AVC messages
Steve Grubb
sgrubb at redhat.com
Tue Jan 4 20:08:34 UTC 2005
On Tuesday 04 January 2005 14:51, Stephen Smalley wrote:
> It belongs in an audit log, but you could certainly have multiple audit
> logs, with one dedicated to SELinux (i.e. MAC) audit messages.
One of the reasons I'm asking is because its not controlable via the audit
interface. Without any audit rules loaded, you get SE Linux audit messages
filling up the logs.
If you used laus, for example, does avc messages wind up in the logs?
-Steve Grubb
More information about the Linux-audit
mailing list