Run the command<\/p>\n
audit2allow -m local -l > local.te < \/var\/log\/audit.log<\/p><\/blockquote>\n
This will generate a local.te file that will have the policy to allow the things denied int he current audit.log<\/p>\n
You\u2019ll want to review closely to see if those are in fact the things you want to allow.<\/p>\n
To turn this into a binary module you use this command:<\/p>\n
checkmodule -M -m -o local.mod local1.te<\/p><\/blockquote>\n
To Create a policy that can be loaded into the kernel use this<\/p>\n
semodule_package -o local.pp -m local.mod<\/p><\/blockquote>\n
Then to activate it use this<\/p>\n
semodule -i local.pp<\/p><\/blockquote>\n","protected":false},"excerpt":{"rendered":"
Run the command audit2allow -m local -l > local.te < \/var\/log\/audit.log This will generate a local.te file that will have the policy to allow the things denied int he current audit.log You\u2019ll want to review closely to see if those … Continue reading