[gentoo-hardened] debug information in avc.log?

[gentoo-hardened] debug information in avc.log?

[Jan V]

Hello,

I wonder if it's possible to set up selinux to do
debug logging?
I would like to extend the information logged in the
avc/kern.log, for example more details in the
"name=..." field. Is there a way?

Best Regards,
Jan



	

	
		
___________________________________________________________ 
Telefonate ohne weitere Kosten vom PC zum PC: http://messenger.yahoo.de
-- 
gentoo-hardened@gentoo.org mailing list

Re: [gentoo-hardened] debug information in avc.log?

[Chris PeBenito]

[-- Attachment #1: Type: text/plain, Size: 728 bytes --]

On Mon, 2006-01-23 at 19:00 +0100, Jan V wrote:
> I wonder if it's possible to set up selinux to do
> debug logging?
> I would like to extend the information logged in the
> avc/kern.log, for example more details in the
> "name=..." field. Is there a way?

The denials provide all of the information available at that point in
the system call, you can't get any more information.  It sounds like
what you want is the audit subsystem and auditd (sys-process/audit).

-- 
Chris PeBenito
<pebenito@gentoo.org>
Developer,
Hardened Gentoo Linux
Embedded Gentoo Linux
 
Public Key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xE6AF9243
Key fingerprint = B0E6 877A 883F A57A 8E6A  CB00 BC8E E42D E6AF 9243


[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 189 bytes --]