On Tuesday 04 January 2005 15:52, Stephen Smalley wrote:
 The policy lets you configure what is audited (via dontaudit rules
to
 selectively suppress auditing of denials and via auditallow rules to
 selectively enable auditing of grantings).   
But wouldn't this mean the admin would have to have policy source installed? 
That's far too messy.
 What more do you need?  
auditctl -selinux no_avc
;)
-Steve Grubb