Re: [gentoo-hardened] Questions about SELinux

2016-11-14 Thread Luis Ressel
On Sun, 13 Nov 2016 16:29:00 -0600 R0b0t1 wrote: > If there is no policy package installed and there is not one in the > tree, you are on your own until one is written. I would double check > to ensure one exists because: 1) To the best of my knowledge, there > are logging policies available, and

Re: [gentoo-hardened] Questions about SELinux

2016-11-13 Thread R0b0t1
On Sat, Nov 12, 2016 at 10:45 AM, Robert Sharp wrote: > > There does not appear to be any specific rsyslog selinux package so I assume > it should all be syslog-related and already in the core policy (although I > cannot find it there). I also note that Red Hat has a page on setting up > Rsyslog i

Re: [gentoo-hardened] Questions about SELinux

2016-11-12 Thread Jason Zaman
On Sat, Nov 12, 2016 at 04:45:23PM +, Robert Sharp wrote: > Hi there, > > is this the best place to raise questions about SELinux, or would I be > better trying chat? I am making a big effort to get to enforcing strict > on a simple server and I am struggling a little. Here is good, there i

Re: [gentoo-hardened] Questions about SELinux

2016-11-12 Thread Brant Williams
Hello, Robert. Do you have the package "app-admin/setools" installed? If so, you can run "cat /var/log/audit/audit.log | audit2why" to get an explanation of why the denials occur, with suggestions for fixing them. Of course, if your system is logging AVC denials elsewhere, adjust the command acco

[gentoo-hardened] Questions about SELinux

2016-11-12 Thread Robert Sharp
Hi there, is this the best place to raise questions about SELinux, or would I be better trying chat? I am making a big effort to get to enforcing strict on a simple server and I am struggling a little. For example, I run Rsyslog and I have lots of AVCs concerning denied sendto's to /dev/log.