On Friday 28 September 2007 17:09:20 Klaus Heinrich Kiwi wrote: > On Fri, 28 Sep 2007 10:28:07 -0300, Klaus Heinrich Kiwi wrote: > > TODO list: > > ========== > > - SELinux policy (currently, the plugin runs under the audit daemon > > domain, which denies some network operations, for example) > > Steve, > > you mentioned in an IRC chat that dwalsh has made a nice GUI tool for > building new policy - can you point it out??
You need to have policycoreutils-gui package installed. In F7, bring up the SE Linux Administration tool in System | Administration. Select the Policy Module item in the left window pane, then click on New button in tool bar. This starts the druid. On rawhide/F8, I think its broken out as its own program in Applications | System Tools menu item. Dan wrote a nice article about using this policy GUI tool here: http://www.redhatmagazine.com/2007/08/21/a-step-by-step-guide-to-building-a-new-selinux-policy-module/ Have fun.... -Steve -- Linux-audit mailing list [email protected] https://www.redhat.com/mailman/listinfo/linux-audit
