auditctl se_sen & se_clr

Michael C Thompson thompsmc at us.ibm.com
Fri May 19 15:07:13 UTC 2006


Hey all,

I'm trying to figure out how the se_sen and se_clr labels are supposed 
to be used with auditctl.

Here is the selinux context:
subj=root:staff_r:staff_t:s0-s15:c0.c255
       ^      ^       ^        ^
    se_user   ^    se_type     ^
            se_role          se_clr & se_sen

What is the difference between se_clr and se_sen? And if you have any 
enlightening examples, that would be appreciated.

Thanks,
Mike




More information about the Linux-audit mailing list