I am not getting all my deny messages in development mode. I get a permission denied in enforcing mode, but where I change to permisive I do not get a permission denied. No messages show up either was.
There was a patch in the previous version. Is this patch in the current version ?
Mark
-- You have received this message because you are subscribed to the selinux list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message.From: Stephen Smalley <sds_at_tislabs.com>
On Tue, 22 Jan 2002, Westerman, Mark wrote:
> I am not getting all my deny messages in development mode.
> I get a permission denied in enforcing mode, but
> where I change to permisive I do not get a permission denied.
> No messages show up either way.
The AVC rate limit should only be applied when in enforcing mode. If you built your kernel with the development mode option and are in permissive mode, then every AVC denial should be audited. Try again, this time checking the output of 'dmesg' as well as your /var/log/messages file. Make sure that you are in permissive mode with 'avc_enforcing'. Check both for avc messages and for security_compute_sid messages.
-- Stephen D. Smalley, NAI Labs ssmalley@nai.com -- You have received this message because you are subscribed to the selinux list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message.
This archive was generated by hypermail 2.2.0 on Wed 11 Jun 2008 - 08:10:54 EDT