AVC messages
Stephen Smalley
sds at epoch.ncsc.mil
Tue Jan 4 20:52:40 UTC 2005
On Tue, 2005-01-04 at 15:51, Steve Grubb wrote:
> I'm not really thinking about moving the rules. Just about how to silence it
> or select what kinds of messages it sends to auditd.
The policy lets you configure what is audited (via dontaudit rules to
selectively suppress auditing of denials and via auditallow rules to
selectively enable auditing of grantings). What more do you need?
--
Stephen Smalley <sds at epoch.ncsc.mil>
National Security Agency
More information about the Linux-audit
mailing list