Skip to contentSkip to conversation

sepolgen: process USER_AVC messages

PATCH In review Karl MacMillan 1 participant 2 messages Mar 1, 2007 SELinux security module

lore
Share & tools
lore

Karl MacMillan

author
#0 lore raw

PATCH 1/1 sepolgen: process USER_AVC messages

This patch adds USER_AVC messages to the message types parsed by sepolgen.

sepolgen/src/sepolgen/audit.py +1 -1
diff -r 9bb2118cf4a4 sepolgen/src/sepolgen/audit.py
@@ -32,7 +32,7 @@ def get_audit_msgs():
        string contain all of the audit messages returned by ausearch.
     """
     import subprocess
-    output = subprocess.Popen(["/sbin/ausearch", "-m", "AVC,MAC_POLICY_LOAD,DAEMON_START"],
+    output = subprocess.Popen(["/sbin/ausearch", "-m", "AVC,USER_AVC,MAC_POLICY_LOAD,DAEMON_START"],
                               stdout=subprocess.PIPE).communicate()[0]
     return output

--
This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to [email protected] with the words "unsubscribe selinux" without quotes as the message.

author
#1 lore raw
Quoted 7 lines · Karl MacMillan

This patch adds USER_AVC messages to the message types parsed by sepolgen.

diff -r 9bb2118cf4a4 sepolgen/src/sepolgen/audit.py

sepolgen/src/sepolgen/audit.py def get_audit_msgs(): · line 38

Quoted 8 lines
sepolgen/src/sepolgen/audit.py +1 -1
@@ -32,7 +32,7 @@ def get_audit_msgs():
        string contain all of the audit messages returned by ausearch.
     """
     import subprocess
-    output = subprocess.Popen(["/sbin/ausearch", "-m", "AVC,MAC_POLICY_LOAD,DAEMON_START"],
+    output = subprocess.Popen(["/sbin/ausearch", "-m", "AVC,USER_AVC,MAC_POLICY_LOAD,DAEMON_START"],
                               stdout=subprocess.PIPE).communicate()[0]
     return output

This and the other two patches for refpolicy output style and interface call parameter extraction were merged into trunk.

Karl

--
This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to [email protected] with the words "unsubscribe selinux" without quotes as the message.