On Wed, 15 Mar 2006 12:09:55 EST, Steve Grubb said:
On my system, I had a hald avc message repeat 5 times. It was nothing
to do
with socketcall. The trick to recreating the problem seems to be not having
audit rules loaded and letting normal system avcs do their thing.
Yep, that would be my config - /etc/audit.rules and /etc/auditd.conf are
as shipped in the RPM (audit-1.1.5-1).