AVC messages

Stephen Smalley sds at epoch.ncsc.mil
Tue Jan 4 20:52:40 UTC 2005


On Tue, 2005-01-04 at 15:51, Steve Grubb wrote:
> I'm not really thinking about moving the rules. Just about how to silence it 
> or select what kinds of messages it sends to auditd.

The policy lets you configure what is audited (via dontaudit rules to
selectively suppress auditing of denials and via auditallow rules to
selectively enable auditing of grantings).  What more do you need? 

-- 
Stephen Smalley <sds at epoch.ncsc.mil>
National Security Agency




More information about the Linux-audit mailing list