai Shuwei
-- Love other people, as same as love yourself! Don't think all the time, do it by your hands!
Personal URL: http://dslab.lzu.edu.cn:8080/members/baishw/ E-Mail: baishuwei@gmail.com or baishuwei@dslab.lzu.edu.cn
-- fedora-selinux-list mailing list fedora-selinux-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-selinux-list
On 08/13/2009 07:18 AM, Bai Shuwei wrote:
Hi, ALL: I cannot find any log tools to log all the files access, including delete/remove/read/write operations. So i want to know whether SELinux upport the functions. Thanks for your responce!
Best Regards!
Bai Shuwei
man auditctl
Audit subsystem is what you want.
-- fedora-selinux-list mailing list fedora-selinux-list@redhat.com https://www.redhat.com/mailman/listinfo/fedora-selinux-list
selinux@lists.fedoraproject.org