SELINUX
[!danger]
WORK IN PROGRESS
sudo yum install policycoreutils-python-utils
sudo grep audit.log /var/log/messages | audit2why
sudo grep audit.log /var/log/messages | audit2allow --module-package=auditdlocal
sudo semodule --install auditdlocal.pp
sudo ausearch --raw | audit2why
sudo ausearch --raw | audit2allow --module-package=auditdlocal
sudo semodule --install auditdlocal.pp
auditdlocal.te
module auditdlocal 1.0;
require {
type var_log_t;
type auditd_t;
class file { create open read setattr };
};
allow auditd_t var_log_t:file { create open read setattr };
sudo checkmodule -M -m -o auditdlocal.mod auditdlocal.te
sudo semodule_package -o auditdlocal.pp -m auditdlocal.mod
sudo semodule --install auditdlocal.pp