3 ms·
The problem I found (on Centos 8) is that audit sometimes denies but nothing is logged. I found this is the case when an apache script tries to kill another pro
by cpncrunch 5y ago
The problem I found (on Centos 8) is that audit sometimes denies but nothing is logged. I found this is the case when an apache script tries to kill another process. It required 2 separate policies: one of which audit2allow came up with, and another I had to figure out myself after a whole bunch of time scouring stackoverflow. After that I just gave up on selinux and turned it off, as I just couldn't trust it.
If it actually did what it was supposed to do in a reasonable manner, people would use it.
- recentdarkness 5y ago> The problem I found (on Centos 8) is that audit sometimes denies but nothing is logged I doubt that. journalctl has always given me something when there was an actual denial. You might just not have looked right
- cpncrunch 5y agoI did. It is trivial to recreate.