On Tue, 22 Jan 2002, Westerman, Mark wrote:

> I am not getting all my deny messages in development mode.
> I get a permission denied in enforcing mode, but
> where I change to permisive I do not get a permission denied.
> No messages show up either way.

The AVC rate limit should only be applied when in enforcing mode. If you built your kernel with the development mode option and are in permissive mode, then every AVC denial should be audited. Try again, this time checking the output of 'dmesg' as well as your /var/log/messages file. Make sure that you are in permissive mode with 'avc_enforcing'. Check both for avc messages and for security_compute_sid messages.

--
Stephen D. Smalley, NAI Labs
ssmalley@nai.com





--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.