On Friday 20 May 2005 13:06, Stephen Smalley wrote:
Nothing is using AUDIT_AVC presently AFAICS. What is its intended
use?
Its in our kernel. I think you may have missed the patch?
type=AVC msg=audit(1116601669.356:12016261): avc: denied { getattr } for
pid=21878 comm="named" path="/root" dev=hda2 ino=196609
scontext=root:system_r:named_t tcontext=system_u:object_r:default_t
tclass=dir
-Steve