Le 05/11/15 09:32, Laurent Bigonville a écrit :
Le 05/11/15 04:23, Steve Grubb a écrit :
I tested this on Fedora 22 and did not get a USER_AVC from dbus, but
I also
did not get an error message in syslog. So, I don't know what to make
of it.
(And for the record, I have a bz open saying that USER_AVC is the
wrong event
type. They are blaming libselinux but I blame them for not using
AUDIT_USER_MAC_POLICY_LOAD.)
The audit code in dbus has been refactored a bit in the version
present F23 and debian unstable, so it might be related to this that.
Do you still have the number of that bz bug?
BTW, systemd is also apparently sending a USER_AVC event when the policy
is reloaded.
--
Linux-audit mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/linux-audit
