[Selinux-commits] SF.net SVN: selinux: [2851] trunk/policycoreutils/audit2allow/audit2allow

[<ssm...@us...>]

Revision: 2851
          http://selinux.svn.sourceforge.net/selinux/?rev=2851&view=rev
Author:   ssmalley
Date:     2008-03-18 13:35:33 -0700 (Tue, 18 Mar 2008)

Log Message:
-----------
Author: Daniel J Walsh
Email: dw...@re...
Subject: Audit2allow/audit2why patch for policycoreutils.
Date: Tue, 18 Mar 2008 11:27:06 -0400

Reveals dontaudit rules in policy.

Modified Paths:
--------------
    trunk/policycoreutils/audit2allow/audit2allow

Modified: trunk/policycoreutils/audit2allow/audit2allow
===================================================================
--- trunk/policycoreutils/audit2allow/audit2allow	2008-03-18 20:28:49 UTC (rev 2850)
+++ trunk/policycoreutils/audit2allow/audit2allow	2008-03-18 20:35:33 UTC (rev 2851)
@@ -247,6 +247,11 @@
                     print "\t\tPossible mismatch between this policy and the one under which the audit message was generated.\n"
                     print "\t\tPossible mismatch between current in-memory boolean settings vs. permanent ones.\n"
                     continue
+                if rc == audit2why.DONTAUDIT:
+                    print "\t\tUnknown - should be dontaudit'd by active policy\n",
+                    print "\t\tPossible mismatch between this policy and the one under which the audit message was generated.\n"
+                    print "\t\tPossible mismatch between current in-memory boolean settings vs. permanent ones.\n"
+                    continue
                 if rc == audit2why.BOOLEAN:
                     if len(bools) > 1:
                         print "\tOne of the following booleans was set incorrectly."


This was sent by the SourceForge.net collaborative development platform, the world's largest Open Source development site.